CVEs published July 18, 2023
149 CVEs were published on July 18, 2023: 6 critical, 28 high.
- Published
- 149
- Critical
- 6
- High
- 28
- Medium
- 73
- Low
- 14
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 27
Most affected products
- Oracle MySQL Server
- 13
- Oracle Business Intelligence Enterprise Edition
- 7
- Oracle Java SE JDK and JRE
- 7
- iagona ScrutisWeb
- 4
- metagauss ProfileGrid – User Profiles, Groups and Communiti…
- 3
- Oracle Application Express
- 3
- Oracle VM VirtualBox
- 3
- Atlassian Confluence Data Center · Atlassian Confluence Ser…
- 2
- ethyca fides · ethyca-fides
- 2
- HCL Software HCL BigFix WebUI
- 2
Critical 6
- CVE-2023-21975Vulnerability in the Application Express Customers Plugin product of Oracle Application Express (component: User Account).Oracle Application Express
- CVE-2023-21974Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express (component: User Account).Oracle Application Express
- CVE-2023-35189Iagona ScrutisWeb Unrestricted Upload of File with Dangerous Typeiagona ScrutisWeb
- CVE-2023-34329Authentication Bypass via HTTP Header SpoofingAMI MegaRAC_SPx12
- CVE-2023-34142Cleartext Transmission Vulnerability in Hitachi Device ManagerHitachi Device Manager
- CVE-2023-30153An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0 and 3.7.1, allo
High 28
- CVE-2023-22506This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of BambooAtlassian Bamboo Data Center · Atlassian Bamboo Server
- CVE-2023-22508This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of Confluence Data CentAtlassian Confluence Data Center · Atlassian Confluence Ser…
- CVE-2023-22505This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of Confluence Data CentAtlassian Confluence Data Center · Atlassian Confluence Ser…
- CVE-2023-37897Server-side Template Injection (SSTI) in gravgetgrav grav · getgrav/grav
- CVE-2023-22062Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository).Oracle Hyperion Financial Reporting
- CVE-2023-22060Vulnerability in the Oracle Hyperion Workspace product of Oracle Hyperion (component: UI and Visualization).Oracle Hyperion BI+
- CVE-2023-22047Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2023-22023Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Interface).Oracle Solaris Operating System
- CVE-2023-22018Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-22014Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2023-2913Rockwell Automation ThinManager ThinServer Path Traversal VulnerabilityRockwell Automation ThinManager ThinServer
- CVE-2023-37477Command injection in firewall ip functionality in 1Panel1Panel-dev 1Panel · github.com/1Panel-dev/1Panel
- CVE-2023-33312WordPress Easy Captcha Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)wppal Easy Captcha
- CVE-2023-33871Iagona ScrutisWeb Absolute Path Traversaliagona ScrutisWeb
- CVE-2023-38257CVE-2023-38257iagona ScrutisWeb
- CVE-2023-34330Code injection via Dynamic Redfish Extension interfaceAMI MegaRAC_SPx12 · AMI MegaRAC_SPx13
- CVE-2023-34035Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfigSpring Security · org.springframework.security:spring-secur…
- CVE-2023-2263Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A – CIP Message Attack Could Cause Denial-Of-ServiceRockwell Automation Kinetix 5700 DC Bus Power Supply Series…
- CVE-2023-36384WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)CodePeople Booking Calendar Contact Form
- CVE-2023-30906The vulnerability could be locally exploited to allow escalation of privilege.Hewlett Packard Enterprise (HPE) HPE Intelligent Provisioni…
- CVE-2022-34155WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken AuthenticationminiOrange OAuth Single Sign On – SSO
- CVE-2023-32965WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)CRUDLab Jazz Popups
- CVE-2023-23660WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL InjectionMainWP Maintenance Extension
- CVE-2023-3743SQL injection vulnerability in LeoTheme's Ap Page BuilderLeoTheme Ap Page Builder
- CVE-2023-3714ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalationmetagauss ProfileGrid – User Profiles, Groups and Communiti…
- CVE-2023-3713ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Updatemetagauss ProfileGrid – User Profiles, Groups and Communiti…
- CVE-2023-3459Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Changewebtoffee Export and Import Users and Customers
- CVE-2022-4146EL Injection Vulnerability in Hitachi Replication ManagerHitachi Replication Manager
Medium, low and unrated 115
- CVE-2023-3527Avaya Call Management System CSV injection vulnerabilityAvaya Call Management System
- CVE-2023-22061Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer).Oracle Business Intelligence Enterprise Edition
- CVE-2023-22058Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2023-22057Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2023-22056Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-22055Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2023-22054Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-22053Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs).Oracle MySQL Server
- CVE-2023-22052Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2023-22051Vulnerability in the Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: GraalVM Compiler).Oracle GraalVM Enterprise Edition
