Open Source Vulnerabilities
nodetaint, victoria-metrics, victoria-metrics
Security fix for GHSA-f5wc-c3c7-36mc applied in: nodetaint 0.0.4-r1, victoria-metrics 1.145.0-r2
nodetaint/ victoria-metrics/ victoria-metrics
Security fix for GHSA-f5wc-c3c7-36mc applied in: nodetaint 0.0.4-r1, victoria-metrics 1.145.0-r2
nodetaint, victoria-metrics, victoria-metrics
Security fix for GHSA-vgwf-h737-ff37 applied in: nodetaint 0.0.4-r1, victoria-metrics 1.145.0-r2
nodetaint/ victoria-metrics/ victoria-metrics
Security fix for GHSA-vgwf-h737-ff37 applied in: nodetaint 0.0.4-r1, victoria-metrics 1.145.0-r2
consul, consul, etcd, etcd, step-cli, step-cli, traefik, traefik, coredns-fips, cosign-fips, cosign-fips, cosign-fips, cosign-fips, etcd, kyverno-policy-reporter-ui-fips, opentofu, cosign-fips, nats-server-config-reloader-fips, grafana, grafana, traefik, victoria-metrics, victoria-metrics, consul-k8s, consul-k8s, consul-k8s, etcd, nodetaint, traefik
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
consul/ consul/ etcd/ etcd/ step-cli/ step-cli/ traefik/ traefik/ coredns-fips/ cosign-fips/ cosign-fips/ cosign-fips/ cosign-fips/ etcd/ kyverno-policy-reporter-ui-fips/ opentofu/ cosign-fips/ nats-server-config-reloader-fips/ grafana/ grafana/ traefik/ victoria-metrics/ victoria-metrics/ consul-k8s/ consul-k8s/ consul-k8s/ etcd/ nodetaint/ traefik
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver/ kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver/ kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver/ kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver
kubeflow-pipelines-apiserver/ kubeflow-pipelines-apiserver
opensearch-dashboards-3-fips-dashboards-search-relevance
hplip
Important: hplip security update
firefox
Important: firefox security, bug fix, and enhancement update
firefox
Important: firefox security, bug fix, and enhancement update
tomcat
Important: tomcat security update
consul-k8s, consul-k8s, consul-k8s
Security fix for GHSA-xf85-363p-868w applied in: consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3
consul-k8s/ consul-k8s/ consul-k8s
Security fix for GHSA-xf85-363p-868w applied in: consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3
consul-k8s, consul-k8s, consul-k8s
Security fix for GHSA-8xwf-rjm4-xvhv applied in: consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3
consul-k8s/ consul-k8s/ consul-k8s
Security fix for GHSA-8xwf-rjm4-xvhv applied in: consul-k8s 2.0.1-r1, consul-k8s 2.0.1-r2, consul-k8s 2.0.1-r3
opentofu, opentofu, opentofu, consul-k8s, consul-k8s, consul-k8s
oras-go is a Go library for managing OCI artifacts
opentofu/ opentofu/ opentofu/ consul-k8s/ consul-k8s/ consul-k8s
oras-go is a Go library for managing OCI artifacts
gatekeeper-fips, gatekeeper-fips
Security fix for CVE-2025-1234 applied in: gatekeeper-fips 3.22.1-r0
gatekeeper-fips/ gatekeeper-fips
Security fix for CVE-2025-1234 applied in: gatekeeper-fips 3.22.1-r0
fulcio
Security fix for CVE-2025-12345 applied in: fulcio 1.8.2-r0
fulcio
Security fix for CVE-2025-12345 applied in: fulcio 1.8.2-r0
opensearch-dashboards-2-fips-dashboards-reporting
opensearch-dashboards-3-alerting-dashboards-plugin, opensearch-dashboards-3-alerting-dashboards-plugin
opensearch-dashboards-3-alerting-dashboards-plugin/ opensearch-dashboards-3-alerting-dashboards-plugin
grafana
Security fix for GHSA-cf98-j28v-49v6 applied in: grafana 12.3.7-r0
grafana
Security fix for GHSA-cf98-j28v-49v6 applied in: grafana 12.3.7-r0
ant-releases
`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)
ant-releases
`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)
codeq
`codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)
codeq
`codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)
