Open Source Vulnerabilities
libsndfile
libsndfile through 1
nodetaint
attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing
nodetaint
attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing
nodetaint
malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption
nodetaint
malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption
nodetaint
In net/http in Go before 1
nodetaint
net/http in Go before 1
nodetaint
Security fix for GHSA-5cv4-jp36-h3mw applied in: nodetaint 0.0.4-r1
nodetaint
Security fix for GHSA-5cv4-jp36-h3mw applied in: nodetaint 0.0.4-r1
consul-k8s, consul-k8s, thanos, thanos, thanos, consul-k8s, grafana, thanos, thanos, thanos, thanos, grafana
mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS
consul-k8s/ consul-k8s/ thanos/ thanos/ thanos/ consul-k8s/ grafana/ thanos/ thanos/ thanos/ thanos/ grafana
mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS
nodetaint
Security fix for GHSA-h86h-8ppg-mxmh applied in: nodetaint 0.0.4-r1
nodetaint
Security fix for GHSA-h86h-8ppg-mxmh applied in: nodetaint 0.0.4-r1
firefox
Important: firefox security, bug fix, and enhancement update
firefox
Important: firefox security, bug fix, and enhancement update
dotnet9.0
Important: .NET 9.0 security, bug fix, and enhancement update
dotnet9.0
Important: .NET 9.0 security, bug fix, and enhancement update
dotnet10.0
Important: .NET 10.0 security, bug fix, and enhancement update
dotnet10.0
Important: .NET 10.0 security, bug fix, and enhancement update
dotnet8.0
Important: .NET 8.0 security, bug fix, and enhancement update
dotnet8.0
Important: .NET 8.0 security, bug fix, and enhancement update
py3.13-setuptools, py3.11-setuptools, py3.12-setuptools, py3.14-setuptools, py3-setuptools
vulnerability in the package_index module of pypa/setuptools versions up to 69
py3.13-setuptools/ py3.11-setuptools/ py3.12-setuptools/ py3.14-setuptools/ py3-setuptools
vulnerability in the package_index module of pypa/setuptools versions up to 69
py3-setuptools
Security fix for GHSA-5rjg-fvgr-3xxf applied in: py3-setuptools 78.1.1-r0
py3-setuptools
Security fix for GHSA-5rjg-fvgr-3xxf applied in: py3-setuptools 78.1.1-r0
nodetaint
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be
nodetaint
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be
nodetaint
net/http in Go before 1
py3-pillow
libImaging/TgaRleDecode
nodetaint
Security fix for GHSA-3vm4-22fp-5rfm applied in: nodetaint 0.0.4-r1
nodetaint
Security fix for GHSA-3vm4-22fp-5rfm applied in: nodetaint 0.0.4-r1
nodetaint
httpTokenCacheKey uses path
keycloak-fips-26.8-iamguarded-fips
keycloak-fips-26.8-iamguarded-fips
keycloak-fips-26.8-iamguarded-fips
keycloak-fips-26.8-iamguarded-fips
nodetaint
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be re...
nodetaint
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be re...
libxslt
xsltAddTextString function in transform
consul-k8s, traefik, etcd, coredns-fips, opentofu, thanos, thanos, step-cli, consul-k8s, traefik, traefik, traefik, grafana, consul-k8s, consul-k8s, etcd
Security fix for GHSA-hrxh-6v49-42gf applied in: consul-k8s 1.7.13-ri3, traefik 3.4.5-r0, etcd 3.7.0-r0, coredns-fips 1.14.7-r1, opentofu 1.11.13-r1, thanos 0.42.3-r1, thanos 0.42.3-r2, step-cli 0.28.7-r3, consul-k8s 1.7.13-r3, traefik 2.11.41-r4, traefik 3.6.11-r4, traefik 3.7.10-r0, grafana 13.0.3-r2, consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, etcd 3.6.13-r0
consul-k8s/ traefik/ etcd/ coredns-fips/ opentofu/ thanos/ thanos/ step-cli/ consul-k8s/ traefik/ traefik/ traefik/ grafana/ consul-k8s/ consul-k8s/ etcd
Security fix for GHSA-hrxh-6v49-42gf applied in: consul-k8s 1.7.13-ri3, traefik 3.4.5-r0, etcd 3.7.0-r0, coredns-fips 1.14.7-r1, opentofu 1.11.13-r1, thanos 0.42.3-r1, thanos 0.42.3-r2, step-cli 0.28.7-r3, consul-k8s 1.7.13-r3, traefik 2.11.41-r4, traefik 3.6.11-r4, traefik 3.7.10-r0, grafana 13.0.3-r2, consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, etcd 3.6.13-r0
nodetaint
Applications and libraries which misuse connection
nodetaint
Applications and libraries which misuse connection
libxslt
In xsltCopyText in transform
nodetaint
x/crypto/ssh package before 0
