Open Source Vulnerabilities

apache-nifi, druid-fips

Netty is an asynchronous, event-driven network application framework

apache-nifi

Security fix for GHSA-f6hv-jmp6-3vwv applied in: apache-nifi 2.9.0-r2

apache-nifi

Security fix for GHSA-mj4r-2hfc-f8p6 applied in: apache-nifi 2.9.0-r2

nats-server-config-reloader-fips

Security fix for GHSA-cfpf-hrx2-8rv6 applied in: nats-server-config-reloader-fips 0.22.0-r0

apache-nifi

Security fix for GHSA-cm33-6792-r9fm applied in: apache-nifi 2.9.0-r2

druid-fips

Security fix for GHSA-78wr-2p64-hpwp applied in: druid-fips 35.0.0-r1

apache-nifi

Security fix for GHSA-5x3r-wrvg-rp6q applied in: apache-nifi 2.9.0-r2

apache-nifi

Security fix for GHSA-563q-j3cm-6jxm applied in: apache-nifi 2.9.0-r2

apache-nifi

Security fix for GHSA-c2gf-v879-257j applied in: apache-nifi 2.9.0-r2

redisinsight

redisinsight

redisinsight

apache-nifi

Security fix for GHSA-cq4q-cv5g-r8q5 applied in: apache-nifi 2.9.0-r2

apache-nifi

Security fix for GHSA-cmm3-54f8-px4j applied in: apache-nifi 2.9.0-r2

apache-nifi

Security fix for GHSA-xmv7-r254-6q78 applied in: apache-nifi 2.9.0-r2

druid-fips

Security fix for GHSA-6fmv-xxpf-w3cw applied in: druid-fips 36.0.0-r1

coredns-fips

CoreDNS is a DNS server that chains plugins

apache-nifi

Security fix for GHSA-676x-f7gg-47vc applied in: apache-nifi 2.9.0-r2

coredns-fips

CoreDNS is a DNS server that chains plugins

apache-nifi

Security fix for GHSA-5pvg-856g-cp85 applied in: apache-nifi 2.9.0-r2

apache-nifi

Security fix for GHSA-45q3-82m4-75jr applied in: apache-nifi 2.9.0-r2

coredns-fips

CoreDNS is a DNS server written in Go

coredns-fips

CoreDNS is a DNS server that chains plugins

druid-fips

Directory Traversal vulnerability in the extractFile method of org

apache-nifi

Security fix for GHSA-w573-9ffj-6ff9 applied in: apache-nifi 2.9.0-r2

coredns-fips

CoreDNS is a DNS server that chains plugins

apache-nifi

Security fix for GHSA-rwm7-x88c-3g2p applied in: apache-nifi 2.9.0-r2

coredns-fips

CoreDNS is a DNS server that chains plugins

apache-nifi

Security fix for GHSA-c653-97m9-rcg9 applied in: apache-nifi 2.9.0-r2

coredns-fips

CoreDNS is a DNS server that chains plugins

apache-nifi, druid-fips, druid-fips

Netty is an asynchronous, event-driven network application framework

apache-nifi

Security fix for GHSA-x4gw-5cx5-pgmh applied in: apache-nifi 2.9.0-r2

apache-nifi, druid-fips, druid-fips

Netty is a network application framework for development of protocol servers and clients

apache-nifi

Security fix for GHSA-3qp7-7mw8-wx86 applied in: apache-nifi 2.9.0-r2

apache-nifi, druid-fips, druid-fips

Netty is an asynchronous, event-driven network application framework

apache-nifi, druid-fips, druid-fips

Netty is a network application framework for development of protocol servers and clients

kyverno-policy-reporter-ui-fips, step-cli

Security fix for GHSA-9g5q-2w5x-hmxf applied in: kyverno-policy-reporter-ui-fips 2.7.2-r1, step-cli 0.28.7-r3

apache-nifi

Netty is a network application framework for development of protocol servers and clients

apache-nifi, druid-fips, druid-fips

Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`

druid-fips

Security fix for GHSA-7rf3-mqpx-h7xg applied in: druid-fips 36.0.0-r0

apache-nifi, druid-fips, druid-fips

Netty is a network application framework for development of protocol servers and clients

apache-nifi, druid-fips, druid-fips

yawkat LZ4 Java provides LZ4 compression for Java

traefik, traefik, coredns-fips

etcd is a distributed key-value store for the data of a distributed system

kyverno-policy-reporter-ui-fips, step-cli

Security fix for GHSA-3fxj-6jh8-hvhx applied in: kyverno-policy-reporter-ui-fips 2.7.2-r1, step-cli 0.28.7-r3

apache-nifi, druid-fips, druid-fips, druid-fips

In Eclipse Jetty, an HTTP URI of this form: /public;/

coredns-fips

Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring

apache-nifi

Netty is a network application framework for development of protocol servers and clients

druid-fips, druid-fips, druid-fips

Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

kyverno-policy-reporter-ui-fips, step-cli

Security fix for GHSA-rjr7-jggh-pgcp applied in: kyverno-policy-reporter-ui-fips 2.7.2-r1, step-cli 0.28.7-r3

druid-fips, druid-fips, druid-fips

TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e