CVE-2022-2889 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2889 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-2862 affecting package vim for versions less than 9.0.0325-1

CVE-2022-2862 affecting package vim for versions less than 9.0.0325-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32212 affecting package nodejs for versions less than 16.20.2-4

CVE-2022-32212 affecting package nodejs for versions less than 16.20.2-4. An upgraded version of the package is available that resolves this issue...

CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3

CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3. A patched version of the package is available...

GHSA-QPQ9-JPV4-6GWR Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow...

Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow

A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow...

CVE-2021-3632

CVE-2021-3632 is a Keycloak/WebAuthn flow flaw that allows an attacker to register a new security device or key for any user when no device exists for that user. The issue is present in Red Hat SSO 7.x as part of the 7.4.9 security updates; Red Hat advisories RHSA-2021:3527/3528/3529 list the fix...

MAL-2022-4241 Malicious code in kuvp-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5748a8ba514319f3aca366e59b06abb3d5410635f32ebf3804e778fc99d004d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kuvp-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5748a8ba514319f3aca366e59b06abb3d5410635f32ebf3804e778fc99d004d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-4515 affecting package ctags for versions less than 5.9.20220619.0-7

CVE-2022-4515 affecting package ctags for versions less than 5.9.20220619.0-7. A patched version of the package is available...

CVE-2022-1652 affecting package kernel for versions less than 5.15.55.1-1

CVE-2022-1652 affecting package kernel for versions less than 5.15.55.1-1. A patched version of the package is available...

CVE-2022-34495 affecting package kernel for versions less than 5.15.55.1-1

CVE-2022-34495 affecting package kernel for versions less than 5.15.55.1-1. A patched version of the package is available...

CVE-2022-2344 affecting package vim for versions less than 9.0.0050-2

CVE-2022-2344 affecting package vim for versions less than 9.0.0050-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-2345 affecting package vim for versions less than 9.0.0050-2

CVE-2022-2345 affecting package vim for versions less than 9.0.0050-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-32206 affecting package curl for versions less than 7.84.0-1

CVE-2022-32206 affecting package curl for versions less than 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32205 affecting package curl for versions less than 7.84.0-1

CVE-2022-32205 affecting package curl for versions less than 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32207 affecting package curl for versions less than 7.84.0-1

CVE-2022-32207 affecting package curl for versions less than 7.84.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-31150

undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5.7.1. A fix was released in version 5.8.0. Sanitizing all HTTP headers from untrusted sources to eliminate \r\n is a workaround for this...

CVE-2021-22570 affecting package mysql for versions less than 8.0.29-1

CVE-2021-22570 affecting package mysql for versions less than 8.0.29-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-27782 affecting package curl for versions less than 7.83.1-1

CVE-2022-27782 affecting package curl for versions less than 7.83.1-1. An upgraded version of the package is available that resolves this issue...