Open Source Vulnerabilities

pypdf

pypdf possibly loops infinitely when reading DCT inline images without EOF marker

io.vertx:vertx-web, io.vertx:vertx-web

Vert.x-Web vulnerable to Stored Cross-site Scripting in directory listings via file names

io.vertx:vertx-web, io.vertx:vertx-web

Vert.x-Web Access Control Flaw in StaticHandler’s Hidden File Protection for Files Under Hidden Directories

github.com/openbao/openbao

OpenBao leaks HTTPRawBody in Audit Logs

aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server

Hono Improperly Authorizes JWT Audience Validation

OpenBao leaks HTTPRawBody in Audit Logs

jenkins-2.462

gitlab-cng-18.5, gitlab-cfssl-self-sign-scripts-18.5, gitlab-container-registry-scripts-18.5, gitlab-exporter-scripts-18.5, gitlab-gitaly-scripts-18.5, gitlab-pages-scripts-18.5, gitlab-shell-scripts-18.5, gitlab-shell-scripts-compat-18.5, gitlab-base-18.5, gitlab-certificates-18.5, gitlab-container-registry-18.5, gitlab-exporter-18.5, gitlab-logger-18.5, gitlab-logger-compat-18.5, gitlab-shell-18.5, gitaly-config-18.5

python-3.14, python-3.14-base, python-3.14-tk, python-3.14-doc, python-3.14-dev, python-3.14-base-dev

uv, py3.10-uv-build, py3.11-uv-build, py3.12-uv-build, py3.13-uv-build, py3.14-uv-build, py3.10-uv-build-bin, py3.11-uv-build-bin, py3.12-uv-build-bin, py3.13-uv-build-bin, py3.14-uv-build-bin, py3-supported-uv-build, py3-supported-uv-build-bin

jenkins-2.528, jenkins-2.528-compat, jenkins-2.528-remoting, jenkins-2.528-entrypoint, jenkins-2.528-advanced-compat

rabbitmq-server-fips-3.13, rabbitmq-server-fips-3.13-advanced-compat, rabbitmq-server-fips-3.13-default-config, rabbitmq-server-fips-3.13-doc

kubernetes-1.34, kubectl-1.34, kube-scheduler-1.34, kube-controller-manager-1.34, kube-apiserver-1.34, kube-proxy-1.34, kubectl-1.34-advanced-compat, kube-apiserver-1.34-compat, kube-controller-manager-1.34-compat, kube-proxy-1.34-compat, kube-scheduler-1.34-compat, kubectl-1.34-compat

kube-apiserver-fips-1.33, kube-apiserver-fips-1.33-compat, kube-controller-manager-fips-1.33, kube-controller-manager-fips-1.33-compat, kube-proxy-fips-1.33, kube-proxy-fips-1.33-compat, kube-scheduler-fips-1.33, kube-scheduler-fips-1.33-compat, kubectl-fips-1.33, kubectl-fips-1.33-compat, kubelet-fips-1.33, kubelet-fips-1.33-compat, kubernetes-fips-1.33

kube-apiserver-1.33, kube-apiserver-1.33-compat, kube-controller-manager-1.33, kube-controller-manager-1.33-compat, kube-proxy-1.33, kube-proxy-1.33-compat, kube-scheduler-1.33, kube-scheduler-1.33-compat, kubectl-1.33, kubectl-1.33-advanced-compat, kubectl-1.33-compat, kubelet-1.33, kubelet-1.33-compat, kubernetes-1.33

redis-8.0, redis-8.0-advanced-compat, redis-8.0-cluster-advanced-compat, redis-8.0-sentinel-advanced-compat, redis-benchmark-8.0, redis-cli-8.0, redis-docker-entrypoint-8.0

redis-7.2, redis-7.2-advanced-compat, redis-7.2-cluster-advanced-compat, redis-7.2-sentinel-advanced-compat, redis-benchmark-7.2, redis-cli-7.2, redis-docker-entrypoint-7.2

redis-7.4, redis-7.4-advanced-compat, redis-7.4-cluster-advanced-compat, redis-7.4-sentinel-advanced-compat, redis-benchmark-7.4, redis-cli-7.4, redis-docker-entrypoint-7.4

kube-apiserver-fips-1.32, kube-controller-manager-fips-1.32, kube-proxy-fips-1.32, kube-scheduler-fips-1.32, kubectl-fips-1.32, kubernetes-fips-1.32

gitlab-cng-18.5, gitlab-cfssl-self-sign-scripts-18.5, gitlab-container-registry-scripts-18.5, gitlab-exporter-scripts-18.5, gitlab-gitaly-scripts-18.5, gitlab-pages-scripts-18.5, gitlab-shell-scripts-18.5, gitlab-shell-scripts-compat-18.5, gitlab-base-18.5, gitlab-certificates-18.5, gitlab-container-registry-18.5, gitlab-exporter-18.5, gitlab-logger-18.5, gitlab-logger-compat-18.5, gitlab-shell-18.5, gitaly-config-18.5

falco, falco, falco-dev, falco-dev, falco-src, falco-src

falco, falco, falco-dev, falco-dev, falco-src, falco-src

falco, falco, falco-dev, falco-dev, falco-src, falco-src

falco, falco, falco-dev, falco-dev, falco-src, falco-src

falco, falco, falco-dev, falco-dev, falco-src, falco-src

falco, falco, falco-dev, falco-dev, falco-src, falco-src

falco, falco, falco-dev, falco-dev, falco-src, falco-src

falco, falco, falco-dev, falco-dev, falco-src, falco-src

kubectl-fips-1.31, kubernetes-fips-1.31

redis-8.2, redis-cli-8.2, redis-benchmark-8.2, redis-docker-entrypoint-8.2, redis-8.2-advanced-compat, redis-8.2-sentinel-advanced-compat, redis-8.2-cluster-advanced-compat

kubernetes-fips-1.34, kubectl-fips-1.34, kube-scheduler-fips-1.34, kube-controller-manager-fips-1.34, kube-apiserver-fips-1.34, kube-proxy-fips-1.34, kube-apiserver-fips-1.34-compat, kube-controller-manager-fips-1.34-compat, kube-proxy-fips-1.34-compat, kube-scheduler-fips-1.34-compat, kubectl-fips-1.34-compat

sonar-scanner-cli, sonar-scanner-cli, sonar-scanner-cli-compat, sonar-scanner-cli-compat

zookeeper-3.8, zookeeper-3.8-iamguarded-compat

nacos, nacos-compat

minio

kernel-livepatch-SLE15-SP5_Update_28

Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5)

elasticsearch-7, elasticsearch-7-iamguarded

hadoop-fips-3.3.6

jenkins-2.504, jenkins-2.504-compat, jenkins-2.504-remoting

imagemagick, imagemagick-doc, imagemagick-static, imagemagick-dev

linux-gcp-6.8, linux-nvidia-6.8, linux-gke, linux-nvidia, linux-nvidia-lowlatency

linux-gcp-6.8, linux-gke, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities