Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    keycloak

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Eclipse Parsson published Maven Central artifacts before version 1

    Published
    30 Oct 2026
    CVE-2026-119291
    Fix available
    Packages

    Summary

    zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows

    Summary

    path-to-regexp turns path strings into a regular expressions

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    By sending a deeply nested ASN1 structure to a Apache Kerby client or service, it's possible to trigger a StackOverFlow Exception which can lead to denial of service issues

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    ws is an open source WebSocket client and server for Node

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is an asynchronous, event-driven network application framework

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    ws is an open source WebSocket client and server for Node

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    websocket-driver is a WebSocket protocol handler with pluggable I/O

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    websocket-driver is a WebSocket protocol handler with pluggable I/O

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Security fix for GHSA-mfg7-5gfp-c4w3 applied in: keycloak 26.4.13-r1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Webpack is a module bundler

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is an asynchronous, event-driven network application framework

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Webpack is a module bundler

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is an asynchronous, event-driven network application framework

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    shell-quote prior to 1

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is an asynchronous, event-driven network application framework

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Serialize JavaScript to a superset of JSON that includes regular expressions and functions

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows

    Summary

    Security fix for GHSA-5c6j-r48x-rmvq applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r1, argo-workflows 3.7.15-r2

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Picomatch is a glob matcher written JavaScript

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Picomatch is a glob matcher written JavaScript

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    path-to-regexp turns path strings into a regular expressions

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    on-headers is a node

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is an asynchronous, event-driven network application framework

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, argo-workflows

    Summary

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    keycloak

    Summary

    In Bouncy Castle for Java before 1

    Published
    30 Oct 2026