Schwachstellen, die jetzt zählen.

DSA-6594-1 python-git - security update

DSA-6594-1 python-git - security update

DSA-6594-1 python-git - security update

DSA-6594-1 python-git - security update

json-glib: json-glib: infinite loop in json_path_query() with negative JSONPath slice step

DSA-6596-1 wordpress - security update

WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the server during the upgrade window.

DSA-6594-1 python-git - security update

DSA-6594-1 python-git - security update

Red Hat Ansible Automation Platform (GitPython): Mehrere Schwachstellen

Red Hat Ansible Automation Platform (GitPython): Mehrere Schwachstellen

Red Hat Ansible Automation Platform (GitPython): Mehrere Schwachstellen

DSA-6594-1 python-git - security update

OMN: OMN: Unauthorized storage write via insecure permissions

Pile: Pile: unauthorized data access via insecure exported component permissions

bander.notepad: Bander Notepad: Unauthorized data access and modification via insecure permissions

DSA-6594-1 python-git - security update

swift-crypto: swift-crypto: Denial of Service via unbounded input to the P-384 VOPRF API

domoticz: domoticz: Unauthorized script execution via missing permission checks

github.com/mongodb/mongo-tools: mongo-tools: Information disclosure via improper certificate validation

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

freeimage: freeimage: Arbitrary code execution via unclipped GIF frame dimensions

freeimage: FreeImage: Arbitrary code execution via heap-based buffer overflow in image decoder

markdown2: markdown2: Denial of Service via unclosed inline link destinations

Red Hat Enterprise Linux (python-jwcrypto, sos, hickory-resolver, libimobiledevice, gcc, python-oauthlib): Mehrere Schwachstellen

langgraph-api: langgraph-api: unauthorized data access via improper namespace isolation

keycloak-services: keycloak-services: Authorization bypass via UMA resource registration IDOR

langgraph-sdk: langgraph: LangGraph: Information disclosure via path traversal in streaming helpers

executor-legacy-ws: executor-legacy-ws: Information disclosure via overlapping WebSocket subscriptions

executor-legacy-ws: GraphQL Tools: Unauthorized access via retained connection parameters

decode-uri-component: decode-uri-component: Denial of Service via malformed percent-encoded input