Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
the GeoServer catalog that will execute in the context of another user's browser when viewed in the WMS GetMap OpenLayers Output Format. Access to the WMS OpenLayers Format is available to all users by default although data and service security may limit users' ability to trigger the XSS. Versions 2.23.3 and 2.24.1 contain a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/geoserver/geoserver/security/advisories/GHSA-fcpm-hchj-mh72 - https://github.com/geoserver/geoserver/pull/7174 - https://github.com/geoserver/geoserver/commit/4557a832eed19ec18b9753cb97e8aa85269741d2 - https://github.com/geoserver/geoserver/c
ithub.com/geoserver/geoserver/commit/4557a832eed19ec18b9753cb97e8aa85269741d2 - https://github.com/geoserver/geoserver/commit/a26c32a469ee4c599236380452ffb4260361bd6f - https://osgeo-org.atlassian.net/browse/GEOS-11153
CVE ID: CVE-2024-23819 State: PUBLISHED Published: 2024-03-20T18:00:46.048Z Last Updated: 2024-08-01T23:13:08.246Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: geoserver Products: geoserver Problem Types: CWE-79 Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another user's browser when viewed in the MapML HTML Page. The
the GeoServer catalog that will execute in the context of another user's browser when viewed in the MapML HTML Page. The MapML extension must be installed and access to the MapML HTML Page is available to all users although data security may limit users' ability to trigger the XSS. Versions 2.23.4 and 2.24.1 contain a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/geoserver/geoserver/security/advisories/GHSA-7x76-57fr-m5r5 - https://github.com/geoserver/geoserver/pull/7175 - https://github.com/geoserver/geoserver/commit/6f04adbdc6c289f5cb815b1462a6bd790e3fb6ef - https://github.com/geoserver/geoserver/commit/d
om/geoserver/geoserver/commit/6f04adbdc6c289f5cb815b1462a6bd790e3fb6ef - https://github.com/geoserver/geoserver/commit/df65ff05250cbb498c78af906d66e0c084ace8a1 - https://osgeo-org.atlassian.net/browse/GEOS-11154
CVE ID: CVE-2024-23820 State: PUBLISHED Published: 2024-01-26T16:37:27.065Z Last Updated: 2024-08-29T18:13:51.862Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: openfga Products: openfga Problem Types: CWE-770 Description: OpenFGA, an authorization/permission engine, is vulnerable to a denial of service attack in versions prior to 1.4.3. In some scenarios that depend on the model and tuples used, a call to `ListObjects` may not release memory properly. So when a sufficiently high number of those calls are executed, the OpenFGA server can create an `out of memory` error and terminate. Version 1.4.3 contains a patch for this issue. Additional Analyst Notes:
create an `out of memory` error and terminate. Version 1.4.3 contains a patch for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openfga/openfga/security/advisories/GHSA-rxpw-85vw-fx87 - https://github.com/openfga/openfga/commit/908ac85c8b7769c8042cca31886df8db01976c39 - https://github.com/openfga/openfga/releases/tag/v1.4.3
CVE ID: CVE-2024-23821 State: PUBLISHED Published: 2024-03-20T18:03:25.433Z Last Updated: 2025-04-10T20:17:43.665Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: geoserver Products: geoserver Problem Types: CWE-79 Description: GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.23.4 and 2.24.1 that enables an authenticated administrator with workspace-level privileges to store a JavaScript payload in the GeoServer catalog that will execute in the context of another user's browser when viewed in the GWC Demos Page. Acce
the GeoServer catalog that will execute in the context of another user's browser when viewed in the GWC Demos Page. Access to the GWC Demos Page is available to all users although data security may limit users' ability to trigger the XSS. Versions 2.23.4 and 2.24.1 contain a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/geoserver/geoserver/security/advisories/GHSA-88wc-fcj9-q3r9 - https://github.com/GeoWebCache/geowebcache/issues/1171 - https://github.com/GeoWebCache/geowebcache/pull/1173
CVE ID: CVE-2024-23822 State: PUBLISHED Published: 2024-01-29T15:46:30.188Z Last Updated: 2025-05-29T15:09:09.974Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: sni Products: Thruk Problem Types: CWE-22 Description: Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnerability in a file upload form that allows a threat actor to arbitrarily upload files to the server to any path they desire and have permissions for. This vulnerability is known as Path Traversal or Directory Traversal. Version 3.12 fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
aversal. Version 3.12 fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/sni/Thruk/security/advisories/GHSA-4mrh-mx7x-rqjx - https://github.com/sni/Thruk/commit/1aa9597cdf2722a69651124f68cbb449be12cc39
