Open Source Vulnerabilities

grafana, trivy, grafana

go-git is an extensible git implementation library written in pure Go

consul-k8s, consul, step-cli, traefik, grafana, trivy, grafana, grafana, minio, grafana-fips, grafana, grafana-fips, loki, loki, grafana, grafana, grafana, grafana

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

grafana, trivy, grafana

go-git is an extensible git implementation library written in pure Go

grafana-fips, grafana, grafana, grafana

Delete function fails to properly validate offsets when processing malformed JSON input

coredns-fips, nats-server-config-reloader-fips, etcd, grafana, grafana, trivy, consul, nats-server-fips, nats-server-fips, nats-server-fips, nats-server-fips, grafana, grafana, grafana, grafana

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

falcosidekick, falcosidekick-fips

go command may execute unexpected commands when operating in untrusted VCS repositories

falcosidekick, falcosidekick-fips

net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

coredns-fips, step-cli, nats-server-config-reloader-fips, trivy, consul, gatekeeper, gatekeeper-fips, grafana, grafana, nats-server-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-fips, grafana, grafana, grafana, kyverno-policy-reporter-ui-fips, grafana

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

coredns-fips, step-cli, nats-server-config-reloader-fips, trivy, consul, gatekeeper, gatekeeper-fips, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips, nats-server-config-reloader-fips, nats-server-config-reloader-fips, grafana, nats-server-config-reloader-fips, nats-server-fips, grafana, grafana, kyverno-policy-reporter-ui-fips, grafana

On Linux, if the target of Root

kyverno-policy-reporter-ui

Security fix for GHSA-47m2-4cr7-mhcw applied in: kyverno-policy-reporter-ui 2.4.4-r0

kyverno-policy-reporter-ui

Security fix for GHSA-fv92-fjc5-jj9h applied in: kyverno-policy-reporter-ui 2.2.1-r0

kyverno-policy-reporter-ui-fips

Security fix for GHSA-vrw8-fxc6-2r93 applied in: kyverno-policy-reporter-ui-fips 2.3.10-r0

opensearch-dashboards-3-anomaly-detection-dashboards-plugin, opensearch-dashboards-3-anomaly-detection-dashboards-plugin

airbyte-platform-server

airbyte-platform-server

airbyte-platform-server

airbyte-platform-server

airbyte-platform-server

ruby

Security fix for GHSA-j4pr-3wm6-xx2r applied in: ruby 4.0.2-r0

ruby-3.3, ruby

URI is a module providing classes to handle Uniform Resource Identifiers

ruby, ruby

Security fix for GHSA-3m6g-2423-7cp3 applied in: ruby 3.2.10-r0, ruby 4.0.2-r1

grafana, prometheus-alertmanager-fips, grafana, grafana, gatekeeper, gatekeeper-fips, grafana, grafana, grafana, grafana, grafana-fips, grafana-fips, loki, loki

Security fix for GHSA-w8rr-5gcm-pp58 applied in: grafana 12.3.7-r0, prometheus-alertmanager-fips 0.32.0-r0, grafana 12.2.9-r3, grafana 13.0.1-r1, gatekeeper 3.20.1-r1, gatekeeper-fips 3.20.1-r1, grafana 12.2.8-r3, grafana 12.3.6-r1, grafana 12.3.6-r2, grafana 12.1.10-r5, grafana-fips 12.2.8-r0, grafana-fips 13.0.0-r0, loki 3.6.10-r1

ruby, ruby

Ruby JSON is a JSON implementation for Ruby

coredns-fips, gatekeeper, gatekeeper-fips, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips, nats-server-fips, nats-server-config-reloader-fips

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

ruby, ruby, ruby

Security fix for GHSA-q339-8rmv-2mhv applied in: ruby 3.2.10-r0, ruby 3.3.11-r0, ruby 4.0.2-r1

prometheus-alertmanager-fips, traefik, etcd, gatekeeper-fips, grafana, minio, gatekeeper, gcp-compute-persistent-disk-csi-driver-fips, loki, loki

Security fix for GHSA-hfvc-g4fc-pqhx applied in: prometheus-alertmanager-fips 0.32.0-r0, traefik 2.11.41-r1, etcd 3.6.9-r0, gatekeeper-fips 3.20.1-r1, grafana 12.3.6-r1, minio 0.20251015.172955-r2, gatekeeper 3.20.1-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0, loki 3.6.10-r1

ruby, ruby-3.3, ruby, ruby, ruby

ERB is a templating system for Ruby

freetype

FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs

consul, step-cli, grafana, minio, grafana-fips, loki, loki

Security fix for GHSA-78h2-9frx-2jm8 applied in: consul 1.22.5-r0, step-cli 0.28.7-r3, grafana 12.4.3-r2, minio 0.20251015.172955-r2, grafana-fips 12.2.8-r0, loki 3.6.10-r1

freetype

FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode

loki, loki

Security fix for GHSA-6jwv-w5xf-7j27 applied in: loki 3.6.10-r1

freetype

issue was discovered in FreeType 2 through 2

coredns-fips, gatekeeper, gatekeeper-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips

compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

opentofu, traefik, trivy, etcd, gatekeeper-fips, grafana, grafana, minio, gatekeeper, gcp-compute-persistent-disk-csi-driver-fips, grafana, grafana-fips, loki, loki

OpenTelemetry-Go is the Go implementation of OpenTelemetry

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8

gitlab-rails-ce-fips-18.8