Open Source Vulnerabilities

neuvector-controller-fips

kaniko-warmer-fips

kaniko-warmer-fips

consul-k8s-1.7-cli

kibana-9.5

scorecard, scorecard

kargo-1.9

com.google.protobuf:protobuf-java, io.root.com.google.protobuf:protobuf-java

CVE-2024-7254 in com.google.protobuf:protobuf-java - Patched by Root

com.google.protobuf:protobuf-java, io.root.com.google.protobuf:protobuf-java

CVE-2021-22569 in com.google.protobuf:protobuf-java - Patched by Root

com.google.protobuf:protobuf-java, io.root.com.google.protobuf:protobuf-java

CVE-2021-22570 in com.google.protobuf:protobuf-java - Patched by Root

com.google.protobuf:protobuf-java, io.root.com.google.protobuf:protobuf-java

CVE-2022-3509 in com.google.protobuf:protobuf-java - Patched by Root

com.google.protobuf:protobuf-java, io.root.com.google.protobuf:protobuf-java

CVE-2022-3510 in com.google.protobuf:protobuf-java - Patched by Root

docker-compose, docker-compose

neuvector-scanner-task-fips

com.google.protobuf:protobuf-java, io.root.com.google.protobuf:protobuf-java

CVE-2022-3171 in com.google.protobuf:protobuf-java - Patched by Root

dockerd-29, dockerd-29

cloudbeat-fips-9.2

cloudbeat-fips-9.2

org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bc-fips, io.root.org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bcprov-jdk15on, io.root.org.bouncycastle:bc-fips

CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root

org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bcprov-jdk18on

CVE-2025-14813 in org.bouncycastle:bcprov-jdk18on - Patched by Root

org.bouncycastle:bc-fips, org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bc-fips, io.root.org.bouncycastle:bcprov-jdk18on

CVE-2025-8885 in org.bouncycastle:bc-fips - Patched by Root

org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bcprov-jdk18on

CVE-2024-30171 in org.bouncycastle:bcprov-jdk18on - Patched by Root

org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bcprov-jdk18on

CVE-2024-30172 in org.bouncycastle:bcprov-jdk18on - Patched by Root

org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bcprov-jdk18on

CVE-2024-34447 in org.bouncycastle:bcprov-jdk18on - Patched by Root

org.bouncycastle:bcpkix-jdk18on, org.bouncycastle:bcpkix-jdk15on, io.root.org.bouncycastle:bcpkix-jdk18on, io.root.org.bouncycastle:bcpkix-jdk15on

CVE-2025-8916 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

org.bouncycastle:bcprov-jdk18on, io.root.org.bouncycastle:bcprov-jdk18on

CVE-2026-0636 in org.bouncycastle:bcprov-jdk18on - Patched by Root

org.bouncycastle:bcpkix-jdk18on, org.bouncycastle:bcpkix-jdk15on, io.root.org.bouncycastle:bcpkix-jdk18on, io.root.org.bouncycastle:bcpkix-jdk15on

CVE-2026-5588 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

fuse-overlayfs-snapshotter, fuse-overlayfs-snapshotter

evolution, evolution, evolution

pcs, pcs, pcs

kibana-9.5-iamguarded

datadog-agent-7.77, datadog-agent-7.77

amazon-ecs-agent-fips

consul-k8s-fips-1.4-cli

dompurify, @rootio/dompurify

GHSA-76mc-f452-cxcm in dompurify - Patched by Root

dompurify, @rootio/dompurify

CVE-2026-49978 in dompurify - Patched by Root

dompurify, @rootio/dompurify

CVE-2026-65898 in dompurify - Patched by Root

dompurify, @rootio/dompurify

CVE-2026-65902 in dompurify - Patched by Root

dompurify, @rootio/dompurify

GHSA-cmwh-pvxp-8882 in dompurify - Patched by Root

headlamp, headlamp

k9s-fips

k9s-fips

gitlab-rails-ce-fips-19.0

org.springframework.kafka:spring-kafka, io.root.org.springframework.kafka:spring-kafka

CVE-2026-41731 in org.springframework.kafka:spring-kafka - Patched by Root

gitlab-rails-ce-fips-18.11

redpanda-operator-25.3

cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options

dogstatsd-7.77, dogstatsd-7.77

docker-cli-buildx-fips

chainctl