com.linecorp.centraldogma:centraldogma-server-auth-saml (0.35.0) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.79.0)

com.linecorp.armeria:armeria-saml MAVEN version 0.79.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.35.0 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.36.0) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.81.0)

com.linecorp.armeria:armeria-saml MAVEN version 0.81.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.36.0 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.38.0) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.83.0)

com.linecorp.armeria:armeria-saml MAVEN version 0.83.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.38.0 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.39.0) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.84.0)

com.linecorp.armeria:armeria-saml MAVEN version 0.84.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.39.0 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.39.1) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.85.0)

com.linecorp.armeria:armeria-saml MAVEN version 0.85.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.39.1 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.41.1) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.90.1)

com.linecorp.armeria:armeria-saml MAVEN version 0.90.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.41.1 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.41.2) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.90.2)

com.linecorp.armeria:armeria-saml MAVEN version 0.90.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.41.2 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.41.3) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.90.3)

com.linecorp.armeria:armeria-saml MAVEN version 0.90.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.41.3 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.43.4) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.97.0)

com.linecorp.armeria:armeria-saml MAVEN version 0.97.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.43.4 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.44.1) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.98.1)

com.linecorp.armeria:armeria-saml MAVEN version 0.98.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.44.1 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.44.3) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.98.3)

com.linecorp.armeria:armeria-saml MAVEN version 0.98.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.44.3 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.44.7) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.99.1)

com.linecorp.armeria:armeria-saml MAVEN version 0.99.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.44.7 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.44.9) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.99.4)

com.linecorp.armeria:armeria-saml MAVEN version 0.99.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.44.9 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (0.44.13) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (0.99.8)

com.linecorp.armeria:armeria-saml MAVEN version 0.99.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.linecorp.armeria:armeria-saml and may be impacted: - com.linecorp.centraldogma:centraldogma-server-auth-saml 0.44.13 Source cves: CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (>=0.33.0, <=0.64.2) potentially affected by CVE-2024-1735 via com.linecorp.armeria:armeria-saml (>=0.76.2, <=1.27.1)

com.linecorp.armeria:armeria-saml MAVEN version =0.76.2, =0.33.0, =0.64.2 Source cves: CVE-2024-1735 Source advisory: MEND:CVE-2024-1735...

com.linecorp.centraldogma:centraldogma-server-auth-saml (>=0.33.0, <=0.64.0), com.linecorp.centraldogma:centraldogma-server-auth-shiro (>=0.33.0, <=0.64.0) +7 more potentially affected by CVE-2024-1143 via com.linecorp.centraldogma:centraldogma-server (>=0.17.0, <=0.64.0)

com.linecorp.centraldogma:centraldogma-server MAVEN version =0.17.0, =0.33.0, =0.33.0, =0.61.0, =0.62.0, =0.17.0, =0.44.0, =0.44.0, =0.44.0, =0.64.0 - com.linecorp.centraldogma:centraldogma-xds 0.64.0 Source cves: CVE-2024-1143 Source advisory: MEND:CVE-2024-1143...

CVE-2023-6568

A reflected Cross-Site Scripting XSS vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the us...

CVE-2023-6568: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the us...

SuSE 11.2 / 11.3 Security Update : openssl-certs (SAT Patch Numbers 8681 / 8682)

openssl-certs was updated with the current certificate data available from mozilla.org. Changes : - Updated certificates to revision 1.95 Distrust a sub-ca that issued google.com certificates. 'Distrusted AC DG Tresor SSL'. bnc854367 Many CA updates from Mozilla : - new:...

ca-certificates-mozilla: add, remove or blacklist some certificates (important)

The Mozilla CA certificates package was updated to match the current Mozilla revision 1.95 of certdata.txt. It blacklists some misused certificate authorities, adds some new and adjusts some others. On openSUSE 13.1 a problem with names was also fixed. distrust: AC DG Tresor SSL bnc854367 new:...