Open Source Vulnerabilities

datadog-agent-fips-7.85

datadog-agent-fips-7.85

cosign

Security fix for GHSA-pmwq-pjrm-6p5r applied in: cosign 2.6.4-r1

py3.13-airflow-core-3

py3.13-airflow-core-3

cosign

Security fix for GHSA-f5mr-q85p-6p5r applied in: cosign 2.6.4-r1

cosign

Security fix for GHSA-9vcr-p3rj-q5q6 applied in: cosign 2.6.4-r1

cosign

Security fix for GHSA-47q9-m4ww-924m applied in: cosign 2.6.4-r1

policy-controller, cosign

Security fix for GHSA-273p-m2cw-6833 applied in: policy-controller 0.12.1-r1, cosign 2.6.4-r1

policy-controller, cosign

Security fix for GHSA-jqc5-w2xx-5vq4 applied in: policy-controller 0.12.1-r1, cosign 2.6.4-r1

policy-controller, cosign

Security fix for GHSA-846p-jg2w-w324 applied in: policy-controller 0.12.1-r1, cosign 2.6.4-r1

cosign

Security fix for GHSA-9c54-x2g4-v92j applied in: cosign 2.6.4-r1

cosign

Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity

cosign

sigstore-go is a Go library for Sigstore signing and verification

cosign

Rekor is a software supply chain transparency log

cosign

Rekor is a software supply chain transparency log

cosign

Rekor is a software supply chain transparency log

policy-controller, cosign

Security fix for GHSA-4c4x-jm2x-pf9j applied in: policy-controller 0.12.1-r1, cosign 2.6.4-r1

cosign

go-tuf is a Go implementation of The Update Framework (TUF)

policy-controller, cosign

Security fix for GHSA-fphv-w9fq-2525 applied in: policy-controller 0.12.1-r1, cosign 2.6.4-r1

cosign

go-tuf is a Go implementation of The Update Framework (TUF)

cosign

go-tuf is a Go implementation of The Update Framework (TUF)

cosign

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps

argo-workflows

Security fix for GHSA-4v9v-hfq4-rm2v applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-58qx-3vcg-4xpx applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-pxg6-pf52-xh8x applied in: argo-workflows 3.6.19-r5

argo-workflows

archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations

step-issuer, cosign

Security fix for GHSA-rjr7-jggh-pgcp applied in: step-issuer 0.10.2-r3, cosign 2.6.4-r2

step-issuer, cosign

Security fix for GHSA-9g5q-2w5x-hmxf applied in: step-issuer 0.10.2-r3, cosign 2.6.4-r2

argo-workflows

certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain

step-issuer, cosign

Security fix for GHSA-3fxj-6jh8-hvhx applied in: step-issuer 0.10.2-r3, cosign 2.6.4-r2

argo-workflows

Security fix for GHSA-qj8w-gfj5-8c6v applied in: argo-workflows 3.6.19-r5

temporal-server, temporal-server, tempo, argo-workflows, ollama, ollama, ollama-fips, ollama-fips, cosign

Security fix for GHSA-259r-337f-4rfw applied in: temporal-server 1.28.4-r1, temporal-server 1.29.7-r1, tempo 2.9.5-r1, argo-workflows 3.7.15-r1, ollama 0.32.11-r1, ollama-fips 0.32.11-r1, cosign 2.6.4-r2

argo-workflows

Security fix for GHSA-968p-4wvh-cqc8 applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-5m6q-g25r-mvwx applied in: argo-workflows 3.6.19-r5

argo-workflows

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "

argo-workflows

Security fix for GHSA-554w-wpv2-vw27 applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-wf6x-7x77-mvgw applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-w7jw-789q-3m8p applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-5gfm-wpxj-wjgq applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-rf6f-7fwh-wjgh applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-rhx6-c78j-4q9w applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-3xgq-45jj-v275 applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-9wv6-86v2-598j applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-952p-6rrq-rcjv applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-grv7-fg5c-xmjg applied in: argo-workflows 3.6.19-r5

argo-workflows

Security fix for GHSA-fjxv-7rqg-78g4 applied in: argo-workflows 3.6.19-r5

argo-workflows

When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http

secrets-store-csi-driver-fips

security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes

keycloak

Netty is an asynchronous, event-driven network application framework