- CVE-2023-22050Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).Oracle JD Edwards EnterpriseOne Orchestrator
- CVE-2023-22049Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: LibrariOracle Java SE JDK and JRE
- CVE-2023-22048Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth).Oracle MySQL Server
- CVE-2023-22046Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-22045Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2023-22044Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2023-22043Vulnerability in Oracle Java SE (component: JavaFX).Oracle Java SE JDK and JRE
- CVE-2023-22042Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics).Oracle Applications Framework
- CVE-2023-22041Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: HotspotOracle Java SE JDK and JRE
- CVE-2023-22040Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-22039Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: WebClient).Oracle Agile PLM Framework
- CVE-2023-22038Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2023-22037Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: MS Excel Specific).Oracle Web Applications Desktop Integrator
- CVE-2023-22036Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: UtilityOracle Java SE JDK and JRE
- CVE-2023-22035Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module).Oracle Scripting
- CVE-2023-22034Vulnerability in the Unified Audit component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2023-22033Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2023-22031Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-22027Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2023-22022Vulnerability in the Oracle Health Sciences Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: BlOracle Life Sciences Data Management Workbench
- CVE-2023-22021Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2023-22020Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2023-22017Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-22016Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-22013Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2023-22012Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2023-22011Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2023-22010Vulnerability in Oracle Essbase (component: Security and Provisioning).Oracle Hyperion Essbase
- CVE-2023-22009Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workforce Management).Oracle Self-Service Human Resources
- CVE-2023-22008Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2023-22007Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2023-22006Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: NetworkOracle Java SE JDK and JRE
- CVE-2023-22005Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2023-22004Vulnerability in the Oracle Applications Technology product of Oracle E-Business Suite (component: Reports Configuration).Oracle E-Business Suite Technology Stack
- CVE-2023-21994Vulnerability in the Oracle Mobile Security Suite product of Oracle Fusion Middleware (component: Android Mobile Authenticator App).Oracle Mobile Security Suite
- CVE-2023-21983Vulnerability in the Application Express Administration product of Oracle Application Express (component: None).Oracle Application Express
- CVE-2023-21961Vulnerability in the Oracle Hyperion Essbase Administration Services product of Oracle Essbase (component: EAS Administration and EAS ConsolOracle Hyperion Essbase Administration Services
- CVE-2023-21950Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2023-21949Vulnerability in the Advanced Networking Option component of Oracle Database Server.Oracle Advanced Networking Option
- CVE-2023-28023HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerabilityHCL Software HCL BigFix WebUI Software Distribution
- CVE-2023-28021BigFix WebUI is vulnerable to use of a risky cryptographic algorithm HCL Software HCL BigFix WebUI
- CVE-2023-37480Fides Webserver Vulnerable to Zip Bomb File Uploadsethyca fides · ethyca-fides
- CVE-2023-37481Fides Webserver Vulnerable to SVG Bomb File Uploadsethyca fides · ethyca-fides
- CVE-2023-28020URL redirection affects BigFix WebUIHCL Software HCL BigFix WebUI
- CVE-2023-28019An SQL injection affects BigFix WebUI APIHCL Software HCL BigFix WebUI API
- CVE-2023-35763Iagona ScrutisWeb Use of Hard-coded Cryptographic Keyiagona ScrutisWeb
- CVE-2023-33329WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)Hijiri Custom Post Type Generator
- CVE-2021-4428what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosurewhat3words Autosuggest Plugin
- CVE-2023-37259Cross site scripting in Export Chat featurematrix-org matrix-react-sdk · matrix-react-sdk
- CVE-2023-33231XSS in SolarWinds Database Performance Analyzer 2023.2SolarWinds DPA
- CVE-2023-0160Possibility of deadlock in libbpf function sock_hash_delete_elemkernel · Red Hat Enterprise Linux +1
- CVE-2020-36762ONS Digital RAS Collection Instrument comment.yml jobs os command injectionONS Digital RAS Collection Instrument
- CVE-2023-36383WordPress Event Manager for WooCommerce Plugin <= 3.9.5 is vulnerable to Cross Site Scripting (XSS)MagePeople Team Event Manager and Tickets Selling Plugin fo…
- CVE-2023-24390WordPress WeSecur Security Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)WeSecur Security
