Open Source Vulnerabilities
shadowsocks-rust-ssservice, shadowsocks-rust-ssservice
step-ca, step-ca, step-ca-fips, trillian-fips, kumactl, step-cli, trillian
pgx is a PostgreSQL driver and toolkit for Go
step-ca/ step-ca/ step-ca-fips/ trillian-fips/ kumactl/ step-cli/ trillian
pgx is a PostgreSQL driver and toolkit for Go
shadowsocks-rust-ssserver, shadowsocks-rust-ssserver
shadowsocks-rust-ssserver, shadowsocks-rust-ssserver
shadowsocks-rust-ssmanager, shadowsocks-rust-ssmanager
shadowsocks-rust-ssmanager, shadowsocks-rust-ssmanager
shadowsocks-rust-sslocal, shadowsocks-rust-sslocal
shadowsocks-rust-sslocal, shadowsocks-rust-sslocal
ollama, ollama, ollama-fips, ollama-fips, ollama-fips, ollama-fips
Parsing a malicious font file can cause excessive memory allocation
ollama/ ollama/ ollama-fips/ ollama-fips/ ollama-fips/ ollama-fips
Parsing a malicious font file can cause excessive memory allocation
ollama, ollama, ollama-fips, ollama-fips, ollama-fips, ollama-fips
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms
ollama/ ollama/ ollama-fips/ ollama-fips/ ollama-fips/ ollama-fips
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms
Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore
Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore
argo-workflows, policy-controller, cosign, kubescape, dynatrace-operator, dynatrace-operator, paranoia
Security fix for GHSA-p436-gjf2-799p applied in: argo-workflows 3.6.19-r2, policy-controller 0.12.1-r1, cosign 2.6.4-r1, kubescape 3.0.47-r0, dynatrace-operator 1.6.3-r0, paranoia 0.5.0-r0
argo-workflows/ policy-controller/ cosign/ kubescape/ dynatrace-operator/ dynatrace-operator/ paranoia
Security fix for GHSA-p436-gjf2-799p applied in: argo-workflows 3.6.19-r2, policy-controller 0.12.1-r1, cosign 2.6.4-r1, kubescape 3.0.47-r0, dynatrace-operator 1.6.3-r0, paranoia 0.5.0-r0
crane, argo-workflows, cosign, kubescape, kaniko, kaniko, dynatrace-operator, dynatrace-operator, paranoia
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default
crane/ argo-workflows/ cosign/ kubescape/ kaniko/ kaniko/ dynatrace-operator/ dynatrace-operator/ paranoia
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default
keycloak
Security fix for GHSA-84h7-rjj3-6jx4 applied in: keycloak 26.5.0-r1
keycloak
Security fix for GHSA-84h7-rjj3-6jx4 applied in: keycloak 26.5.0-r1
keycloak
Security fix for GHSA-5rfx-cp42-p624 applied in: keycloak 26.5.0-r1
keycloak
Security fix for GHSA-5rfx-cp42-p624 applied in: keycloak 26.5.0-r1
keycloak
It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations
keycloak
It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations
keycloak
It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session
keycloak
It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session
keycloak
Security fix for GHSA-45p5-v273-3qqr applied in: keycloak 26.5.0-r1
keycloak
Security fix for GHSA-45p5-v273-3qqr applied in: keycloak 26.5.0-r1
keycloak
Security fix for GHSA-h5fg-jpgr-rv9c applied in: keycloak 26.5.0-r1
keycloak
Security fix for GHSA-h5fg-jpgr-rv9c applied in: keycloak 26.5.0-r1
ollama, ollama, ollama-fips, ollama-fips, ollama-fips, ollama-fips
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image
ollama/ ollama/ ollama-fips/ ollama-fips/ ollama-fips/ ollama-fips
Decoding a paletted BMP file with an out-of-range palette index results in a panic when accessing pixels in the invalid image
ollama, ollama, ollama-fips, ollama-fips, ollama-fips, ollama-fips
TIFF decoder does not place a limit on the size of PackBits-compressed data
ollama/ ollama/ ollama-fips/ ollama-fips/ ollama-fips/ ollama-fips
TIFF decoder does not place a limit on the size of PackBits-compressed data
airflow-2
Security fix for GHSA-27jp-wm6q-gp25 applied in: airflow-2 2.10.3-r2
airflow-2
Security fix for GHSA-27jp-wm6q-gp25 applied in: airflow-2 2.10.3-r2
argo-events, kaniko, kaniko, argo-cd
go-git is an extensible git implementation library written in pure Go
argo-events/ kaniko/ kaniko/ argo-cd
go-git is an extensible git implementation library written in pure Go
argo-events, kaniko, kaniko, argo-cd
go-git is an extensible git implementation library written in pure Go
argo-events/ kaniko/ kaniko/ argo-cd
go-git is an extensible git implementation library written in pure Go
