Issues

TemporaryFolder on unix-like systems does not limit access to created files

Information Disclosure in Guava

Improper Restriction of XML External Entity Reference in Apache POI

Denial of Service in Google Guava

Guava vulnerable to insecure use of temporary directory

Server-Side Request Forgery in Request

Incorrect Default Permissions in log4js

tough-cookie Prototype Pollution vulnerability

Server-Side Request Forgery in Request

Got allows a redirect to a UNIX socket

Server-Side Request Forgery in Request

Incorrect Default Permissions in log4js

word-wrap vulnerable to Regular Expression Denial of Service

tough-cookie Prototype Pollution vulnerability

Observable Discrepancy in Apache Kafka

Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

OpenNMS privilege escalation vulnerability

OpenNMS privilege escalation vulnerability

OpenNMS privilege escalation vulnerability

OpenNMS privilege escalation vulnerability

OpenNMS vulnerable to remote code execution

OpenNMS vulnerable to remote code execution

Jython Improper Access Restrictions vulnerability

Origin Validation Error in Apache Maven

Origin Validation Error in Apache Maven

Origin Validation Error in Apache Maven

OpenNMS privilege elevation vulnerability

OpenNMS privilege elevation vulnerability

OpenNMS privilege elevation vulnerability

OpenNMS privilege elevation vulnerability

OpenNMS vulnerable to Cross-site Scripting

OpenNMS vulnerable to Cross-site Scripting

OpenMNS Horizon XXE Injection Vulnerability

NULL Pointer Dereference in Protocol Buffers

Arbitrary File Creation in AbstractUnArchiver

Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

Exposure of sensitive information in follow-redirects

Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects

qs vulnerable to Prototype Pollution

Prototype Pollution in minimist

Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations

Arbitrary Code Execution in grunt

Cross-site Scripting in karma

Open redirect in karma

Path Traversal in Grunt

Race Condition in Grunt

Information exposure in FasterXML jackson-databind

Polymorphic Typing issue in FasterXML jackson-databind

Polymorphic Typing issue in FasterXML jackson-databind

Deserialization of Untrusted Data in jackson-databind