Open Source Vulnerabilities
fulcio-fips, fulcio-fips, fulcio-fips, fulcio-fips
sigstore framework is a common go library shared across sigstore services and clients
fulcio-fips/ fulcio-fips/ fulcio-fips/ fulcio-fips
sigstore framework is a common go library shared across sigstore services and clients
argo-workflows
vulnerability was found in juliangruber brace-expansion up to 1
argo-workflows
vulnerability was found in juliangruber brace-expansion up to 1
argo-workflows, argo-workflows, argo-workflows
`yaml` is a YAML parser and serialiser for JavaScript
argo-workflows/ argo-workflows/ argo-workflows
`yaml` is a YAML parser and serialiser for JavaScript
argo-workflows, argo-workflows, argo-workflows
Impact: When a user-configured proxy on webpack-dev-server has a broad context (e
argo-workflows/ argo-workflows/ argo-workflows
Impact: When a user-configured proxy on webpack-dev-server has a broad context (e
argo-workflows, argo-workflows, argo-workflows
webpack-dev-server versions up to and including 5
argo-workflows/ argo-workflows/ argo-workflows
webpack-dev-server versions up to and including 5
argo-workflows, argo-workflows
webpack-dev-server versions 5
argo-workflows/ argo-workflows
webpack-dev-server versions 5
argo-workflows, argo-workflows
webpack-dev-server versions 5
argo-workflows/ argo-workflows
webpack-dev-server versions 5
github.com/charmbracelet/soft-serve
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
github.com/charmbracelet/soft-serve
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
@nx/maven, @nx/maven, @nx/gradle, @nx/gradle
@nx/maven and @nx/gradle have OS command injection via nx.json plugin options
@nx/maven/ @nx/maven/ @nx/gradle/ @nx/gradle
@nx/maven and @nx/gradle have OS command injection via nx.json plugin options
argo-workflows, argo-workflows, argo-workflows
webpack-dev-server allows users to use webpack with a development server that provides live reloading
argo-workflows/ argo-workflows/ argo-workflows
webpack-dev-server allows users to use webpack with a development server that provides live reloading
argo-workflows, argo-workflows, argo-workflows
webpack-dev-server allows users to use webpack with a development server that provides live reloading
argo-workflows/ argo-workflows/ argo-workflows
webpack-dev-server allows users to use webpack with a development server that provides live reloading
argo-workflows, argo-workflows, argo-workflows
### Summary The `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to cause denial-of-service via memory exhaustion
argo-workflows/ argo-workflows/ argo-workflows
### Summary The `arrayLimit` option in qs does not enforce limits for comma-separated values when `comma: true` is enabled, allowing attackers to cause denial-of-service via memory exhaustion
argo-workflows, argo-workflows, argo-workflows
### Summary `qs
argo-workflows/ argo-workflows/ argo-workflows
### Summary `qs
argo-workflows
Impact: fast-uri versions from 2
argo-workflows
fast-uri versions 2
argo-workflows
Security fix for GHSA-67mh-4wv8-2f99 applied in: argo-workflows 3.6.19-r7
argo-workflows
Security fix for GHSA-67mh-4wv8-2f99 applied in: argo-workflows 3.6.19-r7
argo-workflows, argo-workflows
jsdiff is a JavaScript text differencing implementation
argo-workflows/ argo-workflows
jsdiff is a JavaScript text differencing implementation
opensearch-dashboards-3, opensearch-dashboards-3
prometheus-fips
Moby is an open source container framework
prometheus-fips
Moby is an open source container framework
prometheus-fips
Moby is an open source container framework
prometheus-fips
Moby is an open source container framework
prometheus-fips
Moby is an open source container framework
prometheus-fips
Moby is an open source container framework
