Open Source Vulnerabilities

rlottie, rlottie, rlottie, rlottie

rlottie

rlottie, rlottie

rlottie

rlottie

rlottie

rlottie

rlottie, rlottie

gopkg.in/square/go-jose.v1

Go JOSE Signature Validation Bypass

github.com/ethereum/go-ethereum

Go Ethereum Improper Input Validation

com.thoughtworks.xstream:xstream

XStream is vulnerable to a Remote Command Execution attack

org.xwiki.commons:xwiki-commons-core, org.xwiki.commons:xwiki-commons-core, org.xwiki.commons:xwiki-commons-core

XWiki users registered with email verification can self re-activate their disabled accounts

org.xwiki.commons:xwiki-commons-core, org.xwiki.commons:xwiki-commons-core

Script injection without script or programming rights through Gadget titles

github.com/jaegertracing/jaeger

Information Exposure in jaeger

golang.org/x/text

golang.org/x/text Infinite loop

github.com/miekg/dns

miekg/dns parsing error leads to nil pointer dereference and DoS

go.elastic.co/apm

Information Disclosure in go.elastic.co/apm

go.elastic.co/apm

Information disclosure in go.elastic.co/apm

github.com/containers/libpod

Improper Authorization in github.com/containers/libpod

github.com/containers/buildah

Path Traversal in Buildah

github.com/sylabs/sif

Predictable SIF UUID Identifiers in github.com/sylabs/sif

github.com/kiali/kiali

Hard coded cryptographic key in Kiali

github.com/u-root/u-root

github.com/u-root/u-root/pkg/tarutil Arbitrary File Write via Archive Extraction (Zip Slip)

github.com/goharbor/harbor, github.com/goharbor/harbor

Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor

github.com/goharbor/harbor, github.com/goharbor/harbor

SQL Injection in Cloud Native Computing Foundation Harbor

github.com/goharbor/harbor, github.com/goharbor/harbor

SQL Injection in Cloud Native Computing Foundation Harbor

github.com/goharbor/harbor, github.com/goharbor/harbor

Privilege Escalation in Cloud Native Computing Foundation Harbor

github.com/buger/jsonparser

Infinite Loop in jsonparser

github.com/influxdata/influxdb

Improper Authentication in InfluxDB

github.com/hashicorp/consul, github.com/hashicorp/consul

Allocation of Resources Without Limits or Throttling in Hashicorp Consul

github.com/hashicorp/consul, github.com/hashicorp/consul

Improper Input Validation in HashiCorp Consul

github.com/hashicorp/vault, github.com/hashicorp/vault

Information Disclosure in HashiCorp Vault

github.com/hashicorp/vault-plugin-secrets-gcp

Improper Input Validation in HashiCorp Vault

github.com/hashicorp/nomad

Improper Certificate Validation in HashiCorp Nomad

github.com/hashicorp/nomad

Allocation of Resources Without Limits or Throttling in HashiCorp Nomad

github.com/hashicorp/consul

Denial of Service (DoS) in HashiCorp Consul

github.com/hashicorp/terraform

Use of a Broken or Risky Cryptographic Algorithm in Terraform

github.com/nats-io/nats-server/v2

Integer Overflow or Wraparound in NATS Server

gogs.io/gogs

Insecure Permissions in Gogs

libsolv, libsolv, libsolv

libsolv, libsolv, libsolv

pacemaker, pacemaker-cli, pacemaker-cts, pacemaker-doc, pacemaker-libs-devel, pacemaker-nagios-plugins-metadata, pacemaker-remote

pacemaker bug fix and enhancement update

corosync, corosync-vqsim, corosynclib-devel, spausedd

corosync bug fix and enhancement update