GHSA-7p9f-6x8j-gxxp: CRI-O: Maliciously structured checkpoint file can gain arbitrary node access

GHSA-hh33-46q4-hwm2: Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to its deletion

GHSA-rmv2-8jjc-23xw: TCPDF Local File Inclusion vulnerability

GHSA-w5rq-g9r6-vrcg: @dapperduckling/keycloak-connector-server has Reflected XSS Vulnerability in Authentication Flow URL Handling

GHSA-q4xm-6fjc-5f6w: sigstore-java has vulnerability with bundle verification

### Impact
The issue is that the map of encoding/decoding languages are visible in code. 

### Patches
The problem was patched in 0.2.4.

### Workarounds
The only known workaround is apply the fix to the code manually.

**PheonixAppAPI has visible Encoding Maps**

Moderate severity GitHub Reviewed Published Jul 31, 2024 in AkshuDev/PheonixAppAPI • Updated Jul 31, 2024

Headline

GHSA-258h-f687-4226: PheonixAppAPI has visible Encoding Maps

Impact

Patches

Workarounds

ghsa: Latest News