Open Source Vulnerabilities
external-dns-fips
If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...
external-dns-fips
If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...
external-dns-fips
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute
external-dns-fips
CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute
external-dns-fips
Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
external-dns-fips
Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
apache-zookeeper, apache-zookeeper
snappy-java through 1
apache-zookeeper/ apache-zookeeper
snappy-java through 1
apache-zookeeper, apache-zookeeper
Xerial snappy-java before 1
apache-zookeeper/ apache-zookeeper
Xerial snappy-java before 1
apache-zookeeper
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes
apache-zookeeper
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes
apache-zookeeper
In Eclipse Jetty, the HTTP/1
apache-zookeeper, apache-zookeeper
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google
apache-zookeeper/ apache-zookeeper
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google
keycloak, keycloak
Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4
keycloak/ keycloak
Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4
keycloak, keycloak
buffer overflow vulnerability in the Brotli decoder (c/dec/decode
keycloak/ keycloak
buffer overflow vulnerability in the Brotli decoder (c/dec/decode
gdk-pixbuf
make_available_at_least function in io-tiff
gdk-pixbuf
make_available_at_least function in io-tiff
gdk-pixbuf
Integer overflow in io-ico
gdk-pixbuf
gdk-pixbuf-thumbnailer
gdk-pixbuf
GNOME gdk-pixbuf (aka GdkPixbuf) before 2
gdk-pixbuf
In GNOME GdkPixbuf (aka gdk-pixbuf) through 2
gdk-pixbuf
In GNOME GdkPixbuf (aka gdk-pixbuf) through 2
kedacore-http-add-on
OpenTelemetry-Go is the Go implementation of OpenTelemetry
kedacore-http-add-on
OpenTelemetry-Go is the Go implementation of OpenTelemetry
kedacore-http-add-on, kedacore-http-add-on
Security fix for GHSA-gcjh-h69q-9w9g applied in: kedacore-http-add-on 0.14.0-r2, kedacore-http-add-on 0.13.0-r2
kedacore-http-add-on/ kedacore-http-add-on
Security fix for GHSA-gcjh-h69q-9w9g applied in: kedacore-http-add-on 0.14.0-r2, kedacore-http-add-on 0.13.0-r2
kedacore-http-add-on, kedacore-http-add-on
gRPC-Go is the Go language implementation of gRPC
kedacore-http-add-on/ kedacore-http-add-on
gRPC-Go is the Go language implementation of gRPC
kedacore-http-add-on, kedacore-http-add-on
KEDA is a Kubernetes-based Event Driven Autoscaling component
kedacore-http-add-on/ kedacore-http-add-on
KEDA is a Kubernetes-based Event Driven Autoscaling component
kedacore-http-add-on, kedacore-http-add-on
KEDA is a Kubernetes-based Event Driven Autoscaling component
kedacore-http-add-on/ kedacore-http-add-on
KEDA is a Kubernetes-based Event Driven Autoscaling component
kedacore-http-add-on, kedacore-http-add-on
OpenTelemetry-Go is the Go implementation of OpenTelemetry
kedacore-http-add-on/ kedacore-http-add-on
OpenTelemetry-Go is the Go implementation of OpenTelemetry
dex
Security fix for GHSA-mgcc-cww5-fp2q applied in: dex 2.44.0-r12
dex
Security fix for GHSA-mgcc-cww5-fp2q applied in: dex 2.44.0-r12
kernel
Important: kernel security, bug fix, and enhancement update
kernel
Important: kernel security, bug fix, and enhancement update
kernel
Important: kernel security, bug fix, and enhancement update
kernel
Important: kernel security, bug fix, and enhancement update
dotnet8.0
Important: .NET 8.0 security, bug fix, and enhancement update
dotnet8.0
Important: .NET 8.0 security, bug fix, and enhancement update
dotnet10.0
Important: .NET 10.0 security, bug fix, and enhancement update
dotnet10.0
Important: .NET 10.0 security, bug fix, and enhancement update
kernel-rt
Important: kernel-rt security, bug fix, and enhancement update
kernel-rt
Important: kernel-rt security, bug fix, and enhancement update
File Force Download for Drupal 7 Access Bypass via Unconditional Download Headers
File Force Download for Drupal 7 Access Bypass via Unconditional Download Headers
dotnet8.0
Important: .NET 8.0 security, bug fix, and enhancement update
dotnet8.0
Important: .NET 8.0 security, bug fix, and enhancement update
dotnet9.0
Important: .NET 9.0 security, bug fix, and enhancement update
dotnet9.0
Important: .NET 9.0 security, bug fix, and enhancement update
dotnet10.0
Important: .NET 10.0 security, bug fix, and enhancement update
dotnet10.0
Important: .NET 10.0 security, bug fix, and enhancement update
dotnet11.0
Important: .NET 11.0 security, bug fix, and enhancement update
dotnet11.0
Important: .NET 11.0 security, bug fix, and enhancement update
kernel
Important: kernel security, bug fix, and enhancement update
kernel
Important: kernel security, bug fix, and enhancement update
github.com/cert-manager/cert-manager
