Open Source Vulnerabilities
etcd, etcd
Security fix for GHSA-w67g-5rqw-f597 applied in: etcd 3.6.14-r2, etcd 3.5.32-r2
etcd/ etcd
Security fix for GHSA-w67g-5rqw-f597 applied in: etcd 3.6.14-r2, etcd 3.5.32-r2
apache-nifi
In Bouncy Castle for Java before 1
cosign-fips
Cosign provides container signing, verification, and storage in an OCI registry for the sigstore project
cosign-fips
Cosign provides container signing, verification, and storage in an OCI registry for the sigstore project
apache-nifi
In Bouncy Castle for Java before 1
cosign-fips
cosign is a container signing and verification utility
cosign-fips
cosign is a container signing and verification utility
apache-nifi
In Bouncy Castle for Java before 1
kyverno-policy-reporter-ui-fips
Security fix for GHSA-g754-hx8w-x2g6 applied in: kyverno-policy-reporter-ui-fips 2.4.2-r1
kyverno-policy-reporter-ui-fips
Security fix for GHSA-g754-hx8w-x2g6 applied in: kyverno-policy-reporter-ui-fips 2.4.2-r1
cosign-fips
Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure
cosign-fips
Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure
apache-nifi
In Bouncy Castle for Java before 1
apache-nifi
In Bouncy Castle for Java before 1
cosign-fips
Cosign is a sigstore signing tool for OCI containers
cosign-fips
Cosign is a sigstore signing tool for OCI containers
apache-nifi
In Bouncy Castle for Java before 1
apache-nifi
In Bouncy Castle for Java before 1
apache-nifi
In Bouncy Castle for Java before 1
apache-nifi
In Bouncy Castle for Java before 1
opentofu
HashiCorp’s go-getter library up to v1
apache-nifi, apache-nifi
Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests
apache-nifi/ apache-nifi
Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests
opensearch-dashboards-3-dashboards-reporting, opensearch-dashboards-3-dashboards-reporting
opensearch-dashboards-3-dashboards-reporting/ opensearch-dashboards-3-dashboards-reporting
opensearch-dashboards-3-dashboards-reporting, opensearch-dashboards-3-dashboards-reporting
opensearch-dashboards-3-dashboards-reporting/ opensearch-dashboards-3-dashboards-reporting
apache-nifi, apache-nifi
Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters
apache-nifi/ apache-nifi
Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters
cosign-fips, cosign-fips, cosign-fips
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps
cosign-fips/ cosign-fips/ cosign-fips
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps
apache-nifi, apache-nifi
Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPaylo...
apache-nifi/ apache-nifi
Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPaylo...
apache-nifi, apache-nifi
SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator
apache-nifi/ apache-nifi
SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator
apache-nifi, apache-nifi
Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution
apache-nifi/ apache-nifi
Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution
apache-nifi, apache-nifi
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack
apache-nifi/ apache-nifi
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack
apache-nifi, apache-nifi
Due to incorrect escaping, the use of JavaScriptUtils
apache-nifi/ apache-nifi
Due to incorrect escaping, the use of JavaScriptUtils
apache-nifi, apache-nifi
In an untrusted JMS environment, org
apache-nifi/ apache-nifi
In an untrusted JMS environment, org
apache-nifi, apache-nifi
vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker t...
apache-nifi/ apache-nifi
vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker t...
apache-nifi, apache-nifi
Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded...
apache-nifi/ apache-nifi
Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded...
apache-nifi, apache-nifi
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS)
apache-nifi/ apache-nifi
Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS)
apache-nifi, apache-nifi
Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the follo...
apache-nifi/ apache-nifi
Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the follo...
gcc
**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables i...
gcc
**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables i...
keycloak-26.6-iamguarded-compat, keycloak-26.6-iamguarded-compat
keycloak-26.6-iamguarded-compat/ keycloak-26.6-iamguarded-compat
keycloak-26.6-iamguarded-compat, keycloak-26.6-iamguarded-compat
keycloak-26.6-iamguarded-compat/ keycloak-26.6-iamguarded-compat
