Open Source Vulnerabilities

stb

stb_image is a single file MIT licensed library for processing images

gatekeeper, kyverno-policy-reporter-ui-fips, prometheus-alertmanager-fips, falcoctl-fips, nodetaint, trivy, nats-server-fips, nats-server-fips, alertmanager-fips, nats-server-fips, falcosidekick, falcosidekick-fips, cloudflared, go-fips-1.24, gitaly, gitaly-fips

Security fix for GHSA-j5w8-q4qc-rx2x applied in: gatekeeper 3.20.1-r0, kyverno-policy-reporter-ui-fips 2.4.4-r0, prometheus-alertmanager-fips 0.29.0-r1, falcoctl-fips 0.11.0-r0, nodetaint 0.0.4-r1, trivy 0.67.2-r0, nats-server-fips 2.11.11-r1, nats-server-fips 2.9.25-r1, alertmanager-fips 0.29.0-r1, nats-server-fips 2.10.29-r2, falcosidekick 2.32.0-r0, falcosidekick-fips 2.32.0-r0, cloudflared 2025.11.1-r1, go-fips-1.24 1.24.12-r0, gitaly 14-9-3-r0, gitaly-fips 14.9.3-r0

mariadb

MariaDB Server v10

stb

stb_image is a single file MIT licensed library for processing images

mariadb

MariaDB Server v10

stb

stb_image is a single file MIT licensed library for processing images

mariadb

There is an Assertion failure in MariaDB Server v10

stb

stb_image is a single file MIT licensed library for processing images

mariadb

MariaDB Server v10

stb

stb_image is a single file MIT licensed library for processing images

mariadb

MariaDB Server v10

stb

Nothings stb 2

mariadb

MariaDB Server v10

mariadb

MariaDB Server v10

mariadb

MariaDB Server v10

mariadb

MariaDB Server v10

mariadb

issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10

mariadb

MariaDB Server v10

mariadb

MariaDB Server v10

mariadb

issue in the component Field::set_default of MariaDB Server v10

lz4

LZ4 before 1

mariadb

issue in the component my_decimal::operator= of MariaDB Server v10

libid3tag

id3_field_parse function in field

lz4

There's a flaw in lz4

mariadb

issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10

mariadb

issue in the component Create_tmp_table::finalize of MariaDB Server v10

libid3tag

id3_ucs4_length function in ucs4

lame

There is a division-by-zero vulnerability in LAME 3

mariadb

MariaDB Server v10

lame

unpack_read_samples function in frontend/get_audio

mariadb

MariaDB Server v10

nodejs

Undici is an HTTP/1

lame

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

mariadb

MariaDB v10

nodejs

memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification

lame

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

mariadb

MariaDB v10

nodejs

vulnerability has been identified in Node

mariadb

MariaDB v10

lame

fill_buffer_resample function in util

grafana-alloy

Security fix for GHSA-jc7w-c686-c4v9 applied in: grafana-alloy 1.10.0-r4

nodejs

With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created

mariadb

MariaDB v10

lame

lame_init_params function in lame

mariadb

MariaDB v10

opensearch-dashboards-3-anomaly-detection-dashboards-plugin, opensearch-dashboards-3-anomaly-detection-dashboards-plugin

qt6-qtbase

issue was discovered in HTTP2 in Qt before 5

mariadb

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)

libuv

libuv is a multi-platform support library with a focus on asynchronous I/O

mariadb

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump)