Code-Projects Simple Food Ordering System 安全漏洞

Code-Projects Simple Food Ordering System is a simple food ordering system developed by Code-Projects as open source. Versions of the Code-Projects Simple Food Ordering System prior to 1.0 contained security vulnerabilities. These vulnerabilities stemmed from an unknown feature in the database...

GHSA-JP2Q-39XQ-3W4G vulnerabilities

Vulnerabilities for packages: saf, langfuse, renovate, tileserver-gl, prism, kubeflow-pipelines...

GHSA-RF6F-7FWH-WJGH vulnerabilities

Vulnerabilities for packages: kubeflow-katib, langfuse, renovate, prism, eslint, vitess, sqlpad...

GHSA-RF6F-7FWH-WJGH vulnerabilities

Vulnerabilities for packages: prism, authentik, gitlab-rails-ce-fips, wazuh-dashboard, semaphore, kubeflow-katib, arangodb, renovate, authentik-fips, eslint, drupal, gitlab-rails-ce, langfuse-fips, vitess, wazuh-dashboard-fips, sqlpad, librechat, langfuse...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.2.25 contained security vulnerabilities. These vulnerabilities stemmed from a bypass of approval integrity in the system.run module, which could lead to the execution of binary...

MetaGPT 安全漏洞

MetaGPT is a multi-agent framework developed by MetaGPT Inc. Versions of MetaGPT 0.8.1 and earlier contained security vulnerabilities. These vulnerabilities were caused by unknown code in the DataInterpreter component file metagpt/actions/di/writeanalysiscode.py, which could allow remote executio...

USN-8107-1: Linux kernel (AWS FIPS) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8112-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - HFS+ file...

GHSA-PCGW-QCV5-H8CH vulnerabilities

Vulnerabilities for packages: teleport...

GHSA-677M-J7P3-52F9 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, redisinsight...

UTT HiPER 1200GW 安全漏洞

UTT HiPER 1200GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1200GW prior to 2.5.3-170306 contained security vulnerabilities. These vulnerabilities were caused by a buffer overflow vulnerability in the strcpy function found in the file/goform/websHostFilter...

Zimbra Collaboration 安全漏洞

Zimbra Collaboration is an open-source enterprise-level email and collaboration platform developed by Zimbra Corporation. It supports email, calendar, document management, and team collaboration features. Versions 10.0 and 10.1 of Zimbra Collaboration contain security vulnerabilities. These...

free5GC 安全漏洞

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 1.4.2 contained security vulnerabilities. These vulnerabilities stemmed from UDM’s improper handling of PATCH requests with empty supi path parameters. UDM incorrectly converted downstrea...

Bitcoin Core 安全漏洞

Bitcoin Core is an open-source client for verifying the validity of blockchain transactions. Versions of Bitcoin Core 29.x and earlier contain security vulnerabilities, which stem from integer overflow issues...

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain security vulnerabilities. These...

UltraJSON 安全漏洞

UltraJSON is an open-source, ultra-fast JSON encoder and decoder written in pure C language, and compatible with Python 3.7+. Versions of UltraJSON 5.11.0 and earlier contained security vulnerabilities; these vulnerabilities stemmed from buffer overflows or infinite loops during processing of lar...

DataEase 安全漏洞

DataEase is an open-source data visualization and analysis tool developed by DataEase. It helps users quickly analyze data and gain insights into business trends, thereby enabling improvements and optimizations in their businesses. DataEase versions 2.10.19 and earlier contain security...

FileRise 安全漏洞

FileRise is a lightweight, self-hosted web-based file manager developed by Ryan. Versions of FileRise prior to 3.8.0 contained security vulnerabilities. These vulnerabilities stemmed from insufficient filename validation at the WebDAV upload endpoint, which could lead to remote code execution...

Discourse 安全漏洞

Discourse is an open-source community discussion platform developed by Discourse. This platform includes features such as communities, email communication, and chat rooms. Versions of Discourse prior to 2026.3.0-latest.1, as well as versions before 2026.2.1 and 2026.1.2, have security...

Heimdall 安全漏洞

Heimdall is an open-source application panel and launcher developed by LinuxServer.io. Versions of Heimdall prior to 0.17.10 contained security vulnerabilities. These vulnerabilities were caused by errors in encoding URL strings, which could lead to rule bypasses...