List of all vulnerabilities

Report a vulnerability
CVE-2022-48337
2/20/2023
Affected packages: conf-emacs
Critical severity
CVE-2022-48338
2/20/2023
Affected packages: conf-emacs
High severity
CVE-2023-23586 – Use after free in io_uring in the Linux Kernel
2/17/2023
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Medium severity
CVE-2021-33391
2/17/2023
Affected packages: conf-tidy • tidy
Critical severity
CVE-2023-24329
2/17/2023
Affected packages: conf-python-2-7 • conf-python-2-7-dev • conf-python-3 • conf-python-3-7 • conf-python-3-dev • py • termbox ... (7)
High severity
CVE-2023-24329
2/17/2023
Affected packages: conf-python-2-7 • conf-python-2-7-dev • conf-python-3 • conf-python-3-7 • conf-python-3-dev • py • termbox ... (7)
High severity
CVE-2023-23936 – CRLF Injection in Nodejs ‘undici’ via host
2/16/2023
Affected packages: conf-npm
Medium severity
CVE-2023-0361
2/15/2023
Affected packages: conf-gnutls • conf-mingw-w64-gnutls-i686 • conf-mingw-w64-gnutls-x86_64 • conf-srt • conf-srt-gnutls
High severity
CVE-2023-23946 – Git's `git apply` overwriting paths outside the working tree
2/14/2023
Affected packages: conf-git • conf-git-daemon
Medium severity
CVE-2023-22490 – Git vulnerable to local clone-based data exfiltration with non-local transports
2/14/2023
Affected packages: conf-git • conf-git-daemon
Medium severity
CVE-2022-4304 – Timing Oracle in RSA Decryption
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
Medium severity
CVE-2022-4304 – Timing Oracle in RSA Decryption
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
Medium severity
CVE-2022-4450 – Double free after calling PEM_read_bio_ex
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2022-4450 – Double free after calling PEM_read_bio_ex
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0215 – Use-after-free following BIO_new_NDEF
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0215 – Use-after-free following BIO_new_NDEF
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0216 – Invalid pointer dereference in d2i_PKCS7 functions
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0216 – Invalid pointer dereference in d2i_PKCS7 functions
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0217 – NULL dereference validating DSA public key
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity
CVE-2023-0217 – NULL dereference validating DSA public key
2/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl • conf-srt-openssl ... (6)
High severity