Mika Kulmala

**Name of the Vulnerable Software and Affected Versions** Synology Router Manager (SRM) versions prior to 1.3.1-9346-6 **Description** The issue is related to a Path Traversal vulnerability in the cgi component, allowing remote attackers to read specific files via unspecified vectors. **Recommendations** For versions prior to 1.3.1-9346-6, update to version 1.3.1-9346-6 or later to resolve the issue. As a temporary workaround, consider restricting access to the cgi component until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Synology Router Manager (SRM) versions prior to 1.3.1-9346-6 **Description** The issue allows remote attackers to obtain sensitive information via unspecified vectors. This is related to the exposure of sensitive information to an unauthorized actor vulnerability in the cgi component. **Recommendations** For Synology Router Manager (SRM) versions prior to 1.3.1-9346-6, update to version 1.3.1-9346-6 or later to resolve the issue. As a temporary workaround, consider restricting access to the cgi component to minimize the risk of exploitation.

**Nome do software vulnerável e versões afetadas** Apache Airflow versões 1.10.10 e anteriores **Descrição** Foi detectada uma vulnerabilidade de XSS armazenado nas páginas de gráficos da interface de usuário “clássica”. **Recomendações** Para as versões 1.10.10 e anteriores do Apache Airflow, atualize para uma versão superior à 1.10.10 para resolver o problema.