Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    consul, consul, step-cli, nats-server-config-reloader, prometheus-alertmanager-fips, traefik, grafana, trivy, grafana, grafana, etcd, minio, consul

    Summary

    Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

    Published
    31 Oct 2026
    CGA-88c7-4xwj-j4pp
    Fix available
    Packages

    opensearch-dashboards-3-ml-commons-dashboards, opensearch-dashboards-3-ml-commons-dashboards

    Summary

    Published
    31 Oct 2026
    CGA-wpvp-56wv-v54j
    Fix available
    Packages

    open-webui, open-webui

    Summary

    Published
    31 Oct 2026
    CGA-689j-4hgh-v7rg
    Fix available
    Packages

    open-webui, open-webui

    Summary

    Published
    31 Oct 2026
    CGA-543j-hc2m-6vv6
    Fix available
    Packages

    open-webui, open-webui

    Summary

    Published
    31 Oct 2026
    CGA-9x5c-f5pj-3vcj
    Fix available
    Packages

    open-webui, open-webui

    Summary

    Published
    31 Oct 2026
    CGA-x39x-8mgv-6w67
    Fix available
    Packages

    open-webui, open-webui

    Summary

    Published
    31 Oct 2026
    CGA-gv65-rc7v-2crp
    Fix available
    Packages

    open-webui, open-webui

    Summary

    Published
    31 Oct 2026
    CGA-v443-2hcq-p5vj
    Fix available
    Packages

    open-webui, open-webui

    Summary

    Published
    31 Oct 2026
    Packages

    consul, consul, step-cli, nats-server-config-reloader, prometheus-alertmanager-fips, traefik, grafana, grafana, grafana, consul, etcd, minio

    Summary

    (*x509

    Published
    31 Oct 2026
    Packages

    consul-k8s, consul, consul, step-cli, nats-server-config-reloader, prometheus-alertmanager-fips, traefik, grafana, grafana, grafana, consul, etcd, minio

    Summary

    When returning errors, functions in the net/textproto package would include its input as part of the error

    Published
    31 Oct 2026
    Packages

    grafana, grafana, grafana

    Summary

    OpenFGA is an authorization/permission engine built for developers

    Published
    31 Oct 2026
    CGA-f43r-xh4q-j5vv
    No fix available
    Packages

    datadog-agent-fips-7.78-core-integrations

    Summary

    Published
    31 Oct 2026
    CGA-pvw5-9r35-mrvh
    Fix available
    Packages

    elastic-connectors-fips-9.5

    Summary

    Published
    31 Oct 2026
    CGA-4xhg-x2xc-g8jv
    Fix available
    Packages

    elastic-connectors-fips-9.5

    Summary

    Published
    31 Oct 2026
    CGA-2xjp-453j-6h2g
    Fix available
    Packages

    elastic-connectors-fips-9.5

    Summary

    Published
    31 Oct 2026
    CGA-h255-vf25-jj2h
    Fix available
    Packages

    elastic-connectors-fips-9.5

    Summary

    Published
    31 Oct 2026
    CGA-q9j2-5w5p-v2c4
    Fix available
    Packages

    snuba-fips

    Summary

    Published
    31 Oct 2026
    CGA-5jxh-f65p-m93m
    Fix available
    Packages

    snuba-fips

    Summary

    Published
    31 Oct 2026
    CGA-cx54-hv2x-pjr2
    Fix available
    Packages

    snuba-fips

    Summary

    Published
    31 Oct 2026
    CGA-r695-w74c-fxfg
    Fix available
    Packages

    snuba-fips

    Summary

    Published
    31 Oct 2026
    Packages

    rekor

    Summary

    Rekor is an open source software supply chain transparency log

    Published
    31 Oct 2026
    CGA-mg3v-gp6f-cppm
    Fix available
    Packages

    barman

    Summary

    Published
    31 Oct 2026
    CGA-r9qg-c5hj-78cv
    Fix available
    Packages

    barman

    Summary

    Published
    31 Oct 2026
    CGA-p9rf-h37r-p9gg
    Fix available
    Packages

    barman

    Summary

    Published
    31 Oct 2026
    CGA-xpjr-696w-v8cf
    Fix available
    Packages

    barman

    Summary

    Published
    31 Oct 2026
    Packages

    grafana, grafana

    Summary

    Security fix for GHSA-8396-jffm-qx4w applied in: grafana 12.3.7-r0, grafana 13.0.2-r1

    Published
    31 Oct 2026
    CGA-x7cq-wf7c-2ph6
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-x95c-vgr2-mg7m
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-x7jr-6wx2-vg5g
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-rj2c-v779-vjv9
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-q4ch-jxx8-jxmv
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-mfxq-7cqp-g423
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-79cj-pcqc-cwvv
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-64rq-58qf-q5xr
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-crrc-9qch-v4qq
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-cpcv-m8q7-m232
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-55q3-r27c-v29c
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-fcf5-864h-pwgh
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-75rh-mrcj-cf8m
    Fix available
    Packages

    wazuh-dashboard-security-plugin-fips

    Summary

    Published
    31 Oct 2026
    Packages

    busybox

    Summary

    In netstat in BusyBox through 1

    Published
    31 Oct 2026
    Packages

    traefik, traefik, grafana

    Summary

    Moby is an open source container framework

    Published
    31 Oct 2026
    Packages

    busybox

    Summary

    In tar in BusyBox through 1

    Published
    31 Oct 2026
    Packages

    lcms2

    Summary

    Type_MLU_Read function in cmstypes

    Published
    31 Oct 2026
    CGA-7xcm-p2p4-rcqr
    Fix available
    Packages

    wazuh-dashboard-dashboards-visualizations-fips

    Summary

    Published
    31 Oct 2026
    CGA-pmq8-77wx-rqxf
    Fix available
    Packages

    wazuh-dashboard-dashboards-visualizations-fips

    Summary

    Published
    31 Oct 2026
    Packages

    lcms2

    Summary

    Little CMS (aka Little Color Management System) 2

    Published
    31 Oct 2026
    Packages

    lcms2

    Summary

    Little CMS (lcms2) through 2

    Published
    31 Oct 2026
    CGA-ff5p-jjcx-wrx8
    Fix available
    Packages

    wazuh-dashboard-alerting-dashboards-plugin-fips

    Summary

    Published
    31 Oct 2026
    CGA-cfc6-m9h3-7frq
    Fix available
    Packages

    wazuh-dashboard-alerting-dashboards-plugin-fips

    Summary

    Published
    31 Oct 2026