Open Source Vulnerabilities

envoy-gateway-egctl, envoy-gateway-egctl

envoy-gateway-egctl, envoy-gateway-egctl

elastic-agent-fips-9.2

elastic-agent-fips-9.2

elastic-agent-fips-9.1

elastic-agent-fips-9.1

elastic-agent-fips-9.0

elastic-agent-fips-9.0

elastic-agent-fips-8.17

elastic-agent-fips-8.17

elastic-agent-9.2

elastic-agent-9.2

elastic-agent-9.1

elastic-agent-9.1

elastic-agent-9.0

elastic-agent-9.0

elastic-agent-8.17

elastic-agent-8.17

dapr-daprd-fips-1.14

dapr-daprd-fips-1.14

dapr-daprd-1.14

dapr-daprd-1.14

coder-fips

coder-fips

coder

coder

filebeat-fips-9.1

filebeat-fips-9.1

filebeat-fips-9.0

filebeat-fips-9.0

filebeat-fips-8.17

filebeat-fips-8.17

filebeat-9.1

filebeat-9.1

filebeat-9.0

filebeat-9.0

filebeat-8.17

filebeat-8.17

upwind-agent

upwind-agent

argo-exec-geomys-fips-4.1

argo-exec-geomys-fips-4.1

undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops

xmlhttprequest-ssl, @rootio/xmlhttprequest-ssl

CVE-2020-28502 in xmlhttprequest-ssl - Patched by Root

undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay

undici vulnerable to cross-user cache disclosure via same-origin redirect

oauthlib

CVE-2026-118669 in oauthlib - Patched by Root

better-auth, @rootio/better-auth

AIKIDO-2026-136329 in better-auth - Patched by Root

moment, @rootio/moment

CVE-2017-18214 in moment - Patched by Root

moment, @rootio/moment

CVE-2022-31129 in moment - Patched by Root