Open Source Vulnerabilities

kafka

zstd-jni before 1

kafka

zstd-jni before 1

kafka

zstd-jni versions before 1

kafka

zstd-jni versions before 1

httpbin

urllib3 is an HTTP client library for Python

httpbin

urllib3 is an HTTP client library for Python

sonarqube, wso2mi, wso2mi, wso2mi, sonarqube, elasticsearch, elasticsearch, elasticsearch, elasticsearch

In Bouncy Castle for Java before 1

httpbin

urllib3 is an HTTP client library for Python

httpbin

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages

sonarqube, wso2mi, wso2mi, wso2mi, sonarqube, elasticsearch, elasticsearch, elasticsearch, elasticsearch

In Bouncy Castle for Java before 1

httpbin

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages

httpbin

Security fix for GHSA-6v7p-g79w-8964 applied in: httpbin 0.2.3-r4

httpbin

MessagePack is the serializer implementation for Python msgpack

wso2mi, wso2mi, wso2mi, spark-sc213-jdk17-py312

Objenesis before 3

httpbin

MessagePack is the serializer implementation for Python msgpack

httpbin

meinheld prior to 1

httpbin

Security fix for GHSA-xmj3-9gf7-h52w applied in: httpbin 0.2.3-r4

spark-sc213-jdk17-py312

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows

spark-sc213-jdk17-py312

In Eclipse Vert

spark-sc213-jdk17-py312

In Eclipse Vert

httpbin

Werkzeug is a comprehensive WSGI web application library

spark-sc213-jdk17-py312

flaw was found in Netty

httpbin

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels

knative-serving, knative-serving

Security fix for GHSA-2hw4-c9m4-f2fj applied in: knative-serving 1.20.3-r7

spark-sc213-jdk17-py312

flaw was found in Netty

spark-sc213-jdk17-py312

flaw was found in Netty's HTTP/2 codec

spark-sc213-jdk17-py312

flaw was found in Netty RtspDecoder

spark-sc213-jdk17-py312

flaw was found in Netty's WebSocketServerExtensionHandler

knative-serving, knative-serving

On most platforms, Go uses the given system root certificates

spark-sc213-jdk17-py312

StreamReadConstraints

kedacore-http-add-on

KEDA is a Kubernetes-based Event Driven Autoscaling component

kedacore-http-add-on

OpenTelemetry-Go is the Go implementation of OpenTelemetry

spark-sc213-jdk17-py312

JLine is a Java library for handling console input

spark-sc213-jdk17-py312

JLine is a Java library for handling console input

spark-sc213-jdk17-py312

JLine is a Java library for handling console input

spark-sc213-jdk17-py312

JLine is a Java library for handling console input

spark-sc213-jdk17-py312

JLine is a Java library for handling console input

cert-manager

Security fix for GHSA-2v4p-qf9q-27wj applied in: cert-manager 1.20.4-r2

cert-manager

gRPC-Go is the Go language implementation of gRPC

spark-sc213-jdk17-py312

DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator

spark-sc213-jdk17-py312

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

spark-sc213-jdk17-py312

jackson-databind binds a JSON string to a javax

spark-sc213-jdk17-py312

fix released in jackson-core 2

spark-sc213-jdk17-py312

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

spark-sc213-jdk17-py312

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

sonarqube

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user

sonarqube

Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130)

sonarqube

flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input

sonarqube

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)

sonarqube

Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query