Open Source Vulnerabilities

Malicious client could set xattr value outside of BuildKit state directory

Possible panic from Git source resolver

kafka-4.4-openjdk-21

kafka-4.4-openjdk-21

kafka-4.4-openjdk-21

kafka-fips-4.4

kafka-fips-4.4

kafka-fips-4.4

kafka-4.4-openjdk-21

kafka-4.4-openjdk-21

kafka-4.4-openjdk-21

Bake filesystem path entitlements approval can be skipped in some multi-target builds

HumHub 1.19.0 - Stored cross-site scripting in friendship confirmation

Bake filesystem path entitlements approval can be skipped for path using basename prefix

Docker Sandboxes host Git executes repository-controlled programs

org.springframework:spring-beans

org.apache.cxf:cxf-integration-jca

org.springframework:spring-expression

org.springframework:spring-web

org.eclipse.jetty:jetty-server

org.apache.cxf:cxf-rt-rs-security-oauth2

org.apache.cxf:cxf-rt-rs-security-oauth2

org.apache.cxf:cxf-rt-rs-security-oauth2

org.apache.cxf:cxf-rt-ws-transfer

org.springframework:spring-context-support

org.springframework:spring-messaging

org.springframework:spring-webflux

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs

org.apache.cxf:cxf-core

org.springframework:spring-webflux

org.springframework:spring-web

org.springframework:spring-webmvc

org.apache.cxf:cxf-rt-rs-security-oauth2

org.springframework:spring-expression

org.apache.cxf:cxf-rt-rs-service-description

ldns

org.apache.cxf:cxf-rt-databinding-aegis

org.springframework:spring-expression

org.springframework:spring-webmvc

org.eclipse.jetty:jetty-http, org.eclipse.jetty:jetty-server

org.apache.cxf:cxf-rt-rs-security-oauth2

org.apache.cxf:cxf-rt-rs-security-jose

org.eclipse.jetty:jetty-server

org.springframework:spring-webmvc

org.apache.cxf:cxf-core

org.springframework:spring-web

org.springframework:spring-expression

org.apache.cxf:cxf-rt-rs-security-oauth2

org.apache.cxf:cxf-rt-transports-jms

c-ares-1.16.0