Open Source Vulnerabilities

optipng

OptiPNG v0

gnutls

GnuTLS 3

cjson

cJSON v1

gnutls

issue was discovered in GnuTLS before 3

cjson

cJSON v1

gnutls

flaw was found in gnutls

cjson

cJSON 1

langfuse-fips-4-worker

langfuse-fips-4-worker

gnutls

flaw was found in gnutls

openvpn

openvpnserv

langfuse-fips-4-worker

langfuse-fips-4-worker

langfuse-fips-4-worker

py3.12-airflow-3

py3.12-airflow-3

npm

node-tar,a Tar for Node

gnutls

vulnerability found in gnutls

py3.12-airflow-3

py3.12-airflow-3

openvpn

issue was discovered in OpenVPN 2

gnutls

timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS

openvpn

OpenVPN 2

gnutls

vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust

openvpn

OpenVPN 2

gnutls

vulnerability was found in GnuTLS

openvpn

Use after free in OpenVPN version 2

gnutls

vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1

openvpn

Using the --fragment option in certain configuration setups OpenVPN version 2

gnutls

flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted

openvpn

OpenVPN from 2

gnutls

flaw was found in GnuTLS

openvpn

OpenVPN before 2

openvpn

Improper validation of source IP addresses in OpenVPN version 2

openvpn

OpenVPN version 2

coreutils

In GNU Coreutils through 8

coreutils

flaw was found in the GNU coreutils "split" program

step-cli, nats-server-config-reloader-fips, gatekeeper, gatekeeper-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips, kyverno-policy-reporter-ui-fips, cloudflared

During the TLS 1

py3-tqdm

tqdm is an open source progress bar for Python and CLI

nss

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead

nss

cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content

nss

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur

nettle

flaw was found in Nettle in versions before 3

cairo

cairo 1

nettle

flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext

cairo

flaw was found in cairo's image-compositor

cairo

issue was discovered in cairo 1

kyverno-policy-reporter-ui-fips, kyverno-policy-reporter-ui-fips, kyverno-policy-reporter-ui-fips, cloudflared

Security fix for GHSA-mqqf-5wvp-8fh8 applied in: kyverno-policy-reporter-ui-fips 2.5.1-r0, kyverno-policy-reporter-ui-fips 2.3.10-r0, kyverno-policy-reporter-ui-fips 2.4.4-r2, cloudflared 2025.11.1-r2

nss

flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3

nss

flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1