Fedora 32 : php-symfony4 (2020-16eb328853)

Version 4.4.13 2020-09-02 - security CVE-2020-15094 Remove headers with internal meaning from HttpClient responses mpdude - bug 38024 Console Fix undefined index for inconsistent command name definition chalasr - bug 38023 DI fix inlining of non-shared services nicolas-grekas - bug 38020...

form-validator (0.0.11), heightline (1.0.1) +4 more potentially affected by CVE-2020-11022 via jquery (1.6.2)

jquery NPM version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on jquery and may be impacted: - form-validator 0.0.11 - heightline 1.0.1 - jsgrep =1.0.0, =0.1.61, =0.0.9, =0.0.15 - zappa 0.2.0 Source cves: CVE-2020-11022 Source advisory:...

DEBIAN-CVE-2011-2201

The Data::FormValidator module 4.66 and earlier for Perl, when untaintallconstraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input...