# Vulnerabilities published in 2022


- [SUSE-SU-2022:1928-1](https://insights.sbomify.com/SUSE-SU-2022-1928-1/): Security update for php8 (not scored)
- [SUSE-SU-2022:1893-1](https://insights.sbomify.com/SUSE-SU-2022-1893-1/): Security update for php74 (not scored)
- [SUSE-SU-2022:1768-1](https://insights.sbomify.com/SUSE-SU-2022-1768-1/): Security update for php7 (not scored)
- [SUSE-SU-2022:1764-1](https://insights.sbomify.com/SUSE-SU-2022-1764-1/): Security update for php7 (not scored)
- [SUSE-SU-2022:1755-1](https://insights.sbomify.com/SUSE-SU-2022-1755-1/): Security update for php7 (not scored)
- [SUSE-SU-2022:1725-1](https://insights.sbomify.com/SUSE-SU-2022-1725-1/): Security update for php7 (not scored)
- [SUSE-SU-2022:1714-1](https://insights.sbomify.com/SUSE-SU-2022-1714-1/): Security update for php72 (not scored)
- [SUSE-SU-2022:1579-1](https://insights.sbomify.com/SUSE-SU-2022-1579-1/): Security update for MozillaFirefox (not scored)
- [SUSE-SU-2022:1304-1](https://insights.sbomify.com/SUSE-SU-2022-1304-1/): Security update for tomcat (not scored)
- [SUSE-SU-2022:1294-1](https://insights.sbomify.com/SUSE-SU-2022-1294-1/): Security update for tomcat (not scored)
- [SUSE-SU-2022:1293-1](https://insights.sbomify.com/SUSE-SU-2022-1293-1/): Security update for tomcat (not scored)
- [SUSE-SU-2022:1292-1](https://insights.sbomify.com/SUSE-SU-2022-1292-1/): Security update for tomcat (not scored)
- [SUSE-SU-2022:1217-1](https://insights.sbomify.com/SUSE-SU-2022-1217-1/): Security update for tomcat (not scored)
- [SUSE-SU-2022:1157-2](https://insights.sbomify.com/SUSE-SU-2022-1157-2/): Security update for libsolv, libzypp, zypper (not scored)
- [SUSE-SU-2022:1157-1](https://insights.sbomify.com/SUSE-SU-2022-1157-1/): Security update for libsolv, libzypp, zypper (not scored)
- [SUSE-SU-2022:1131-1](https://insights.sbomify.com/SUSE-SU-2022-1131-1/): Security update for libsolv, libzypp, zypper (not scored)
- [SUSE-SU-2022:1130-1](https://insights.sbomify.com/SUSE-SU-2022-1130-1/): Security update for libsolv, libzypp, zypper (not scored)
- [SUSE-SU-2022:1128-1](https://insights.sbomify.com/SUSE-SU-2022-1128-1/): Security update for libsolv, libzypp (not scored)
- [SUSE-SU-2022:0953-1](https://insights.sbomify.com/SUSE-SU-2022-0953-1/): Security update for perl-DBD-SQLite (not scored)
- [SUSE-SU-2022:0872-1](https://insights.sbomify.com/SUSE-SU-2022-0872-1/): Security update for stunnel (not scored)
- [SUSE-SU-2022:0810-1](https://insights.sbomify.com/SUSE-SU-2022-0810-1/): Security update for tomcat (not scored)
- [SUSE-SU-2022:0779-1](https://insights.sbomify.com/SUSE-SU-2022-0779-1/): Security update for tomcat (not scored)
- [SUSE-SU-2022:0729-1](https://insights.sbomify.com/SUSE-SU-2022-0729-1/): Security update for SUSE Manager Server 4.2 (not scored)
- [SUSE-SU-2022:0141-2](https://insights.sbomify.com/SUSE-SU-2022-0141-2/): Security update for permissions (not scored)
- [SUSE-SU-2022:0141-1](https://insights.sbomify.com/SUSE-SU-2022-0141-1/): Security update for permissions (not scored)
- [RUSTSEC-2022-0104](https://insights.sbomify.com/RUSTSEC-2022-0104/): `structopt` is in maintenance mode (not scored)
- [RUSTSEC-2022-0081](https://insights.sbomify.com/RUSTSEC-2022-0081/): json is unmaintained (not scored)
- [RUSTSEC-2022-0080](https://insights.sbomify.com/RUSTSEC-2022-0080/): parity-util-mem Unmaintained (not scored)
- [RUSTSEC-2022-0077](https://insights.sbomify.com/RUSTSEC-2022-0077/): `claim` is Unmaintained (not scored)
- [RUSTSEC-2022-0073](https://insights.sbomify.com/RUSTSEC-2022-0073/): crate has been renamed to `embedded-alloc` (not scored)
- [RUSTSEC-2022-0071](https://insights.sbomify.com/RUSTSEC-2022-0071/): Rusoto is unmaintained (not scored)
- [RUSTSEC-2022-0061](https://insights.sbomify.com/RUSTSEC-2022-0061/): Crate `parity-wasm` deprecated by the author (not scored)
- [RUSTSEC-2022-0060](https://insights.sbomify.com/RUSTSEC-2022-0060/): orbtk is Unmaintained (not scored)
- [RUSTSEC-2022-0058](https://insights.sbomify.com/RUSTSEC-2022-0058/): Library exclusively intended to inject UB into safe Rust. (not scored)
- [RUSTSEC-2022-0057](https://insights.sbomify.com/RUSTSEC-2022-0057/): badge is Unmaintained (not scored)
- [RUSTSEC-2022-0056](https://insights.sbomify.com/RUSTSEC-2022-0056/): clipboard is Unmaintained (not scored)
- [RUSTSEC-2022-0053](https://insights.sbomify.com/RUSTSEC-2022-0053/): mapr is Unmaintained (not scored)
- [RUSTSEC-2022-0050](https://insights.sbomify.com/RUSTSEC-2022-0050/): Interledger is Unmaintained (not scored)
- [RUSTSEC-2022-0039](https://insights.sbomify.com/RUSTSEC-2022-0039/): project abandoned (not scored)
- [RUSTSEC-2022-0036](https://insights.sbomify.com/RUSTSEC-2022-0036/): project abandoned (not scored)
- [RUSTSEC-2022-0034](https://insights.sbomify.com/RUSTSEC-2022-0034/): Safety issues in `pkcs11` (not scored)
- [RUSTSEC-2022-0024](https://insights.sbomify.com/RUSTSEC-2022-0024/): double-checked-cell is unmaintained (not scored)
- [RUSTSEC-2022-0023](https://insights.sbomify.com/RUSTSEC-2022-0023/): `static_type_map` has been renamed to `erased_set` (not scored)
- [RUSTSEC-2022-0015](https://insights.sbomify.com/RUSTSEC-2022-0015/): pty is unmaintained (not scored)
- [RUSTSEC-2022-0005](https://insights.sbomify.com/RUSTSEC-2022-0005/): crate has been renamed to `ftdi-embedded-hal` (not scored)
- [RUSTSEC-2022-0001](https://insights.sbomify.com/RUSTSEC-2022-0001/): lmdb is unmaintained, use lmdb-rkv instead (not scored)
- [PYSEC-2022-252](https://insights.sbomify.com/PYSEC-2022-252/): The deep-translator project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which (not scored)
- [PYSEC-2022-251](https://insights.sbomify.com/PYSEC-2022-251/): The spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained c (not scored)
- [PYSEC-2022-250](https://insights.sbomify.com/PYSEC-2022-250/): The exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained (not scored)
- [PYSEC-2022-199](https://insights.sbomify.com/PYSEC-2022-199/): backdoor in ctx version 0.1.2-1, 0.1.2-2, 0.1.4, 0.2, 0.2.1, 0.2.2, 0.2.2.1, 0.2.3, 0.2.4, 0.2.5, 0.2.6 (not scored)
- [OSV-2022-999](https://insights.sbomify.com/OSV-2022-999/): Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch (not scored)
- [OSV-2022-996](https://insights.sbomify.com/OSV-2022-996/): Use-of-uninitialized-value in GrTriangulator::sanitizeContours (not scored)
- [OSV-2022-994](https://insights.sbomify.com/OSV-2022-994/): Heap-buffer-overflow in onig_node_str_cat (not scored)
- [OSV-2022-993](https://insights.sbomify.com/OSV-2022-993/): Stack-use-after-return in check_buffer (not scored)
- [OSV-2022-99](https://insights.sbomify.com/OSV-2022-99/): UNKNOWN WRITE in helper_shl_cc_arm (not scored)
- [OSV-2022-989](https://insights.sbomify.com/OSV-2022-989/): Use-of-uninitialized-value in SkPathStroker::CheckCubicLinear (not scored)
- [OSV-2022-988](https://insights.sbomify.com/OSV-2022-988/): Heap-buffer-overflow in onig_vsnprintf_with_pattern (not scored)
- [OSV-2022-986](https://insights.sbomify.com/OSV-2022-986/): Heap-buffer-overflow in SkEdgeClipper::ClipPath (not scored)
- [OSV-2022-983](https://insights.sbomify.com/OSV-2022-983/): Heap-buffer-overflow in SkPathPriv::IsRectContour (not scored)
- [OSV-2022-981](https://insights.sbomify.com/OSV-2022-981/): Heap-buffer-overflow in SkPath::Iter::next (not scored)
- [OSV-2022-978](https://insights.sbomify.com/OSV-2022-978/): Heap-buffer-overflow in SkPath::Iter::next (not scored)
- [OSV-2022-976](https://insights.sbomify.com/OSV-2022-976/): Heap-buffer-overflow in SkPath::Iter::next (not scored)
- [OSV-2022-972](https://insights.sbomify.com/OSV-2022-972/): Use-of-uninitialized-value in SkFindQuadMaxCurvature (not scored)
- [OSV-2022-970](https://insights.sbomify.com/OSV-2022-970/): Heap-buffer-overflow in SkPath::reverseAddPath (not scored)
- [OSV-2022-97](https://insights.sbomify.com/OSV-2022-97/): Heap-buffer-overflow in gs_interpret (not scored)
- [OSV-2022-969](https://insights.sbomify.com/OSV-2022-969/): Heap-buffer-overflow in SkPath::Iter::next (not scored)
- [OSV-2022-968](https://insights.sbomify.com/OSV-2022-968/): Heap-buffer-overflow in SkMatrix::Persp_pts (not scored)
- [OSV-2022-964](https://insights.sbomify.com/OSV-2022-964/): Use-of-uninitialized-value in cmsMLUgetASCII (not scored)
- [OSV-2022-963](https://insights.sbomify.com/OSV-2022-963/): Security exception in org.codehaus.janino.Parser.parseConditionalExpression (not scored)
- [OSV-2022-962](https://insights.sbomify.com/OSV-2022-962/): Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec (not scored)
- [OSV-2022-961](https://insights.sbomify.com/OSV-2022-961/): Heap-double-free in sc_pkcs15_encode_df (not scored)
- [OSV-2022-96](https://insights.sbomify.com/OSV-2022-96/): Heap-buffer-overflow in sequence_compression_api.c (not scored)
- [OSV-2022-955](https://insights.sbomify.com/OSV-2022-955/): Use-of-uninitialized-value in FileWrite (not scored)
- [OSV-2022-953](https://insights.sbomify.com/OSV-2022-953/): Dynamic-stack-buffer-overflow in rx_icmp (not scored)
- [OSV-2022-952](https://insights.sbomify.com/OSV-2022-952/): UNKNOWN WRITE in regcomp (not scored)
- [OSV-2022-949](https://insights.sbomify.com/OSV-2022-949/): Heap-use-after-free in s_file_write_flush (not scored)
- [OSV-2022-945](https://insights.sbomify.com/OSV-2022-945/): Heap-buffer-overflow in Exiv2::MemIo::read (not scored)
- [OSV-2022-943](https://insights.sbomify.com/OSV-2022-943/): UNKNOWN WRITE in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor (not scored)
- [OSV-2022-94](https://insights.sbomify.com/OSV-2022-94/): Heap-buffer-overflow in cli_strlcat (not scored)
- [OSV-2022-937](https://insights.sbomify.com/OSV-2022-937/): Use-after-poison in rx_ip (not scored)
- [OSV-2022-934](https://insights.sbomify.com/OSV-2022-934/): Index-out-of-bounds in LibRaw::parse_tiff_ifd (not scored)
- [OSV-2022-93](https://insights.sbomify.com/OSV-2022-93/): Heap-buffer-overflow in strtol (not scored)
- [OSV-2022-926](https://insights.sbomify.com/OSV-2022-926/): Heap-buffer-overflow in Ins_PUSHW (not scored)
- [OSV-2022-924](https://insights.sbomify.com/OSV-2022-924/): Heap-buffer-overflow in file_zmagic (not scored)
- [OSV-2022-923](https://insights.sbomify.com/OSV-2022-923/): Heap-buffer-overflow in file_magwarn (not scored)
- [OSV-2022-916](https://insights.sbomify.com/OSV-2022-916/): Container-overflow in wabt::interp::BinaryReaderInterp::BeginFunctionBody (not scored)
- [OSV-2022-915](https://insights.sbomify.com/OSV-2022-915/): Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec (not scored)
- [OSV-2022-91](https://insights.sbomify.com/OSV-2022-91/): Heap-buffer-overflow in pixCountArbInRect (not scored)
- [OSV-2022-908](https://insights.sbomify.com/OSV-2022-908/): Heap-buffer-overflow in element_end (not scored)
- [OSV-2022-904](https://insights.sbomify.com/OSV-2022-904/): Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor (not scored)
- [OSV-2022-903](https://insights.sbomify.com/OSV-2022-903/): Heap-buffer-overflow in AffixMgr::compound_check (not scored)
- [OSV-2022-902](https://insights.sbomify.com/OSV-2022-902/): Invalid-free in function signature specialization <Arg (not scored)
- [OSV-2022-901](https://insights.sbomify.com/OSV-2022-901/): Heap-double-free in HashMgr::~HashMgr (not scored)
- [OSV-2022-899](https://insights.sbomify.com/OSV-2022-899/): Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch (not scored)
- [OSV-2022-896](https://insights.sbomify.com/OSV-2022-896/): Segv on unknown address in Sass::unifyComplex (not scored)
- [OSV-2022-893](https://insights.sbomify.com/OSV-2022-893/): UNKNOWN READ in AffixMgr::suffix_check (not scored)
- [OSV-2022-892](https://insights.sbomify.com/OSV-2022-892/): Segv on unknown address in ddsi_config_init (not scored)
- [OSV-2022-891](https://insights.sbomify.com/OSV-2022-891/): Stack-buffer-overflow in flb_env_var_translate (not scored)
- [OSV-2022-889](https://insights.sbomify.com/OSV-2022-889/): Heap-use-after-free in AffixMgr::prefix_check (not scored)
- [OSV-2022-888](https://insights.sbomify.com/OSV-2022-888/): Stack-buffer-overflow in gs_type2_interpret (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/2/