PT-2026-55091

A flaw was found in Keycloak's Client Policies, specifically within the org.keycloak.protocol.oidc component. When certain condition providers client-type, client-roles, client-attributes, client-scopes are used to enforce security restrictions, the reject-ropc-grant executor is silently bypassed...

axios4go 竞争条件问题漏洞

axios4go is an HTTP client library by the individual developers at Rez Moss. A competitive condition issue vulnerability exists in axios4go versions prior to 0.6.4, which stems from the presence of a competitive condition in shared HTTP client configurations, which could lead to modification of...

OPENSUSE-SU-2023:0019-1 Security update for libheimdal

This update for libheimdal fixes the following issues: Update to version 7.8.0 - CVE-2022-42898 PAC parse integer overflows - CVE-2022-3437 Overflows and non-constant time leaks in DES,3 and arcfour - CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array - CVE-2021-44758 A nu...