Open Source Vulnerabilities

com.thoughtworks.xstream:xstream

XStream is vulnerable to a Remote Command Execution attack

org.xwiki.commons:xwiki-commons-core, org.xwiki.commons:xwiki-commons-core, org.xwiki.commons:xwiki-commons-core

XWiki users registered with email verification can self re-activate their disabled accounts

org.xwiki.commons:xwiki-commons-core, org.xwiki.commons:xwiki-commons-core

Script injection without script or programming rights through Gadget titles

github.com/jaegertracing/jaeger

Information Exposure in jaeger

golang.org/x/text

golang.org/x/text Infinite loop

github.com/miekg/dns

miekg/dns parsing error leads to nil pointer dereference and DoS

go.elastic.co/apm

Information Disclosure in go.elastic.co/apm

go.elastic.co/apm

Information disclosure in go.elastic.co/apm

github.com/containers/libpod

Improper Authorization in github.com/containers/libpod

github.com/containers/buildah

Path Traversal in Buildah

github.com/sylabs/sif

Predictable SIF UUID Identifiers in github.com/sylabs/sif

github.com/kiali/kiali

Hard coded cryptographic key in Kiali

github.com/u-root/u-root

github.com/u-root/u-root/pkg/tarutil Arbitrary File Write via Archive Extraction (Zip Slip)

github.com/goharbor/harbor, github.com/goharbor/harbor

Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor

github.com/goharbor/harbor, github.com/goharbor/harbor

SQL Injection in Cloud Native Computing Foundation Harbor

github.com/goharbor/harbor, github.com/goharbor/harbor

SQL Injection in Cloud Native Computing Foundation Harbor

github.com/goharbor/harbor, github.com/goharbor/harbor

Privilege Escalation in Cloud Native Computing Foundation Harbor

github.com/buger/jsonparser

Infinite Loop in jsonparser

github.com/influxdata/influxdb

Improper Authentication in InfluxDB

github.com/hashicorp/consul, github.com/hashicorp/consul

Allocation of Resources Without Limits or Throttling in Hashicorp Consul

github.com/hashicorp/consul, github.com/hashicorp/consul

Improper Input Validation in HashiCorp Consul

github.com/hashicorp/vault, github.com/hashicorp/vault

Information Disclosure in HashiCorp Vault

github.com/hashicorp/vault-plugin-secrets-gcp

Improper Input Validation in HashiCorp Vault

github.com/hashicorp/nomad

Improper Certificate Validation in HashiCorp Nomad

github.com/hashicorp/nomad

Allocation of Resources Without Limits or Throttling in HashiCorp Nomad

github.com/hashicorp/consul

Denial of Service (DoS) in HashiCorp Consul

github.com/hashicorp/terraform

Use of a Broken or Risky Cryptographic Algorithm in Terraform

github.com/nats-io/nats-server/v2

Integer Overflow or Wraparound in NATS Server

gogs.io/gogs

Insecure Permissions in Gogs

libsolv, libsolv, libsolv

libsolv, libsolv, libsolv

pacemaker, pacemaker-cli, pacemaker-cts, pacemaker-doc, pacemaker-libs-devel, pacemaker-nagios-plugins-metadata, pacemaker-remote

pacemaker bug fix and enhancement update

corosync, corosync-vqsim, corosynclib-devel, spausedd

corosync bug fix and enhancement update

bind

Important: bind security update

java-1.8.0-openjdk-accessibility-fastdebug, java-1.8.0-openjdk-accessibility-slowdebug, java-1.8.0-openjdk-demo-fastdebug, java-1.8.0-openjdk-demo-slowdebug, java-1.8.0-openjdk-devel-fastdebug, java-1.8.0-openjdk-devel-slowdebug, java-1.8.0-openjdk-fastdebug, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-src-fastdebug, java-1.8.0-openjdk-src-slowdebug

java-1.8.0-openjdk bug fix and enhancement update

java-11-openjdk-demo-fastdebug, java-11-openjdk-demo-slowdebug, java-11-openjdk-devel-fastdebug, java-11-openjdk-devel-slowdebug, java-11-openjdk-fastdebug, java-11-openjdk-headless-fastdebug, java-11-openjdk-headless-slowdebug, java-11-openjdk-jmods-fastdebug, java-11-openjdk-jmods-slowdebug, java-11-openjdk-slowdebug, java-11-openjdk-src-fastdebug, java-11-openjdk-src-slowdebug, java-11-openjdk-static-libs-fastdebug, java-11-openjdk-static-libs-slowdebug

java-11-openjdk bug fix and enhancement update

bind-dyndb-ldap, custodia, custodia, opendnssec, opendnssec, python3-custodia, python3-custodia, python3-jwcrypto, python3-jwcrypto, python3-jwcrypto, python3-kdcproxy, python3-kdcproxy, python3-pyusb, python3-pyusb, python3-pyusb, python3-qrcode, python3-qrcode, python3-qrcode, python3-qrcode-core, python3-qrcode-core, python3-qrcode-core, python3-yubico, python3-yubico, python3-yubico, softhsm, softhsm, softhsm-devel, softhsm-devel

Important: idm:DL1 security update

bind-dyndb-ldap, custodia, ipa, ipa-healthcheck, opendnssec, python-jwcrypto, python-jwcrypto, python-kdcproxy, python-qrcode, python-yubico, python-yubico, pyusb, pyusb, slapi-nis, softhsm

Important: idm:DL1 security update

libecap, libecap-devel

Important: squid:4 security update

libecap, squid

Important: squid:4 security update

github.com/seccomp/libseccomp-golang

Improper Input Validation in libseccomp-golang

github.com/rancher/rancher, github.com/rancher/rancher, github.com/rancher/rancher

Rancher Vulnerable to Cross-site Request Forgery (CSRF)

github.com/rancher/rancher

Cross-site request forgery in github.com/rancher/rancher

github.com/apache/trafficcontrol

Improper Authentication in Apache Traffic Control

github.com/kubernetes/kube-state-metrics, k8s.io/kube-state-metrics

Duplicate Advisory: k8s.io/kube-state-metrics Exposure of Sensitive Information