rubygem-sinatra vulnerabilities (SUSE)

17 vulnerabilities.

• rubygem-sinatra SUSE sinatra does not validate expanded path matches CVE-2022-29970 Fix available 7.5 HighMay 2, 2022
• rubygem-sinatra SUSE openstack-barbican Denial of Service vulnerability CVE-2022-23452 Fix available 4.9 MediumJanuary 28, 2022
• rubygem-sinatra SUSE Barbican authorization flaw before v14.0.0 CVE-2022-23451 Fix available 8.1 HighJanuary 28, 2022
• rubygem-sinatra SUSE Arbitrary expression injection in Pillow CVE-2022-22817 Fix available 9.8 CriticalJanuary 7, 2022
• rubygem-sinatra SUSE Out-of-bounds Read in Pillow CVE-2022-22816 Fix available 6.5 MediumJanuary 7, 2022
• rubygem-sinatra SUSE Improper Initialization in Pillow CVE-2022-22815 Fix available 6.5 MediumJanuary 7, 2022
• rubygem-sinatra SUSE golang.org/x/net/http2 allows uncontrolled memory consumption CVE-2021-44716 Fix available 7.5 HighDecember 15, 2021
• rubygem-sinatra SUSE HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Fix available 8.2 HighDecember 13, 2021
• rubygem-sinatra SUSE Directory Traversal in Grafana CVE-2021-43813 Fix available EPSS 56.6% 4.3 MediumDecember 10, 2021
• rubygem-sinatra SUSE XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• rubygem-sinatra SUSE XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• rubygem-sinatra SUSE XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• rubygem-sinatra SUSE OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value CVE-2021-40085 Fix available 6.5 MediumAugust 31, 2021
• rubygem-sinatra SUSE OpenStack Keystone allows information disclosure during account locking CVE-2021-38155 Fix available 7.5 HighAugust 6, 2021
• rubygem-sinatra SUSE lxml vulnerable to Cross-Site Scripting CVE-2021-28957 Fix available 6.1 MediumMarch 21, 2021
• rubygem-sinatra SUSE lxml vulnerable to Cross-site Scripting CVE-2020-27783 Fix available 6.1 MediumNovember 26, 2020
• rubygem-sinatra SUSE Improper Neutralization of Input During Web Page Generation in LXML CVE-2018-19787 Fix available 6.1 MediumDecember 2, 2018