CVE-2024-46985

DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, there is an XML external entity injection vulnerability in the static resource upload interface of DataEase. An attacker can construct a payload to implement intranet detection and file reading. The vulnerabilit...

CVE-2024-3574

In scrapy version 2.10.1, an issue was identified where the Authorization header, containing credentials for server authentication, is leaked to a third-party site during a cross-domain redirect. This vulnerability arises from the failure to remove the Authorization header when redirecting across...

CVE-2023-38857

FAAD2 v2.10.1 is affected by CVE-2023-38857 (Buffer Overflow) via the stcoin code path in mp4read.c, enabling potential remote code execution and denial of service. Connected advisories confirm FAAD2 vulnerabilities and recommend upgrading to a newer release. Gentoo GLSA-202401-13 instructs upgra...