Open Source Vulnerabilities

datadog-agent-7.80-full, datadog-agent-7.80-full

datadog-agent-7.80-core-integrations, datadog-agent-7.80-core-integrations

loki-fips-3.5-promtail

syft, syft

argo-cd-3.4, argo-cd-3.4

org.springframework.data:spring-data-commons

TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)

vlagent-fips

tflintenv-fips

tekton-pipelines-sidecarlogresults-fips-1.17

tekton-pipelines-sidecarlogresults-fips-1.14

linux-nvidia-tegra

linux-nvidia-tegra vulnerabilities

tekton-pipelines-controller-fips-1.14

loki-fips-3.6-promtail

loki-3.5-loki-canary

underscore, @rootio/underscore

CVE-2026-27601 in underscore - Patched by Root

kaniko, kaniko

grafana-loki-datasource

loki-fips-3.5

commercial-grafana-12.3

commercial-grafana-12.3

commercial-grafana-12.2

commercial-grafana-12.2

commercial-grafana-11.6

commercial-grafana-11.6

commercial-expanso-edge

commercial-expanso-edge

BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion

BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter

loki-3.6-promtail, loki-3.6-promtail

guacingest, guacingest

node-undici, node-undici, node-undici

org.springframework.amqp:spring-amqp

TuxCare security update for org.springframework.amqp:spring-amqp (1 CVE)

witness, witness

loki-3.5-logcli

brotlicffi, duckdb

CVE-2026-111497 in brotlicffi - Patched by Root

loki-fips-3.4-loki-canary

undock, undock

loki-fips-3.4

openssh, rootio-openssh

CVE-2023-51384 in openssh - Patched by Root

openssh, rootio-openssh

CVE-2023-51385 in openssh - Patched by Root

loki-3.6, loki-3.6

wgcf, wgcf

hoek, @rootio/hoek

CVE-2020-36604 in hoek - Patched by Root

hoek, @rootio/hoek

CVE-2018-3728 in hoek - Patched by Root

syft-fips

syft-fips

loki-fips-3.6

nemo-skills

sqlparse

GHSA-27jp-wm6q-gp25 in sqlparse - Patched by Root

ip, @rootio/ip

CVE-2023-42282 in ip - Patched by Root