- CVE-2022-47421WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)Repute InfoSystems ARMember
- CVE-2018-25088Blue Yonder postgraas_server PostgreSQL Backend postgres_cluster_driver.py create_postgres_db sql injectionBlue Yonder postgraas_server · postgraas-server
- CVE-2023-37892WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to Cross Site Request Forgery (CSRF)Kemal YAZICI - PluginPress Shortcode IMDB
- CVE-2023-37973WordPress Replace Word Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)David Pokorny Replace Word
- CVE-2023-37889WordPress WPAdmin AWS CDN Plugin <= 2.0.13 is vulnerable to Cross Site Request Forgery (CSRF)WPAdmin AWS CDN
- CVE-2023-25036WordPress Social Media Icons Widget Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)akhlesh-nagar, a.ankit Social Media Icons Widget
- CVE-2023-37387WordPress Classified Listing Plugin <= 2.4.5 is vulnerable to Cross Site Request Forgery (CSRF)RadiusTheme Classified Listing
- CVE-2022-47169WordPress Visibility Logic for Elementor Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)StaxWP Visibility Logic for Elementor
- CVE-2023-37386WordPress Media Library Helper by Codexin Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)Media Library Helper
- CVE-2023-25475WordPress Smart YouTube PRO Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)Vladimir Prelovac Smart YouTube PRO
- CVE-2022-45828WordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)NooTheme Noo Timetable
- CVE-2022-46857WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)SiteAlert
- CVE-2023-25473WordPress Flickr Justified Gallery Plugin <= 3.5 is vulnerable to Cross Site Request Forgery (CSRF)Miro Mannino Flickr Justified Gallery
- CVE-2023-25482WordPress WP Tiles Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)Mike Martel WP Tiles
- CVE-2023-2433YARPP – Yet Another Related Posts Plugin <= 5.30.3 - Authenticated (Contributor+) Stored Cross-Site Scriptingjeffparker YARPP – Yet Another Related Posts Plugin
- CVE-2015-10122wp-donate Plugin donate-display.php sql injectionwp-donate Plugin
- CVE-2023-3403ProfileGrid <= 5.5.1 - Missing Authorization to User Importmetagauss ProfileGrid – User Profiles, Groups and Communiti…
- CVE-2023-34143Improper Validation of Certificate Vulnerability in Hitachi Device ManagerHitachi Device Manager
- CVE-2023-3709Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosurewproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2023-3708Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scriptingdeothemes Amela · Deothemes MedikAid | Medical Health Ca… +3
- CVE-2020-36695File and Directory Permission Vulnerability in Hitachi Command SuiteHitachi Device Manager · Hitachi Tiered Storage Manager +3
- CVE-2023-31998A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.Ubiquiti EdgeRouter · Ubiquiti Aircube
- CVE-2021-43072A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 anFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2020-22159EVERTZ devices 3080IPX exe-guest-v1.2-r26125, 7801FC 1.3 Build 27, and 7890IXG V494 are vulnerable to Arbitrary File Upload, allowing an aut
- CVE-2020-23909Heap-based buffer over-read in function png_convert_4 in file pngex.cc in AdvanceMAME through 2.1.
- CVE-2020-23910Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c.
- CVE-2020-23911An issue was discovered in asn1c through v0.9.28.
- CVE-2021-32256An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36.
- CVE-2021-33294In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of servic
- CVE-2021-34119A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible code execution and a d
- CVE-2021-34121An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to memory layout information
- CVE-2021-34123An issue was discovered on atasm, version 1.09.
- CVE-2021-37522SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via crafted string to /src/db
- CVE-2022-26563An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authoriz
- CVE-2022-33064An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker
- CVE-2022-33065Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Li
- CVE-2022-41409Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via nega
- CVE-2022-47085An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panostree
- CVE-2023-30383TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer_C2_US__V1_170228 we
- CVE-2023-31441In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafted JSON file to sanit
- CVE-2023-33265In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing aucom.hazelcast:hazelcast · com.hazelcast:hazelcast-enterprise
- CVE-2023-36669Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbitra
- CVE-2023-36670A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4.
- CVE-2023-37139ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlot
- CVE-2023-37140ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildren
- CVE-2023-37141ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray(
- CVE-2023-37142ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees().
- CVE-2023-37143ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp().
- CVE-2023-37758D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.
- CVE-2023-37788goproxy v1.1 was discovered to contain an issue which can lead to a Denial of service (DoS) via unspecified vectors.github.com/elazarl/goproxy
- CVE-2023-38434xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.