CVE ID: CVE-2024-23823 State: PUBLISHED Published: 2024-03-14T18:47:50.328Z Last Updated: 2024-08-01T23:13:08.222Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: vantage6 Products: vantage6 Problem Types: CWE-942, CWE-863 Description: vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. The vantage6 server has no restrictions on CORS settings. It should be possible for people to set the allowed origins of the server. The impact is limited because v6 does not use session cookies. This issue has been addressed in commit `70bb4e1d8` and is expected to ship in
because v6 does not use session cookies. This issue has been addressed in commit `70bb4e1d8` and is expected to ship in subsequent releases. Users are advised to upgrade as soon as a new release is available. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vantage6/vantage6/security/advisories/GHSA-4946-85pr-fvxh - https://github.com/vantage6/vantage6/commit/70bb4e1d889230a841eb364d6c03accd7dd01a41
CVE ID: CVE-2024-23824 State: PUBLISHED Published: 2024-02-02T15:18:55.300Z Last Updated: 2025-06-17T13:52:12.560Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: mailcow Products: mailcow-dockerized Problem Types: CWE-400 Description: mailcow is a dockerized email package, with multiple containers linked in one bridged network. The application is vulnerable to pixel flood attack, once the payload has been successfully uploaded in the logo the application goes slow and doesn't respond in the admin page. It is tested on the versions 2023-12a and prior and patched in version 2024-01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
and prior and patched in version 2024-01. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-45rv-3c5p-w4h7 - https://github.com/mailcow/mailcow-dockerized/commit/7f6f7e0e9ff608618e5b144bcf18d279610aa3ed - https://github.com/0xbunniee/MailCow-Pixel-Flood-Attack
CVE ID: CVE-2024-23825 State: PUBLISHED Published: 2024-01-30T16:22:04.876Z Last Updated: 2025-05-29T15:04:54.089Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: TablePress Products: TablePress Problem Types: CWE-918 Description: TablePress is a table plugin for Wordpress. For importing tables, TablePress makes external HTTP requests based on a URL that is provided by the user. That user input is filtered insufficiently, which makes it is possible to send requests to unintended network locations and receive responses. On sites in a cloud environment like AWS, an attacker can potentially make GET requests to the instance's metadata REST API. If the instance's con
nment like AWS, an attacker can potentially make GET requests to the instance's metadata REST API. If the instance's configuration is insecure, this can lead to the exposure of internal data, including credentials. This vulnerability is fixed in 2.2.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/TablePress/TablePress/security/advisories/GHSA-x8rf-c8x6-mrpg - https://github.com/TablePress/TablePress/commit/62aab50e7a9c486caaeff26dff4dc01e059ecb91
CVE ID: CVE-2024-23826 State: PUBLISHED Published: 2024-01-29T15:54:46.210Z Last Updated: 2025-06-02T18:44:55.200Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) Vendors: spbu-se Products: spbu_se_site Problem Types: CWE-770 Description: spbu_se_site is the website of the Department of System Programming of St. Petersburg State University. Before 2024.01.29, when uploading an avatar image, an authenticated user may intentionally use a large Unicode filename which would lead to a server-side denial of service under Windows. This is due to no limitation of the length of the filename and the costly use of the Unicode normalization with the form NFKD on Windows OS. This
ion of the length of the filename and the costly use of the Unicode normalization with the form NFKD on Windows OS. This vulnerability was fixed in the 2024.01.29 release. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/spbu-se/spbu_se_site/security/advisories/GHSA-5vfc-v7hg-pvwm - https://github.com/spbu-se/spbu_se_site/commit/5ad623eb0405260763046343c5785bc588d8a57d
CVE ID: CVE-2024-23827 State: PUBLISHED Published: 2024-01-29T16:07:13.953Z Last Updated: 2024-11-12T21:41:24.606Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: 0xJacky Products: nginx-ui Problem Types: CWE-22 Description: Nginx-UI is a web interface to manage Nginx configurations. The Import Certificate feature allows arbitrary write into the system. The feature does not check if the provided user input is a certification/key and allows to write into arbitrary paths in the system. It's possible to leverage the vulnerability into a remote code execution overwriting the config file app.ini. Version 2.0.0.beta.12 fixed the issue. Additional Analyst Notes:
te code execution overwriting the config file app.ini. Version 2.0.0.beta.12 fixed the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-xvq9-4vpv-227m
