Open Source Vulnerabilities

druid-fips

Netty is an asynchronous, event-driven network application framework

apache-nifi, apache-nifi

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

apache-nifi, druid-fips, druid-fips

Netty is an asynchronous, event-driven network application framework

apache-nifi, apache-nifi

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

step-cli, step-cli

Step CA is an online certificate authority for secure, automated certificate management for DevOps

apache-nifi, druid-fips, druid-fips

Netty is an asynchronous, event-driven network application framework

apache-nifi, apache-nifi

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

druid-fips

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

apache-nifi, apache-nifi

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

druid-fips, druid-fips

Netty is an asynchronous, event-driven network application framework

apache-nifi, apache-nifi

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

druid-fips, druid-fips

RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

apache-nifi

Security fix for GHSA-r7wm-3cxj-wff9 applied in: apache-nifi 2.9.0-r5

druid-fips, druid-fips

RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

apache-nifi

JLine is a Java library for handling console input

druid-fips, druid-fips

RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

apache-nifi

JLine is a Java library for handling console input

druid-fips

Connect2id Nimbus JOSE + JWT 10

apache-nifi, apache-nifi

Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java

apache-nifi, druid-fips, druid-fips

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

druid-fips

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2

apache-nifi, apache-nifi, apache-nifi

Missing critical step in authentication in Apache HttpClient 5

apache-nifi, apache-nifi

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component

apache-nifi, apache-nifi, druid-fips, druid-fips

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite

apache-nifi, apache-nifi

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition

apache-nifi, druid-fips, druid-fips

Netty is a network application framework for development of protocol servers and clients

apache-nifi, apache-nifi

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition

apache-nifi, druid-fips, druid-fips

Netty is a network application framework for development of protocol servers and clients

apache-nifi, apache-nifi

mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource con...

apache-nifi, druid-fips, druid-fips

Netty is an asynchronous, event-driven network application framework

druid-fips

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients

apache-nifi, druid-fips, druid-fips

Netty is an asynchronous, event-driven network application framework

apache-nifi, druid-fips, druid-fips

Netty is an asynchronous, event-driven network application framework

step-cli, step-cli

Nebula is a scalable overlay networking tool

opentofu

Security fix for GHSA-259r-337f-3pj8 applied in: opentofu 1.11.13-r1

step-cli, step-cli

Step CA is an online certificate authority for secure, automated certificate management for DevOps

traefik-fips

In Traefik before versions 1

traefik-fips

Traefik is an open source HTTP reverse proxy and load balancer

wazuh-dashboard-plugins-fips

wazuh-dashboard-plugins-fips

wazuh-dashboard-plugins-fips

wazuh-dashboard-plugins-fips

traefik-fips

Traefik is an open source HTTP reverse proxy and load balancer

wazuh-dashboard-plugins-fips

wazuh-dashboard-plugins-fips

traefik-fips

HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service

traefik-fips

Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer for deploying microservices

apache-nifi

In Bouncy Castle for Java before 1

apache-nifi

In Bouncy Castle for Java before 1

apache-nifi

In Bouncy Castle for Java before 1