Open Source Vulnerabilities

cassandra-reaper-fips, activemq, cassandra-reaper-fips, cassandra-reaper-fips, cassandra-reaper-fips

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

langfuse-worker

NextAuth

langfuse-worker

undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response

langfuse-worker

NextAuth

langfuse-worker

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1

langfuse-worker

NextAuth

langfuse-worker

Security fix for GHSA-r28c-9q8g-f849 applied in: langfuse-worker 3.223.0-r1

langfuse-worker

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive

langfuse-worker

Security fix for GHSA-x445-f3h2-j279 applied in: langfuse-worker 3.223.0-r1

langfuse-worker

undici's cache interceptor mishandles malformed Cache-Control private directives

langfuse-worker

Security fix for GHSA-xmf8-cvqr-rfgj applied in: langfuse-worker 3.223.0-r1

langfuse-worker

Security fix for GHSA-f88m-g3jw-g9cj applied in: langfuse-worker 3.223.0-r1

langfuse-worker

Security fix for GHSA-7rqj-j65f-68wh applied in: langfuse-worker 3.223.0-r1

renovate, langfuse-worker

nanoid (Nano ID) before 5

langfuse-worker

nanoid (Nano ID) before 3

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

argo-workflows, argo-workflows, argo-workflows, argo-workflows, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard

js-yaml is a JavaScript YAML parser and dumper

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

langfuse-worker

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts

argo-workflows, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard, thingsboard

Security fix for GHSA-h67p-54hq-rp68 applied in: argo-workflows 3.6.19-r5, thingsboard 4.3.1.3-r3, thingsboard 4.3.1.3-r4, thingsboard 4.3.1.3-r5

argo-workflows, argo-workflows, argo-workflows, langfuse-worker

Security fix for GHSA-5p4m-2wfm-xmqj applied in: argo-workflows 3.6.19-r6, argo-workflows 3.7.15-r1, argo-workflows 3.7.15-r2, langfuse-worker 3.223.0-r1

kubeflow-pipelines-frontend, kubeflow-pipelines-frontend

kubeflow-pipelines-frontend, kubeflow-pipelines-frontend

langfuse-worker

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

langfuse-worker

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

renovate, langfuse-worker

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

langfuse-worker

Security fix for GHSA-c2j3-45gr-mqc4 applied in: langfuse-worker 3.223.0-r1

renovate, langfuse-worker, langfuse-worker, langfuse-worker, langfuse-worker

brace-expansion library generates arbitrary strings containing a common prefix and suffix

langfuse-worker

Security fix for GHSA-55q2-fjhq-7xh7 applied in: langfuse-worker 3.223.0-r1

langfuse-worker

Security fix for GHSA-p63j-vcc4-9vmv applied in: langfuse-worker 3.223.0-r1

langfuse-worker, langfuse-worker, langfuse-worker, langfuse-worker

brace-expansion through 5

langfuse-worker

Security fix for GHSA-frvp-7c67-39w9 applied in: langfuse-worker 3.223.0-r1

cassandra-reaper-fips

Security fix for GHSA-9h6p-92jq-888x applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-7g45-4rm6-3mm3 applied in: cassandra-reaper-fips 3.8.0-r3

argo-workflows, argo-workflows

fast-uri before 4

cassandra-reaper-fips

Security fix for GHSA-qqpg-mvqg-649v applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-6v67-2wr5-gvf4 applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-3p8m-j85q-pgmj applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-xq3w-v528-46rv applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-389x-839f-4rhx applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-j26w-f9rq-mr2q applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-g8m5-722r-8whq applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-q4rv-gq96-w7c5 applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-4g8c-wm8x-jfhw applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Security fix for GHSA-h46c-h94j-95f3 applied in: cassandra-reaper-fips 3.8.0-r3

cassandra-reaper-fips

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

cassandra-reaper-fips

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS)

cassandra-reaper-fips

SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization