Vulnerabilities
Crass Ruby Gem Vulnerable to CPU Exhaustion via CSS Parsing Flaw
A high-severity flaw in the Crass gem allows attackers to crash applications by exploiting unbounded exponentiation in CSS parsing.
GitHub
Everything Patch Observer has reported about GitHub: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Containerd users must patch high-severity privilege escalation flaw
A flaw in containerd allows containers restored from checkpoints to bypass security policies and run with root privileges.
Vulnerabilities
Unauthenticated Request Can Crash Qwik Servers Before 1.20.0
A high-severity flaw in Qwik allows attackers to crash servers with one request. Fixes are available for specific npm packages.