漏洞公告

OS Command injection in docker-cli-js

Use of Sha-1 in tusdotnet

Duplicate Advisory: Authentication Bypass by CSRF Weakness

Duplicate Advisory: Authentication Bypass by CSRF Weakness

Duplicate Advisory: Authentication Bypass by CSRF Weakness

Withdrawn: Laravel Framework does not sufficiently block the upload of executable PHP content.

Duplicate Advisory: Remote code execution in dask

ASP.NET Core Denial of Service Vulnerability

CSV injection in Craft CMS

Deserialization of Untrusted Data in com.jsoniter:jsoniter

Duplicate Advisory: Session Fixation

Duplicate Advisory: Use after free in libpulse-binding

Data races in unicycle

Duplicate Advisory: Data races in ticketed_lock

WITHDRAWN

Duplicate Advisory: Data races on syncpool

Assumed memory layout of std::net::SocketAddr

Queue<T> should have a Send bound on its Send/Sync traits

Singleton lacks bounds on Send and Sync.

Send/Sync bound needed on T for Send/Sync impl of RcuCell<T>

MvccRwLock allows data races & aliasing violations

Data races in model

Duplicate Advisory: Uncaught Exception in libpulse-binding