Open Source Vulnerabilities
keycloak
Security fix for CVE-2026-93879 applied in: keycloak 26.8.1-r1
keycloak
Security fix for CVE-2026-93879 applied in: keycloak 26.8.1-r1
keycloak
pgjdbc, the PostgreSQL JDBC Driver, versions 42
keycloak
pgjdbc, the PostgreSQL JDBC Driver, versions 42
keycloak
pgjdbc, the PostgreSQL JDBC Driver, versions 42
keycloak
pgjdbc, the PostgreSQL JDBC Driver, versions 42
keycloak
opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API
keycloak
opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API
keycloak
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
keycloak
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
keycloak
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
keycloak
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
keycloak
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
keycloak
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
keycloak
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
keycloak
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
keycloak
Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4
keycloak
Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4
keycloak
jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be ...
keycloak
jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be ...
keycloak
buffer overflow vulnerability in the Brotli decoder (c/dec/decode
keycloak
buffer overflow vulnerability in the Brotli decoder (c/dec/decode
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
keycloak
In Bouncy Castle for Java before 1
tempo, tempo, tempo, vault, vault
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
tempo/ tempo/ tempo/ vault/ vault
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
tempo, tempo, tempo, vault, vault
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
tempo/ tempo/ tempo/ vault/ vault
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
tempo, tempo, tempo, vault, vault
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
tempo/ tempo/ tempo/ vault/ vault
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
tempo, tempo, vault, vault, vault, vault
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
tempo/ tempo/ vault/ vault/ vault/ vault
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
tempo, tempo, vault, vault, vault, vault
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
tempo/ tempo/ vault/ vault/ vault/ vault
When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
tempo, tempo, tempo
Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...
tempo/ tempo/ tempo
Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...
apache-superset
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks
apache-superset
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks
apache-superset
decode-uri-component through 0
apache-superset
decode-uri-component provides a more robust alternative to decodeURIComponent
apache-superset
decode-uri-component provides a more robust alternative to decodeURIComponent
apache-superset
Security fix for GHSA-gj4f-r7mf-jjxh applied in: apache-superset 6.1.0-r8
apache-superset
Security fix for GHSA-gj4f-r7mf-jjxh applied in: apache-superset 6.1.0-r8
apache-superset
Security fix for CVE-2026-112910 applied in: apache-superset 6.1.0-r8
apache-superset
Security fix for CVE-2026-112910 applied in: apache-superset 6.1.0-r8
apache-superset
filelock is a platform-independent file lock for Python
apache-superset
filelock is a platform-independent file lock for Python
apache-superset
pyasn1 is a generic ASN
apache-superset
pyasn1 is a generic ASN
apache-superset
pyasn1 is a generic ASN
apache-superset
pyasn1 is a generic ASN
