Open Source Vulnerabilities

prometheus-node-exporter-fips

malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...

prometheus-alertmanager, prometheus-node-exporter-fips, prometheus-node-exporter-fips

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU

prometheus-node-exporter-fips

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing

prometheus-node-exporter-fips

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request

prometheus-alertmanager, prometheus-node-exporter-fips, prometheus-node-exporter-fips

When http

prometheus-alertmanager, prometheus-node-exporter-fips, prometheus-node-exporter-fips

On most platforms, Go uses the given system root certificates

secrets-store-csi-driver-provider-aws, external-dns-fips

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

postgres-operator

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

prometheus-alertmanager

OpenTelemetry-Go is the Go implementation of OpenTelemetry

prometheus-alertmanager

OpenTelemetry-Go is the Go implementation of OpenTelemetry

kyverno

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

kyverno

In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http

prometheus-alertmanager

gRPC-Go is the Go language implementation of gRPC

authentik-2026.2

authentik-2026.2

Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone

Konflux-ci: remote code execution via eval() in manifest scripts

Konflux-ci: jq filter injection in github workflow issue management

Konflux-ci: github token plaintext exposure in ci/cd scripts

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when th...

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Heap buffer overflow in Skia in Google Chrome prior to 71

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Incorrect convexity calculations in Skia in Google Chrome prior to 72

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are t...

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

vulnerability where type-confusion in the IonMonkey just-in-time (JIT) compiler could potentially be used by malicious JavaScript to trigger a potentially exploitable crash

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT) compiler and when the const...

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

use-after-free vulnerability can occur when a raw pointer to a DOM element on a page is obtained using JavaScript and the element is then removed while still in use

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Incorrect alias information in IonMonkey JIT compiler for Array

firefox-esr, firefox-esr, firefox-esr, firefox-esr, firefox-esr

Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60