Open Source Vulnerabilities

datadog-agent-fips-7.85-fakeintake

datadog-cluster-agent-7.85

datadog-cluster-agent-7.85

cassandra-reaper-fips, cassandra-reaper-fips, cassandra-reaper-fips

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5

cassandra-reaper-fips, cassandra-reaper-fips

HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

cassandra-reaper-fips, cassandra-reaper-fips, cassandra-reaper-fips

Uncontrolled Resource Consumption vulnerability in the HTTP/1

cassandra-reaper-fips, cassandra-reaper-fips

Uncontrolled Recursion vulnerability in Apache Commons

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

Security fix for GHSA-r7wm-3cxj-wff9 applied in: activemq 6.2.8-r1, cassandra-reaper-fips 4.0.2-r2, cassandra-reaper-fips 4.1.1-r1

langfuse-worker

undici's setCookie function does not fully sanitize cookie attributes

cassandra-reaper-fips, activemq, cassandra-reaper-fips, cassandra-reaper-fips, cassandra-reaper-fips

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

langfuse-worker

NextAuth

langfuse-worker

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response

langfuse-worker

NextAuth

langfuse-worker

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1

langfuse-worker

NextAuth

langfuse-worker

Security fix for GHSA-r28c-9q8g-f849 applied in: langfuse-worker 3.223.0-r1

langfuse-worker

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive

langfuse-worker

Security fix for GHSA-x445-f3h2-j279 applied in: langfuse-worker 3.223.0-r1

langfuse-worker

undici's cache interceptor mishandles malformed Cache-Control private directives

langfuse-worker

Security fix for GHSA-xmf8-cvqr-rfgj applied in: langfuse-worker 3.223.0-r1

langfuse-worker

Security fix for GHSA-f88m-g3jw-g9cj applied in: langfuse-worker 3.223.0-r1

langfuse-worker

Security fix for GHSA-7rqj-j65f-68wh applied in: langfuse-worker 3.223.0-r1

renovate, langfuse-worker

nanoid (Nano ID) before 5

langfuse-worker

nanoid (Nano ID) before 3

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

argo-workflows, argo-workflows, argo-workflows, argo-workflows, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard

js-yaml is a JavaScript YAML parser and dumper

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

argo-workflows, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard

Security fix for GHSA-h67p-54hq-rp68 applied in: argo-workflows 3.6.19-r5, thingsboard 4.3.1.3-r3, thingsboard 4.3.1.3-r4, thingsboard 4.3.1.3-r5

argo-workflows, argo-workflows, argo-workflows, langfuse-worker

Security fix for GHSA-5p4m-2wfm-xmqj applied in: argo-workflows 3.6.19-r6, argo-workflows 3.7.15-r1, argo-workflows 3.7.15-r2, langfuse-worker 3.223.0-r1

kubeflow-pipelines-frontend, kubeflow-pipelines-frontend

kubeflow-pipelines-frontend, kubeflow-pipelines-frontend

langfuse-worker

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

langfuse-worker

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

renovate, langfuse-worker

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

langfuse-worker

Security fix for GHSA-c2j3-45gr-mqc4 applied in: langfuse-worker 3.223.0-r1

renovate, langfuse-worker, langfuse-worker, langfuse-worker, langfuse-worker

brace-expansion library generates arbitrary strings containing a common prefix and suffix

langfuse-worker

Security fix for GHSA-55q2-fjhq-7xh7 applied in: langfuse-worker 3.223.0-r1

langfuse-worker

Security fix for GHSA-p63j-vcc4-9vmv applied in: langfuse-worker 3.223.0-r1

langfuse-worker, langfuse-worker, langfuse-worker, langfuse-worker

brace-expansion through 5

langfuse-worker

Security fix for GHSA-frvp-7c67-39w9 applied in: langfuse-worker 3.223.0-r1

cassandra-reaper-fips

Security fix for GHSA-9h6p-92jq-888x applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-7g45-4rm6-3mm3 applied in: cassandra-reaper-fips 3.8.0-r3