Open Source Vulnerabilities

qdrant, qdrant

launch-editor allows users to open files with line numbers in editor from Node

qdrant, qdrant

launch-editor allows users to open files with line numbers in editor from Node

qdrant, qdrant

launch-editor allows users to open files with line numbers in editor from Node

qdrant, qdrant

Tinypool is a minimal Node

qdrant, qdrant

Tinypool is a minimal Node

qdrant, qdrant

source-map-js through 1

qdrant, qdrant

Vitest is a testing framework powered by Vite

external-dns-fips, prometheus-node-exporter-fips

tar

external-dns-fips, prometheus-node-exporter-fips

Actions which insert URLs into the content attribute of HTML meta tags are not escaped

external-dns-fips, prometheus-node-exporter-fips

Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints

external-dns-fips, prometheus-node-exporter-fips

When returning errors, functions in the net/textproto package would include its input as part of the error

external-dns-fips, prometheus-node-exporter-fips

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

external-dns-fips, prometheus-node-exporter-fips

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

external-dns-fips, prometheus-node-exporter-fips

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

external-dns-fips, prometheus-node-exporter-fips

Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)

external-dns-fips, prometheus-node-exporter-fips

ReverseProxy can forward queries containing parameters not visible to Rewrite functions

external-dns-fips, prometheus-node-exporter-fips

On Unix systems, opening a file in an os

external-dns-fips, prometheus-node-exporter-fips

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations

external-dns-fips, prometheus-node-exporter-fips

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

external-dns-fips, prometheus-node-exporter-fips

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash

external-dns-fips, prometheus-node-exporter-fips

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

external-dns-fips, prometheus-node-exporter-fips

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

external-dns-fips, prometheus-node-exporter-fips

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

external-dns-fips, prometheus-node-exporter-fips

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

external-dns-fips, prometheus-node-exporter-fips

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service

external-dns-fips, prometheus-node-exporter-fips

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not

external-dns-fips, prometheus-node-exporter-fips

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

external-dns-fips, prometheus-node-exporter-fips

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...

external-dns-fips, prometheus-node-exporter-fips

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion

external-dns-fips, prometheus-node-exporter-fips

url

external-dns-fips, prometheus-node-exporter-fips

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface

external-dns-fips, prometheus-node-exporter-fips

(*x509

external-dns-fips, prometheus-node-exporter-fips

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures

external-dns-fips, prometheus-node-exporter-fips

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS

external-dns-fips, prometheus-node-exporter-fips

Previously, resolving relative paths containing parent directory ('

py3-mako

Sqlalchemy mako before 1

langfuse

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects

external-dns-fips, nginx-prometheus-exporter-fips

Previously, a channel registered in the mux's chanList is not usable until it is established

external-dns-fips, nginx-prometheus-exporter-fips

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

npm

sigstore-js provides JavaScript libraries for interacting with Sigstore services

npm

sigstore-js provides JavaScript libraries for interacting with Sigstore services

npm

sigstore-js provides JavaScript libraries for interacting with Sigstore services

npm

Picomatch is a glob matcher written JavaScript

npm

Picomatch is a glob matcher written JavaScript

npm

Versions of the package pacote from 11

npm

undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still ...

npm

undici's WebSocket client crashes the whole Node

npm

undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers

external-dns-fips

On Unix platforms, when listing the contents of a directory using File

external-dns-fips

On Linux, if the target of Root