Open Source Vulnerabilities
kyverno-policy-reporter-ui
Security fix for GHSA-fv92-fjc5-jj9h applied in: kyverno-policy-reporter-ui 2.2.1-r0
kyverno-policy-reporter-ui
Security fix for GHSA-fv92-fjc5-jj9h applied in: kyverno-policy-reporter-ui 2.2.1-r0
kyverno-policy-reporter-ui-fips
Security fix for GHSA-vrw8-fxc6-2r93 applied in: kyverno-policy-reporter-ui-fips 2.3.10-r0
kyverno-policy-reporter-ui-fips
Security fix for GHSA-vrw8-fxc6-2r93 applied in: kyverno-policy-reporter-ui-fips 2.3.10-r0
opensearch-dashboards-3-anomaly-detection-dashboards-plugin, opensearch-dashboards-3-anomaly-detection-dashboards-plugin
opensearch-dashboards-3-anomaly-detection-dashboards-plugin/ opensearch-dashboards-3-anomaly-detection-dashboards-plugin
ruby
Security fix for GHSA-j4pr-3wm6-xx2r applied in: ruby 4.0.2-r0
ruby
Security fix for GHSA-j4pr-3wm6-xx2r applied in: ruby 4.0.2-r0
ruby-3.3, ruby
URI is a module providing classes to handle Uniform Resource Identifiers
ruby-3.3/ ruby
URI is a module providing classes to handle Uniform Resource Identifiers
ruby, ruby
Security fix for GHSA-3m6g-2423-7cp3 applied in: ruby 3.2.10-r0, ruby 4.0.2-r1
ruby/ ruby
Security fix for GHSA-3m6g-2423-7cp3 applied in: ruby 3.2.10-r0, ruby 4.0.2-r1
grafana, prometheus-alertmanager-fips, grafana, grafana, gatekeeper, gatekeeper-fips, grafana, grafana, grafana, grafana, grafana-fips, grafana-fips, loki, loki
Security fix for GHSA-w8rr-5gcm-pp58 applied in: grafana 12.3.7-r0, prometheus-alertmanager-fips 0.32.0-r0, grafana 12.2.9-r3, grafana 13.0.1-r1, gatekeeper 3.20.1-r1, gatekeeper-fips 3.20.1-r1, grafana 12.2.8-r3, grafana 12.3.6-r1, grafana 12.3.6-r2, grafana 12.1.10-r5, grafana-fips 12.2.8-r0, grafana-fips 13.0.0-r0, loki 3.6.10-r1
grafana/ prometheus-alertmanager-fips/ grafana/ grafana/ gatekeeper/ gatekeeper-fips/ grafana/ grafana/ grafana/ grafana/ grafana-fips/ grafana-fips/ loki/ loki
Security fix for GHSA-w8rr-5gcm-pp58 applied in: grafana 12.3.7-r0, prometheus-alertmanager-fips 0.32.0-r0, grafana 12.2.9-r3, grafana 13.0.1-r1, gatekeeper 3.20.1-r1, gatekeeper-fips 3.20.1-r1, grafana 12.2.8-r3, grafana 12.3.6-r1, grafana 12.3.6-r2, grafana 12.1.10-r5, grafana-fips 12.2.8-r0, grafana-fips 13.0.0-r0, loki 3.6.10-r1
ruby, ruby
Ruby JSON is a JSON implementation for Ruby
ruby/ ruby
Ruby JSON is a JSON implementation for Ruby
coredns-fips, gatekeeper, gatekeeper-fips, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips, nats-server-fips, nats-server-config-reloader-fips
SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass
coredns-fips/ gatekeeper/ gatekeeper-fips/ nats-server-config-reloader-fips/ nats-server-fips/ nats-server-fips/ newrelic-k8s-metadata-injection/ nats-server-config-reloader-fips/ nats-server-config-reloader-fips/ nats-server-fips/ nats-server-config-reloader-fips
SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass
ruby, ruby, ruby
Security fix for GHSA-q339-8rmv-2mhv applied in: ruby 3.2.10-r0, ruby 3.3.11-r0, ruby 4.0.2-r1
ruby/ ruby/ ruby
Security fix for GHSA-q339-8rmv-2mhv applied in: ruby 3.2.10-r0, ruby 3.3.11-r0, ruby 4.0.2-r1
