Open Source Vulnerabilities
apache-airflow
Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
apache-airflow
Apache Airflow vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Apache Airflow: Permission verification bypass allows viewing dagruns of other dags
Apache Airflow: Permission verification bypass allows viewing dagruns of other dags
Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)
Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)
matio
Heap-buffer-overflow in H5MM_strdup
vlc, vlc
Security update for vlc
vlc, vlc
Security update for vlc
quictls
Updated quictls packages fix a security vulnerability
vorbis-tools, vorbis-tools
Updated vorbis-tools packages fix a security vulnerability
vorbis-tools/ vorbis-tools
Updated vorbis-tools packages fix a security vulnerability
nghttp2
Important: nghttp2 security update
firefox
Important: firefox security update
toolbox
Moderate: toolbox security update
dotnet6.0
Moderate: .NET 6.0 security update
nginx
Moderate: nginx:1.22 security update
binutils
Moderate: binutils security update
libecap, squid
Critical: squid:4 security update
dotnet6.0
Moderate: .NET 6.0 security update
Important: Satellite 6.14 security and bug fix update
github.com/juanfont/headscale
Headscale writes bearer tokens to info-level logs
github.com/juanfont/headscale
Headscale writes bearer tokens to info-level logs
apache-poi
Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord
apache-poi
Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord
fluent-bit
Segv on unknown address in flb_sds_cat_safe
mupdf, mupdf
Security update for mupdf
openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn
openvpn/ openvpn/ openvpn/ openvpn/ openvpn/ openvpn/ openvpn
openvpn, openvpn, openvpn, openvpn, openvpn, openvpn, openvpn
openvpn/ openvpn/ openvpn/ openvpn/ openvpn/ openvpn/ openvpn
Gitsign's Rekor public keys fetched from upstream API instead of local TUF client.
Gitsign's Rekor public keys fetched from upstream API instead of local TUF client.
kube-vip-cloud-provider
CVE-2023-47108 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1
kube-vip-cloud-provider
CVE-2023-47108 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1
moby-containerd-cc
CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.7-3
moby-containerd-cc
CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.7-3
ig
CVE-2023-47108 affecting package ig for versions less than 0.30.0-1
ig
CVE-2023-47108 affecting package ig for versions less than 0.30.0-1
docker-compose
CVE-2023-47108 affecting package docker-compose for versions less than 2.27.0-1
docker-compose
CVE-2023-47108 affecting package docker-compose for versions less than 2.27.0-1
docker-buildx
CVE-2023-47108 affecting package docker-buildx for versions less than 0.14.0-1
docker-buildx
CVE-2023-47108 affecting package docker-buildx for versions less than 0.14.0-1
containerd
CVE-2023-47108 affecting package containerd for versions less than 1.7.13-3
containerd
CVE-2023-47108 affecting package containerd for versions less than 1.7.13-3
moby-containerd-cc
CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.2-3
moby-containerd-cc
CVE-2023-47108 affecting package moby-containerd-cc for versions less than 1.7.2-3
golang-opentelemetry-contrib, golang-opentelemetry-contrib
golang-opentelemetry-contrib/ golang-opentelemetry-contrib
Statamic CMS remote code execution via front-end form uploads
DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics
DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics
