| Bug | stretch | sid | Description |
|---|
| CVE-2020-8031 | vulnerable (no DSA, postponed) | vulnerable | A Improper Neutralization of Input During Web Page Generation ('Cross- ... |
| CVE-2020-8021 | fixed | vulnerable | a Improper Access Control vulnerability in of Open Build Service allow ... |
| CVE-2020-8020 | fixed | vulnerable | A Improper Neutralization of Input During Web Page Generation vulnerab ... |
| CVE-2018-12479 | vulnerable (no DSA) | fixed | A Improper Input Validation vulnerability in Open Build Service allows ... |
| CVE-2018-12467 | vulnerable (no DSA) | fixed | Authorized users of the openbuildservice before 2.9.4 could delete pac ... |
| CVE-2018-12466 | vulnerable (no DSA) | vulnerable | openSUSE openbuildservice before 9.2.4 allowed authenticated users to ... |
| CVE-2018-7689 | vulnerable (no DSA) | fixed | Lack of permission checks in the InitializeDevelPackage function in op ... |
| CVE-2018-7688 | vulnerable (no DSA) | fixed | A missing permission check in the review handling of openSUSE Open Bui ... |
| CVE-2017-9268 | vulnerable (no DSA) | vulnerable | In the open build service before 201707022 the wipetrigger and rebuild ... |
| CVE-2017-5188 | vulnerable (no DSA) | fixed | The bs_worker code in open build service before 20170320 followed rela ... |