Open Source Vulnerabilities

argo-workflows, argo-workflows, argo-workflows

Immutable

argo-workflows, argo-workflows, argo-workflows, argo-workflows

Immutable

argo-workflows, argo-workflows, argo-workflows, argo-workflows

http-proxy-middleware is node

argo-workflows, argo-workflows, argo-workflows, argo-workflows

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP)

argo-workflows, argo-workflows, argo-workflows, argo-workflows

flatted is a circular JSON parser

argo-workflows, argo-workflows, argo-workflows, argo-workflows

flatted is a circular JSON parser

argo-workflows, argo-workflows, argo-workflows, argo-workflows

fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization

argo-workflows, argo-workflows, argo-workflows, argo-workflows

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions

datadog-agent-fips-7.85-core-integrations

datadog-agent-fips-7.85-core-integrations

Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace

Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate

tigera-operator-fips

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

tigera-operator-fips

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

tigera-operator-fips

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

tigera-operator-fips

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

tigera-operator-fips

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

tigera-operator-fips

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

tigera-operator-fips

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

argo-workflows, argo-workflows, argo-workflows, argo-workflows

form-data is a library for creating readable multipart/form-data streams

argo-workflows, argo-workflows, argo-workflows, argo-workflows

Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (

langfuse-worker, langfuse-worker

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree

argo-workflows, argo-workflows, argo-workflows, argo-workflows

Impact: Lodash versions 4

argo-workflows, argo-workflows, argo-workflows, argo-workflows

Impact: The fix for CVE-2021-23337 (https://github

opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib-fips, rancher-agent, rancher-agent, rancher-agent, ollama, ollama, ollama-fips, ollama-fips

malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go ...

opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib-fips, rancher-agent, atlantis-fips, rancher-agent, rancher-agent, ollama, ollama, ollama-fips, ollama-fips

malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

ollama, ollama

TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset

ollama, ollama

maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error

ollama, ollama

TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption

Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line

ollama, ollama

webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size

thingsboard, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard

Security fix for GHSA-52cp-r559-cp3m applied in: thingsboard 4.3.1.3-r3, thingsboard 4.3.1.3-r4, thingsboard 4.3.1.3-r5

argo-workflows, argo-workflows, argo-workflows, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard

js-yaml is a JavaScript YAML parser and dumper

datadog-cluster-agent-7.85

datadog-cluster-agent-7.85

datadog-agent-fips-7.85-fakeintake

datadog-agent-fips-7.85-fakeintake

datadog-cluster-agent-7.85

datadog-cluster-agent-7.85

cassandra-reaper-fips, cassandra-reaper-fips, cassandra-reaper-fips

Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5

cassandra-reaper-fips, cassandra-reaper-fips

HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

cassandra-reaper-fips, cassandra-reaper-fips, cassandra-reaper-fips

Uncontrolled Resource Consumption vulnerability in the HTTP/1

cassandra-reaper-fips, cassandra-reaper-fips

Uncontrolled Recursion vulnerability in Apache Commons

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

activemq, cassandra-reaper-fips, cassandra-reaper-fips

Security fix for GHSA-r7wm-3cxj-wff9 applied in: activemq 6.2.8-r1, cassandra-reaper-fips 4.0.2-r2, cassandra-reaper-fips 4.1.1-r1

langfuse-worker

undici's setCookie function does not fully sanitize cookie attributes