Open Source Vulnerabilities

nemo

nemo

nemo

nodetaint, nats-server-fips, nats-server-fips, nats-server-fips

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

loki, loki

Rejected reason: CVE confirmed to be a false positive

keycloak-fips-26.7

keycloak-fips-26.7

keycloak-fips-26.7

keycloak-fips-26.7

keycloak-fips-26.7

coredns-fips, gatekeeper, gatekeeper-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips

Arithmetic over induction variables in loops were not correctly checked for underflow or overflow

grafana, grafana, grafana-fips

OpenFGA is an authorization/permission engine built for developers

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

py3-oci

Security fix for GHSA-5pwr-322w-8jr4 applied in: py3-oci 2.170.0-r0

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

debezium-3.5-connector-mariadb, debezium-3.5-connector-mariadb

py3-oci

Security fix for GHSA-vp96-hxj8-p424 applied in: py3-oci 2.170.0-r0

py3-oci

pyOpenSSL is a Python wrapper around the OpenSSL library

py3-oci

pyOpenSSL is a Python wrapper around the OpenSSL library

step-cli, grafana, grafana, grafana-fips, grafana, grafana-fips

Memory-safety vulnerability in github

qemu

Integer overflow in hw/virtio/virtio-crypto

qemu

Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader

nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, gatekeeper, gatekeeper-fips, grafana, grafana, minio, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation

qemu

Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d

step-cli, nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, gatekeeper, gatekeeper-fips, grafana, grafana, minio, consul, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)

qemu

Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas

step-cli, nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, consul, gatekeeper, gatekeeper-fips, grafana, grafana, minio, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...

qemu

sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci

qemu

Memory leak in the serial_exit_core function in hw/char/serial

qemu

Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu

step-cli, nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, gatekeeper, gatekeeper-fips, grafana, grafana, consul, minio, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash

qemu

Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d

sonar-scanner

ACE vulnerability in configuration file processing by QOS

qemu

Memory leak in hw/audio/ac97

eslint, eslint

step-cli, nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, consul, gatekeeper, gatekeeper-fips, grafana, grafana, minio, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

ReverseProxy can forward queries containing parameters not visible to Rewrite functions

sonar-scanner

Security fix for GHSA-qqpg-mvqg-649v applied in: sonar-scanner 8.0.1.6346-r0

qemu

Memory leak in the v9fs_write function in hw/9pfs/9p

step-cli, nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, etcd, gatekeeper, gatekeeper-fips, grafana, grafana, minio, consul, grafana, grafana, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

step-cli, nats-server-config-reloader-fips, prometheus-alertmanager-fips, grafana, consul, gatekeeper, gatekeeper-fips, grafana, grafana, minio, grafana, grafana, nats-server-config-reloader-fips, nats-server-config-reloader-fips, nats-server-fips, nats-server-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-config-reloader-fips, nats-server-config-reloader-fips

CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

qemu

Memory leak in the v9fs_link function in hw/9pfs/9p

qemu

Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p

qemu

v9fs_xattrcreate function in hw/9pfs/9p