prometheus-alertmanager-fips, traefik, etcd, gatekeeper-fips, grafana, minio, gatekeeper, gcp-compute-persistent-disk-csi-driver-fips, loki, loki
Security fix for GHSA-hfvc-g4fc-pqhx applied in: prometheus-alertmanager-fips 0.32.0-r0, traefik 2.11.41-r1, etcd 3.6.9-r0, gatekeeper-fips 3.20.1-r1, grafana 12.3.6-r1, minio 0.20251015.172955-r2, gatekeeper 3.20.1-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0, loki 3.6.10-r1
prometheus-alertmanager-fips/ traefik/ etcd/ gatekeeper-fips/ grafana/ minio/ gatekeeper/ gcp-compute-persistent-disk-csi-driver-fips/ loki/ loki
Security fix for GHSA-hfvc-g4fc-pqhx applied in: prometheus-alertmanager-fips 0.32.0-r0, traefik 2.11.41-r1, etcd 3.6.9-r0, gatekeeper-fips 3.20.1-r1, grafana 12.3.6-r1, minio 0.20251015.172955-r2, gatekeeper 3.20.1-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0, loki 3.6.10-r1
ruby, ruby-3.3, ruby, ruby, ruby
ERB is a templating system for Ruby
ruby/ ruby-3.3/ ruby/ ruby/ ruby
ERB is a templating system for Ruby
freetype
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs
freetype
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs
consul, step-cli, grafana, minio, grafana-fips, loki, loki
Security fix for GHSA-78h2-9frx-2jm8 applied in: consul 1.22.5-r0, step-cli 0.28.7-r3, grafana 12.4.3-r2, minio 0.20251015.172955-r2, grafana-fips 12.2.8-r0, loki 3.6.10-r1
consul/ step-cli/ grafana/ minio/ grafana-fips/ loki/ loki
Security fix for GHSA-78h2-9frx-2jm8 applied in: consul 1.22.5-r0, step-cli 0.28.7-r3, grafana 12.4.3-r2, minio 0.20251015.172955-r2, grafana-fips 12.2.8-r0, loki 3.6.10-r1
freetype
FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode
freetype
FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode
loki, loki
Security fix for GHSA-6jwv-w5xf-7j27 applied in: loki 3.6.10-r1
loki/ loki
Security fix for GHSA-6jwv-w5xf-7j27 applied in: loki 3.6.10-r1
freetype
issue was discovered in FreeType 2 through 2
coredns-fips, gatekeeper, gatekeeper-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips
compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
coredns-fips/ gatekeeper/ gatekeeper-fips/ nats-server-fips/ nats-server-fips/ newrelic-k8s-metadata-injection/ nats-server-fips
compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
opentofu, traefik, trivy, etcd, gatekeeper-fips, grafana, grafana, minio, gatekeeper, gcp-compute-persistent-disk-csi-driver-fips, grafana, grafana-fips, loki, loki
OpenTelemetry-Go is the Go implementation of OpenTelemetry
opentofu/ traefik/ trivy/ etcd/ gatekeeper-fips/ grafana/ grafana/ minio/ gatekeeper/ gcp-compute-persistent-disk-csi-driver-fips/ grafana/ grafana-fips/ loki/ loki
OpenTelemetry-Go is the Go implementation of OpenTelemetry
nodetaint, nats-server-fips, nats-server-fips, nats-server-fips
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
nodetaint/ nats-server-fips/ nats-server-fips/ nats-server-fips
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
loki, loki
Rejected reason: CVE confirmed to be a false positive
loki/ loki
Rejected reason: CVE confirmed to be a false positive
