Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    rancher-fleet-agent, rancher-fleet-agent, rancher-fleet-agent, rancher-fleet-agent, rancher-agent, rancher-agent, rancher-agent, rancher-fleet-agent, rancher-fleet-agent

    Summary

    oras-go is a Go library for managing OCI artifacts

    Published
    30 Oct 2026
    Packages

    step-ca, step-ca, step-ca-fips

    Summary

    Security fix for GHSA-9jj7-4m8r-rfcm applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, step-ca-fips 0.30.2-r1

    Published
    30 Oct 2026
    MGASA-2026-0570
    Fix available
    Packages

    libgit2

    Summary

    Updated libgit2 package fixes security vulnerabilities

    Published
    30 Oct 2026
    CGA-c4px-pwcr-gpjp
    Fix available
    Packages

    ruby3.4-kube-logging-operator-fluentd-outputs, ruby3.4-kube-logging-operator-fluentd-outputs

    Summary

    Published
    30 Oct 2026
    CGA-pg42-q5hf-3hmr
    Fix available
    Packages

    ruby3.4-kube-logging-operator-fluentd-outputs, ruby3.4-kube-logging-operator-fluentd-outputs

    Summary

    Published
    30 Oct 2026
    CGA-jjfp-m5vm-rf2q
    Fix available
    Packages

    nextcloud-server-32

    Summary

    Published
    30 Oct 2026
    CGA-x36j-c949-x5q2
    Fix available
    Packages

    nextcloud-server-32

    Summary

    Published
    30 Oct 2026
    CGA-g4p4-9f34-74g7
    Fix available
    Packages

    apache-beam-python-3.11-sdk

    Summary

    Published
    30 Oct 2026
    CGA-gjq4-5gm7-jx65
    Fix available
    Packages

    apache-beam-python-3.11-sdk

    Summary

    Published
    30 Oct 2026
    CGA-r6xc-vcpc-434j
    Fix available
    Packages

    apollo-router-2

    Summary

    Published
    30 Oct 2026
    CGA-vhr7-jgpw-8prh
    Fix available
    Packages

    apollo-router-2

    Summary

    Published
    30 Oct 2026
    CGA-gqw4-7jvw-5vc7
    Fix available
    Packages

    py3.12-airflow-core-3

    Summary

    Published
    30 Oct 2026
    CGA-9gg6-f2q4-mc75
    Fix available
    Packages

    py3.12-airflow-core-3

    Summary

    Published
    30 Oct 2026
    CGA-94rp-9ch8-wpgj
    Fix available
    Packages

    datadog-agent-7.85-fakeintake

    Summary

    Published
    30 Oct 2026
    CGA-cj98-c9h7-xh33
    Fix available
    Packages

    datadog-agent-7.85-fakeintake

    Summary

    Published
    30 Oct 2026
    Packages

    cassandra-reaper-fips

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    cassandra-reaper-fips

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

    Published
    30 Oct 2026
    Packages

    cassandra-reaper-fips

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    When parsing a multipart form (either explicitly with Request

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    ParseAddressList function incorrectly handles comments (text within parentheses) within display names

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Command go env is documented as outputting a shell script containing the Go environment

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Calling Decoder

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    net/http HTTP/1

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-v39h-62p7-jpjc applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-q3j6-qgpj-74h6 applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-xxjr-mmjv-4gpg applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-mh29-5h37-fv8m applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-q8mj-m7cp-5q26 applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    CGA-87r4-qcqv-8hfr
    Fix available
    Packages

    dogstatsd-7.85

    Summary

    Published
    30 Oct 2026
    CGA-cx27-chr9-97q6
    Fix available
    Packages

    dogstatsd-7.85

    Summary

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-hmw2-7cc7-3qxx applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows, sqlpad

    Summary

    Versions of the package @tootallnate/once before 3

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-vpq2-c234-7xj6 applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Dottie provides nested object access and manipulation in JavaScript

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-r5mx-6wc6-7h9w applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, sqlpad

    Summary

    uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs

    Published
    30 Oct 2026
    Packages

    argo-workflows, sqlpad

    Summary

    Security fix for GHSA-w5hq-g745-h8pq applied in: argo-workflows 3.6.19-r5, sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    This affects versions of the package bn

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-378v-28hj-76wf applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Sequelize is a Node

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-6457-6jrx-69cr applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    adm-zip before 0

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-xcpc-8h2w-3j85 applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026