Open Source Vulnerabilities

opensearch-dashboards-3-dashboards-reporting, opensearch-dashboards-3-dashboards-reporting

opensearch-dashboards-3-dashboards-reporting, opensearch-dashboards-3-dashboards-reporting

nodejs, nodejs

flaw in Node

nats-server-fips, falcosidekick, falcosidekick-fips, go-fips-1.24

processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

nodejs, nodejs

We have identified a bug in Node

nats-server-fips, falcosidekick, falcosidekick-fips, go-fips-1.24

Reader

nats-server-fips, falcosidekick, falcosidekick-fips, go-fips-1.24

ParseAddress function constructs domain-literal address components through repeated string concatenation

nodejs, nodejs

flaw in Node

nodejs, nodejs

flaw in Node

go-fips-1.24, go-fips-1.24

When using http

nodejs, nodejs

malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node

gatekeeper, gatekeeper-fips, newrelic-k8s-metadata-injection, nats-server-fips, cloudflared, go-fips-1.24, go-fips-1.24

Downloading and building modules with malicious version strings can cause local code execution

nodejs, nodejs

Security fix for GHSA-73rr-hh4g-fpgx applied in: nodejs 25.4.0-r0, nodejs 25.4.0-r1

gatekeeper, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips, cloudflared, go-fips-1.24, go-fips-1.24

Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content

step-cli, nats-server-config-reloader-fips, gatekeeper, gatekeeper-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips, kyverno-policy-reporter-ui-fips, cloudflared, go-fips-1.24, go-fips-1.24

net/url package does not set a limit on the number of query parameters in a query

nodejs, nodejs

node-tar,a Tar for Node

nodejs, nodejs

node-tar is a Tar for Node

nextcloud-server-32

nextcloud-server-32

step-cli, nats-server-config-reloader-fips, gatekeeper, gatekeeper-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips, kyverno-policy-reporter-ui-fips, cloudflared, go-fips-1.24, go-fips-1.24

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened

cups

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

cups

buffer overflow issue was addressed with improved memory handling

cups

buffer overflow issue was addressed with improved memory handling

cups

buffer overflow was addressed with improved bounds checking

cups

memory corruption issue was addressed with improved validation

libtasn1

_asn1_check_identifier function in GNU Libtasn1 through 4

cups

logic issue was addressed with improved state management

coredns-fips, gatekeeper, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips, go-fips-1.24

discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary

libtasn1

issue was discovered in the _asn1_decode_simple_ber function in decoding

cups

OpenPrinting CUPS is an open source printing system

libtasn1

GNU Libtasn1-4

opensearch-dashboards-3-ml-commons-dashboards, opensearch-dashboards-3-ml-commons-dashboards

cups

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution

libtasn1

GNU Libtasn1 before 4

cups

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems

kibana-9.2

kibana-9.2

cups

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support

coredns-fips, step-cli, nats-server-config-reloader-fips, gatekeeper, gatekeeper-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-fips, kyverno-policy-reporter-ui-fips, cloudflared, go-fips-1.24, go-fips-1.24, go-fips-1.24

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

cups

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems

cups

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems

cups

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems

cups

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems

unbound

Unbound before 1

unbound

Unbound 1

unbound

Unbound before 1

unbound

Unbound before 1

unbound

NLnet Labs Unbound, up to and including version 1

unbound

NLnet Labs Unbound, up to and including version 1

unbound

vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software