com.lightbend.akka:akka-projection-kafka_2.12 (0.3), com.lightbend.cloudflow:cloudflow-akka-testkit_2.12 (>=2.0.0-rc2, <=2.0.7) +8 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (2.0.3)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.lightbend.akka:akka-projection-kafka2.12 0.3 -...

com.typesafe.akka:akka-stream-kafka-testkit_2.12 (1.1.0-rc1) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (1.1.0-rc1)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 1.1.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.12 1.1.0-rc1 Source cves:...

com.typesafe.akka:akka-stream-kafka-testkit_2.11 (1.1.0) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (1.1.0)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.11 1.1.0 Source cves: CVE-2023-29471...

nl.tradecloud:kafka-akka-extension_2.12 (>=0.52.3, <=0.58) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (0.20)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 0.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - nl.tradecloud:kafka-akka-extension2.12 =0.52.3, =0.58 Source cves: CVE-2023-29471...

com.typesafe.akka:akka-stream-kafka-testkit_2.12 (1.0) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (1.0)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.12 1.0 Source cves: CVE-2023-29471...

com.typesafe.akka:akka-stream-kafka-testkit_2.11 (2.0.6) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (2.0.6)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.11 2.0.6 Source cves: CVE-2023-29471...

com.typesafe.akka:akka-stream-kafka-cluster-sharding_2.13 (3.0.0), com.typesafe.akka:akka-stream-kafka-testkit_2.13 (3.0.0) +1 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.13 (3.0.0)

com.typesafe.akka:akka-stream-kafka2.13 MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.13 and may be impacted: - com.typesafe.akka:akka-stream-kafka-cluster-sharding2.13 3.0.0 -...

com.lightbend.akka:akka-projection-kafka_2.12 (>=1.3.0, <=1.4.0-m3), com.typesafe.akka:akka-stream-kafka-cluster-sharding_2.12 (>=4.0.0, <=4.0.1) +1 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (>=4.0.0, <=4.0.1)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version =4.0.0, =1.3.0, =4.0.0, =4.0.0, =4.0.1 Source cves: CVE-2023-29471 Source advisory: GHSA-55VQ-XPJF-R2XC...

com.lightbend.lagom:lagom-javadsl-integration-client_2.11 (1.5.0-rc1-26-g7d68234), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.11 (1.5.0-rc1-26-g7d68234) +7 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (1.0-rc1)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 1.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.11 1.5.0-rc1-26-g7d68234 ...

com.typesafe.akka:akka-stream-kafka-testkit_2.11 (1.0.4) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (1.0.4)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.11 1.0.4 Source cves: CVE-2023-29471...

com.ibm:akka-stream-message-hub_2.11 (>=0.1.4, <=0.1.6), com.landoop:lenses-topology-client-akka-streams-kafka_2.11 (>=1.0.0, <=4.0.0) +7 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (0.22)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 0.22 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.ibm:akka-stream-message-hub2.11 =0.1.4, =1.0.0, =1.5.0-m1, =1.5.0-m1, =1.5.0-m...

com.lightbend.lagom:lagom-javadsl-integration-client_2.11 (>=1.3.0-m1, <=1.3.11), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.11 (>=1.3.0-m1, <=1.3.11) +9 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (0.13)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 0.13 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.11 =1.3.0-m1, =1.3.0-m1,...

biz.lobachev.annette:application_2.13 (>=0.1.2, <=0.3.0), biz.lobachev.annette:attributes_2.13 (>=0.1.2, <=0.2.5) +71 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.13 (>=1.0.4, <=4.0.1)

com.typesafe.akka:akka-stream-kafka2.13 MAVEN version =1.0.4, =0.1.2, =0.1.2, =0.1.2, =0.3.0, =0.1.2, =0.1.2, =0.3.0, =0.3.0, =1.0.1, =22.10.0-m1, =0.1.6, =0.1, =back-to-core-snapshot-1, =2.3.4-debug.8 and more Source cves: CVE-2023-29471 Source advisory: MEND:CVE-2023-29471...

com.devum:java-dsl (0.0.1), com.github.arielf-camacho:kafka-utils_2.12 (>=1.0.1, <=1.0.3) +57 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (>=0.13, <=4.0.1)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version =0.13, =1.0.1, =1.0.1, =2.0.5, =1.0.0, =0.3, =back-to-core-snapshot-1, =back-to-core-snapshot-1, =back-to-core-snapshot-1, =back-to-core-snapshot-1, =1.4.0-m3, =1.4.0-m3, =1.4.0-m3, =1.6.8-rc1 and more Source cves: CVE-2023-29471 Source a...

com.typesafe.akka:akka-stream-kafka-cluster-sharding_3 (4.0.1), com.typesafe.akka:akka-stream-kafka-testkit_3 (4.0.1) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_3 (4.0.1)

com.typesafe.akka:akka-stream-kafka3 MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka3 and may be impacted: - com.typesafe.akka:akka-stream-kafka-cluster-sharding3 4.0.1 -...

SUSE CVE-2023-2241

A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObject.cpp. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to th...

Stored XSS in the module named "Create Case"

Description I tested the demo site you provided. I see that there is an XSS vulnerability. I hope you can check and provide a fix as soon as possible. You have almost filtered out all possible cases of XSS, but I noticed that there is still 1 case that you left out. by using this xss command: Pro...

WordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR)

Software Stream Type Plugin Vulnerable versions = 3.9.2 Fixed in 3.9.3 OWASP Top 10 A1: Injection Classification Insecure Direct Object References IDOR CVE CVE-2022-43450 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 760a85c05111 Credits Lucio Sá Required privilege...

[SECURITY] Fedora 36 Update: ffmpeg-5.0.3-1.fc36

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

CVE-2023-27355

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MPEG-TS parser. The issue results from the lack of proper...