Cross-site Scripting (XSS)

github.com/usememos/memos is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitizations in the index.ts file, which allows an attacker to inject and execute malicious JavaScript...

Privilege Escalation

librpm.so is vulnerable to privilege escalation. A local unauthenticated user who owns another ancestor directory is able to potentially gain root privileges of the system due to the lack of sanitizations in lib/fsm.c during symlink validations. This vulnerability exists due to incomplete fixes f...