Open Source Vulnerabilities

containerized-data-importer

CVE-2024-24786 affecting package containerized-data-importer for versions less than 1.57.0-6

coredns

CVE-2024-24786 affecting package coredns for versions less than 1.11.1-3

cri-tools

CVE-2024-24786 affecting package cri-tools for versions less than 1.30.1-1

docker-buildx

CVE-2024-24786 affecting package docker-buildx for versions less than 0.14.0-1

docker-compose

CVE-2024-24786 affecting package docker-compose for versions less than 2.27.0-1

etcd

CVE-2024-24786 affecting package etcd for versions less than 3.5.12-2

gh

CVE-2024-24786 affecting package gh for versions less than 2.62.0-1

kata-containers

CVE-2024-24786 affecting package kata-containers for versions less than 3.2.0.azl4-1

kata-containers-cc

CVE-2024-24786 affecting package kata-containers-cc for versions less than 3.2.0.azl4-1

keda

CVE-2024-24786 affecting package keda for versions less than 2.14.0-1

kube-vip-cloud-provider

CVE-2024-24786 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

kubernetes

CVE-2024-24786 affecting package kubernetes for versions less than 1.30.1-1

kubevirt

CVE-2024-24786 affecting package kubevirt for versions less than 1.2.0-10

node-problem-detector

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2

opa

CVE-2024-24786 affecting package opa for versions less than 0.63.0-1

prometheus

CVE-2024-24786 affecting package prometheus for versions less than 2.45.4-6

prometheus-adapter

CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.12.0-1

skopeo

CVE-2024-24786 affecting package skopeo for versions less than 1.14.4-1

telegraf

CVE-2024-24786 affecting package telegraf for versions less than 1.31.0-1

vitess

CVE-2024-24786 affecting package vitess for versions less than 19.0.4-2

ig

CVE-2024-24786 affecting package ig for versions less than 0.29.0-1

node-problem-detector

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2

golang

CVE-2024-24783 affecting package golang for versions less than 1.21.6-1

golang

CVE-2024-24785 affecting package golang for versions less than 1.21.6-1

golang-1.10, golang-1.10, golang-1.6, golang-1.13, golang-1.18, golang-1.10, golang-1.13, golang-1.16, golang-1.18, golang-1.8, golang-1.9, golang-1.21, golang-1.13, golang-1.14, golang-1.16, golang-1.18, golang-1.20, golang-1.17, golang-1.18, golang-1.20, golang-1.21, golang-1.13

golang-1.10, golang-1.18, golang-1.10, golang-1.6, golang-1.13, golang-1.10, golang-1.13, golang-1.16, golang-1.18, golang-1.8, golang-1.9, golang-1.18, golang-1.21, golang-1.13, golang-1.14, golang-1.16, golang-1.20, golang-1.17, golang-1.18, golang-1.20, golang-1.21, golang-1.13

golang-1.10, golang-1.18, golang-1.10, golang-1.6, golang-1.13, golang-1.10, golang-1.13, golang-1.16, golang-1.18, golang-1.8, golang-1.9, golang-1.18, golang-1.21, golang-1.13, golang-1.14, golang-1.16, golang-1.20, golang-1.17, golang-1.18, golang-1.20, golang-1.21, golang-1.13

golang-1.10, golang-1.18, golang-1.10, golang-1.6, golang-1.13, golang-1.10, golang-1.13, golang-1.16, golang-1.18, golang-1.8, golang-1.9, golang-1.18, golang-1.21, golang-1.13, golang-1.14, golang-1.16, golang-1.20, golang-1.17, golang-1.18, golang-1.20, golang-1.21, golang-1.13

golang-1.10, golang-1.18, golang-1.10, golang-1.6, golang-1.13, golang-1.10, golang-1.13, golang-1.16, golang-1.18, golang-1.8, golang-1.9, golang-1.18, golang-1.21, golang-1.13, golang-1.14, golang-1.16, golang-1.17, golang-1.18, golang-1.21, golang-1.13

google-osconfig-agent, google-osconfig-agent, google-osconfig-agent, golang-google-protobuf, google-guest-agent, google-osconfig-agent, golang-google-protobuf, google-guest-agent, google-osconfig-agent, golang-google-protobuf, golang-google-protobuf

stdlib

Errors returned from JSON marshaling may break template escaping in html/template

stdlib

Comments in display names are incorrectly handled in net/mail

stdlib

Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

stdlib

Memory exhaustion in multipart form parsing in net/textproto and net/http

stdlib

Verify panics on certificates with an unknown public key algorithm in crypto/x509

concrete5/concrete5

Concrete CMS Stored Cross-site Scripting vulnerability

Concrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group type

deno, deno_runtime

Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping