Open Source Vulnerabilities

neuvector-scanner-task, neuvector-scanner-task

gitlab-rails-ce-19.3

gitlab-rails-ce-fips-18.9

syft-fips

kargo-1.8

k3s-static, k3s-static

langfuse-fips-3-worker

langfuse-fips-3-worker

chaos-mesh-dashboard

consul-k8s-1.1-cli

rancher-helm-3, rancher-helm-3

neuvector-enforcer

neuvector-enforcer

kaniko-warmer, kaniko-warmer

kaniko-warmer, kaniko-warmer

k8sgpt, k8sgpt

rancher-2.10

xeol, xeol

kaniko-fips

kaniko-fips

helm-exporter

consul-k8s-fips-1.5-cli

nerdctl-fips

consul-k8s-fips-1.5-cli

wazuh-dashboard-plugins

wazuh-dashboard-plugins

wazuh-dashboard-plugins

rancher-helm-3, rancher-helm-3

spark-fips-4.1-scala-2.13

consul-k8s-1.7-cli

envoy-gateway-1.6-egctl

eco-python-curl-minimal-bin

rancher-2.11

neuvector-scanner-task-fips

grype-fips

cg

manifest-tool, manifest-tool

rancher-2.11

apache-hive

Netty is an asynchronous, event-driven network application framework

curl-static, curl-static

apache-hive

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas

minio-operator

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

nats-streaming

Previously, resolving relative paths containing parent directory ('

langfuse-fips-4-worker

langfuse-fips-4-worker

apache-hive

Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

nats-streaming

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Velociraptor VQL injection during notebook restore from backup

apache-nifi

Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5

Velociraptor Required Permissions bypass by using client monitoring queries