Open Source Vulnerabilities
kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver/ kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver/ kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver/ kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver/ kubeflow-pipelines-apiserver
opensearch-dashboards-3-fips-dashboards-search-relevance
hplip
Important: hplip security update
firefox
Important: firefox security, bug fix, and enhancement update
firefox
Important: firefox security, bug fix, and enhancement update
tomcat
Important: tomcat security update
consul-k8s, consul-k8s, consul-k8s
Security fix for GHSA-xf85-363p-868w applied in: consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3
consul-k8s/ consul-k8s/ consul-k8s
Security fix for GHSA-xf85-363p-868w applied in: consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3
consul-k8s, consul-k8s, consul-k8s
Security fix for GHSA-8xwf-rjm4-xvhv applied in: consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3
consul-k8s/ consul-k8s/ consul-k8s
Security fix for GHSA-8xwf-rjm4-xvhv applied in: consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3
opentofu, opentofu, opentofu, consul-k8s, consul-k8s, consul-k8s
oras-go is a Go library for managing OCI artifacts
opentofu/ opentofu/ opentofu/ consul-k8s/ consul-k8s/ consul-k8s
oras-go is a Go library for managing OCI artifacts
gatekeeper-fips, gatekeeper-fips
Security fix for CVE-2025-1234 applied in: gatekeeper-fips 3.22.1-r0
gatekeeper-fips/ gatekeeper-fips
Security fix for CVE-2025-1234 applied in: gatekeeper-fips 3.22.1-r0
fulcio
Security fix for CVE-2025-12345 applied in: fulcio 1.8.2-r0
fulcio
Security fix for CVE-2025-12345 applied in: fulcio 1.8.2-r0
opensearch-dashboards-2-fips-dashboards-reporting
opensearch-dashboards-3-alerting-dashboards-plugin, opensearch-dashboards-3-alerting-dashboards-plugin
opensearch-dashboards-3-alerting-dashboards-plugin/ opensearch-dashboards-3-alerting-dashboards-plugin
grafana
Security fix for GHSA-cf98-j28v-49v6 applied in: grafana 12.3.7-r0
grafana
Security fix for GHSA-cf98-j28v-49v6 applied in: grafana 12.3.7-r0
ant-releases
`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)
ant-releases
`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)
codeq
`codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)
codeq
`codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)
grafana
Security fix for GHSA-hcxc-wf8j-23hv applied in: grafana 12.3.7-r0
grafana
Security fix for GHSA-hcxc-wf8j-23hv applied in: grafana 12.3.7-r0
grafana
time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so
grafana
time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so
