CVE-2024-4367 Vulnerability in maven package org.webjars.bowergithub.mozilla:pdfjs-dist

http://seclists.org/fulldisclosure/2024/Aug/30

https://bugzilla.mozilla.org/show_bug.cgi?id=1893645

https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/

https://github.com/gogs/gogs/issues/7928

https://github.com/mozilla/pdf.js/releases/tag/v4.2.67

https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html

https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html

https://www.mozilla.org/security/advisories/mfsa2024-21/

https://www.mozilla.org/security/advisories/mfsa2024-22/

https://www.mozilla.org/security/advisories/mfsa2024-23/

CVE-2021-37695 Vulnerability in maven package org.webjars.bowergithub.ckeditor:ckeditor4

CVE-2023-36468 Vulnerability in maven package org.xwiki.platform:xwiki-platform-core

CVE-2022-43406 Vulnerability in maven package org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

CVE-2023-41900 Vulnerability in maven package org.eclipse.jetty:jetty-openid

CVE-2021-44521 Vulnerability in maven package org.apache.cassandra:cassandra-all