PT-2024-34360 · Tinyxml2 +1 · Tinyxml2 +1

Name of the Vulnerable Software and Affected Versions: TinyXML2 versions prior to 10.0.1 Description: The issue is related to a reachable assertion for UINT MAX/16 in tinyxml2.cpp, specifically in the XMLUtil::GetCharacterRef function. This may lead to an application exit. Recommendations: For...

PYSEC-2023-175

Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 previously CVE-2023-4863. Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2...

PT-2021-23928 · Redash · Redash

Name of the Vulnerable Software and Affected Versions: Redash versions 10.0 and prior Description: Redash is a package for data visualization and sharing. The implementation of URL-loading data sources like JSON, CSV, or Excel in versions 10.0 and prior is vulnerable to advanced methods of Server...