CVE ID: CVE-2024-23828 State: PUBLISHED Published: 2024-01-29T16:49:51.440Z Last Updated: 2024-11-12T21:31:32.752Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: 0xJacky Products: nginx-ui Problem Types: CWE-74 Description: Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execution via CRLF attack when changing the value of test_config_cmd or start_cmd. This vulnerability exists due to an incomplete fix for CVE-2024-22197 and CVE-2024-22198. This vulnerability has been patched in version 2.0.0.beta.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
in version 2.0.0.beta.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-qcjq-7f7v-pvc8
CVE ID: CVE-2024-23829 State: PUBLISHED Published: 2024-01-29T22:41:35.032Z Last Updated: 2025-11-03T20:36:49.579Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: aio-libs Products: aiohttp Problem Types: CWE-444 Description: aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets, that must trigger error handling to robustly match frame boundaries of proxies in order to protect against injection of additional requests. Additionally, validation could trigger exceptions that were not handled consistently with processing of other ma
quests. Additionally, validation could trigger exceptions that were not handled consistently with processing of other malformed input. Being more lenient than internet standards require could, depending on deployment environment, assist in request smuggling. The unhandled exception could cause excessive resource consumption on the application server and/or its logging facilities. This vulnerability exists due to an incomplete fix for CVE-2023-47627. Version 3.9.2 fixes this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8qpw-xqxj-h4r2 - https://github.com/aio-libs/aiohttp/pu
: - https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8qpw-xqxj-h4r2 - https://github.com/aio-libs/aiohttp/pull/8074 - https://github.com/aio-libs/aiohttp/commit/33ccdfb0a12690af5bb49bda2319ec0907fa7827 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XXWVZIVAYWEBHNRIILZVB3R3SDQNNAA7/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ICUOCFGTB25WUT336BZ4UNYLSZOUVKBD/
CVE ID: CVE-2024-23830 State: PUBLISHED Published: 2024-02-20T21:44:27.707Z Last Updated: 2024-08-01T23:13:08.218Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: mantisbt Products: mantisbt Problem Types: CWE-74 Description: MantisBT is an open source issue tracker. Prior to version 2.26.1, an unauthenticated attacker who knows a user's email address and username can hijack the user's account by poisoning the link in the password reset notification message. A patch is available in version 2.26.1. As a workaround, define `$g_path` as appropriate in `config_inc.php`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https
ate in `config_inc.php`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mantisbt/mantisbt/security/advisories/GHSA-mcqj-7p29-9528 - https://github.com/mantisbt/mantisbt/commit/7055731d09ff12b2781410a372f790172e279744 - https://mantisbt.org/bugs/view.php?id=19381
CVE ID: CVE-2024-23831 State: PUBLISHED Published: 2024-02-02T15:34:12.121Z Last Updated: 2024-08-21T15:39:55.803Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ledgersmb Products: LedgerSMB Problem Types: CWE-352 Description: LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active session in /setup.pl, an attacker can trick the admin into clicking on a link which automatically submits a request to setup.pl without the admin's consent. This request can be used to create a new user account with full application (/login.pl) privileges, leading to privilege escalation. The vulnerability is patched in v
account with full application (/login.pl) privileges, leading to privilege escalation. The vulnerability is patched in versions 1.10.30 and 1.11.9. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ledgersmb/LedgerSMB/security/advisories/GHSA-98ff-f638-qxjm - https://github.com/ledgersmb/LedgerSMB/commit/8c2ae5be68a782d62cb9c0e17c0127bf30ef4165
CVE ID: CVE-2024-23832 State: PUBLISHED Published: 2024-02-01T16:18:03.528Z Last Updated: 2025-02-13T17:39:53.949Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: mastodon Products: mastodon Problem Types: CWE-290 Description: Mastodon is a free, open-source social network server based on ActivityPub Mastodon allows configuration of LDAP for authentication. Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as 4.0.x versions prior to 4.0.13, 4.1.x version prior to 4.1.13, and 4.2.x versions prior to 4.2.5. Additional Analyst Notes:
x versions prior to 4.0.13, 4.1.x version prior to 4.1.13, and 4.2.x versions prior to 4.2.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw - https://github.com/mastodon/mastodon/commit/1726085db5cd73dd30953da858f9887bcc90b958 - http://www.openwall.com/lists/oss-security/2024/02/02/4
