Open Source Vulnerabilities

cilium-1.16-operator-aws, cilium-1.16-operator-generic

cilium-1.16, cilium-1.16-hubble-relay, cilium-1.16-operator-aws, cilium-1.16-operator-generic

cilium-1.16, cilium-1.16-hubble-relay, cilium-1.16-operator-aws, cilium-1.16-operator-generic

cert-manager-acmesolver-fips-1.17, cert-manager-cainjector-fips-1.17, cert-manager-controller-fips-1.17, cert-manager-fips-1.17, cert-manager-startupapicheck-fips-1.17, cert-manager-webhook-fips-1.17

cert-manager-acmesolver-fips-1.17, cert-manager-cainjector-fips-1.17, cert-manager-controller-fips-1.17, cert-manager-fips-1.17, cert-manager-startupapicheck-fips-1.17, cert-manager-webhook-fips-1.17

cert-manager-controller-fips-1.17, cert-manager-fips-1.17

cert-manager-acmesolver-fips-1.17, cert-manager-cainjector-fips-1.17, cert-manager-controller-fips-1.17, cert-manager-fips-1.17, cert-manager-startupapicheck-fips-1.17, cert-manager-webhook-fips-1.17

cert-manager-1.17, cert-manager-acmesolver-1.17, cert-manager-cainjector-1.17, cert-manager-controller-1.17, cert-manager-startupapicheck-1.17, cert-manager-webhook-1.17

cert-manager-1.17, cert-manager-acmesolver-1.17, cert-manager-cainjector-1.17, cert-manager-controller-1.17, cert-manager-startupapicheck-1.17, cert-manager-webhook-1.17

cert-manager-1.17, cert-manager-controller-1.17

cert-manager-1.17, cert-manager-acmesolver-1.17, cert-manager-cainjector-1.17, cert-manager-controller-1.17, cert-manager-startupapicheck-1.17, cert-manager-webhook-1.17

cert-manager-1.16, cert-manager-acmesolver-1.16, cert-manager-cainjector-1.16, cert-manager-controller-1.16, cert-manager-startupapicheck-1.16, cert-manager-webhook-1.16

cert-manager-1.16, cert-manager-acmesolver-1.16, cert-manager-cainjector-1.16, cert-manager-controller-1.16, cert-manager-startupapicheck-1.16, cert-manager-webhook-1.16

cert-manager-1.16, cert-manager-controller-1.16

cert-manager-1.16, cert-manager-acmesolver-1.16, cert-manager-cainjector-1.16, cert-manager-controller-1.16, cert-manager-startupapicheck-1.16, cert-manager-webhook-1.16

cert-manager-1.16, cert-manager-acmesolver-1.16, cert-manager-cainjector-1.16, cert-manager-controller-1.16, cert-manager-startupapicheck-1.16, cert-manager-webhook-1.16

maotoumao MusicFreeDesktop Request Forwarder information disclosure

cassandra-medusa

cassandra-medusa

tornado

Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

tornado

Tornado: Open redirect in RedirectHandler via protocol-relative URLs

tornado

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

calico-node-driver-registrar-fips-3.31

calico-node-driver-registrar-fips-3.31

calico-node-driver-registrar-fips-3.30

calico-node-driver-registrar-fips-3.30

calico-node-driver-registrar-fips-3.30

calico-node-driver-registrar-3.31

calico-node-driver-registrar-3.31

calico-node-driver-registrar-3.31

calico-apiserver-fips, calico-app-policy-fips, calico-cni-fips, calico-felix-fips, calico-goldmane-fips, calico-key-cert-provisioner-fips, calico-kube-controllers-fips, calico-node-fips, calico-pod2daemon-fips, calico-typha-client-fips, calico-typhad-fips, calico-whisker-backend-fips, calicoctl-fips

calico-apiserver-fips, calico-app-policy-fips, calico-cni-fips, calico-felix-fips, calico-goldmane-fips, calico-key-cert-provisioner-fips, calico-kube-controllers-fips, calico-node-fips, calico-pod2daemon-fips, calico-typha-client-fips, calico-typhad-fips, calico-whisker-backend-fips, calicoctl-fips

crass

Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass

systeminformation

systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks

@backstage/plugin-catalog-backend, @backstage/plugin-catalog-backend

Backstage catalog rules can be bypassed for URL locations using encoded path segments

ruby, ruby, ruby

ruby, ruby, ruby

ruby, ruby, ruby

ruby, ruby, ruby

calico-3.29-apiserver-fips, calico-3.29-app-policy-fips, calico-3.29-calicoctl-fips, calico-3.29-cni-fips, calico-3.29-felix-fips, calico-3.29-key-cert-provisioner-fips, calico-3.29-kube-controllers-fips, calico-3.29-node-fips, calico-3.29-pod2daemon-fips, calico-3.29-typha-client-fips, calico-3.29-typhad-fips

calico-3.29-apiserver-fips, calico-3.29-app-policy-fips, calico-3.29-calicoctl-fips, calico-3.29-cni-fips, calico-3.29-felix-fips, calico-3.29-key-cert-provisioner-fips, calico-3.29-kube-controllers-fips, calico-3.29-node-fips, calico-3.29-pod2daemon-fips, calico-3.29-typha-client-fips, calico-3.29-typhad-fips

Objects API: Cross-object-type authorization bypass on the object history-detail endpoint

MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail

InvoicePlane: Guest user IDOR in quote approval and rejection

curl-openssl-3.0, curl-openssl-3.0-dev, curl-openssl-3.0-doc, curl-openssl-3.0-oci-entrypoint, libcurl-openssl-3.0

curl, curl-dev, curl-doc, curl-oci-entrypoint, libcurl-openssl4

curl, curl-dev, curl-doc, curl-oci-entrypoint, libcurl-openssl4

curl, curl-dev, curl-doc, curl-oci-entrypoint, libcurl-openssl4

curl, curl-dev, curl-doc, curl-oci-entrypoint, libcurl-openssl4

curl, curl-dev, curl-doc, curl-oci-entrypoint, libcurl-openssl4