CVE ID: CVE-2024-23833 State: PUBLISHED Published: 2024-02-12T20:15:34.579Z Last Updated: 2025-05-07T21:02:47.536Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenRefine Products: OpenRefine Problem Types: CWE-22 Description: OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefine(version<=3.7.7) where an attacker may construct a JDBC query which may read files on the host filesystem. Due to the newer MySQL driver library in the latest version of OpenRefine (8.0.30), there is no associated deserialization utilization point, so original code execution cannot be achieved, but
e (8.0.30), there is no associated deserialization utilization point, so original code execution cannot be achieved, but attackers can use this vulnerability to read sensitive files on the target server. This issue has been addressed in version 3.7.8. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OpenRefine/OpenRefine/security/advisories/GHSA-6p92-qfqf-qwx4 - https://github.com/OpenRefine/OpenRefine/commit/41ccf574847d856e22488a7c0987ad8efa12a84a
CVE ID: CVE-2024-23834 State: PUBLISHED Published: 2024-01-30T21:31:35.617Z Last Updated: 2024-10-17T17:59:10.354Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: discourse Products: discourse Problem Types: CWE-79 Description: Discourse is an open-source discussion platform. Improperly sanitized user input could lead to an XSS vulnerability in some situations. This vulnerability only affects Discourse instances which have disabled the default Content Security Policy. The vulnerability is patched in 3.1.5 and 3.2.0.beta5. As a workaround, ensure Content Security Policy is enabled and does not include `unsafe-inline`. Additional Analyst Notes: - CVE Program C
nsure Content Security Policy is enabled and does not include `unsafe-inline`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-rj3g-8q6p-63pc - https://github.com/discourse/discourse/commit/568d704a94c528b7c2cb0f3512a7b7b606bc3000 - https://meta.discourse.org/t/3-1-5-security-and-bug-fix-release/293094 - https://meta.discourse.org/t/3-2-0-beta5-add-groups-to-dms-mobile-chat-footer-redesign-passkeys-enabled-by-default-and-more/293093
CVE ID: CVE-2024-23835 State: PUBLISHED Published: 2024-02-26T15:35:07.302Z Last Updated: 2025-02-13T17:39:54.584Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OISF Products: suricata Problem Types: CWE-400, CWE-770 Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.3, excessive memory use during pgsql parsing could lead to OOM-related crashes. This vulnerability is patched in 7.0.3. As workaround, users can disable the pgsql app layer parser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OISF/su
er. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/OISF/suricata/security/advisories/GHSA-8583-353f-mvwc - https://github.com/OISF/suricata/commit/86de7cffa7e8f06fe9d600127e7dabe89c7e81dd - https://github.com/OISF/suricata/commit/f52c033e566beafb4480c139eb18662a2870464f - https://redmine.openinfosecfoundation.org/issues/6411 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/
CVE ID: CVE-2024-23836 State: PUBLISHED Published: 2024-02-26T15:44:03.308Z Last Updated: 2025-02-13T17:39:55.194Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OISF Products: suricata Problem Types: CWE-770 Description: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service. This vulnerability is patched in 6.0.16 or 7.0.3. Workarounds include disabling the affected protocol app-layer
ervice. This vulnerability is patched in 6.0.16 or 7.0.3. Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc - https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7 - https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747 - https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7 - https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e
SF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7 - https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc - https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97 - https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8 - https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786 - https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5 - https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01 - https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af - https://redmine.openinfosecfoundation.org/issues/6531 - h
ISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af - https://redmine.openinfosecfoundation.org/issues/6531 - https://redmine.openinfosecfoundation.org/issues/6532 - https://redmine.openinfosecfoundation.org/issues/6540 - https://redmine.openinfosecfoundation.org/issues/6658 - https://redmine.openinfosecfoundation.org/issues/6659 - https://redmine.openinfosecfoundation.org/issues/6660 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/