Open Source Vulnerabilities

cassandra-reaper-fips

Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0

cassandra-reaper-fips, cassandra-reaper-fips

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

cassandra-reaper-fips

Uncontrolled Recursion vulnerability in Apache Commons Lang

cassandra-reaper-fips

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter

cassandra-reaper-fips

There exists a security vulnerability in Jetty's ThreadLimitHandler

cassandra-reaper-fips

In Eclipse Jetty versions 9

cassandra-reaper-fips

Improper Access Control vulnerability in Apache Commons

cassandra-reaper-fips

Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS

cassandra-reaper-fips

Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1

cassandra-reaper-fips

ACE vulnerability in conditional configuration file processing by QOS

cassandra-reaper-fips

ACE vulnerability in JaninoEventEvaluator by QOS

datadog-agent-fips-7.85-serverless-init

datadog-agent-fips-7.85-serverless-init

datadog-agent-fips-7.85-serverless-init

cassandra-reaper-fips

jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor

cassandra-reaper-fips

ACE vulnerability in configuration file processing by QOS

cassandra-reaper-fips

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4

cassandra-reaper-fips

Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4

cassandra-reaper-fips

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

cassandra-reaper-fips

Security fix for GHSA-wxr5-93ph-8wr9 applied in: cassandra-reaper-fips 3.8.0-r3

kibana-9.2

stargate

Netty is an asynchronous, event-driven network application framework

activemq, cassandra-reaper-fips

In Eclipse Jetty, the HTTP/1

Zuke: Command-form registry descriptors bypass the MCP launch policy

policy-controller

Security fix for GHSA-6m8w-jc87-6cr7 applied in: policy-controller 0.12.1-r1

policy-controller

Security fix for GHSA-whqx-f9j3-ch6m applied in: policy-controller 0.12.1-r1

policy-controller

Security fix for GHSA-4qg8-fj49-pxjh applied in: policy-controller 0.12.1-r1

python-min

Distrust compromised intermediate certificates in ssl module

python

Distrust compromised intermediate certificates in ssl module

s3proxy

Security fix for GHSA-w573-9ffj-6ff9 applied in: s3proxy 3.3.0-r1

parse

Parse Server 9.0.0 before 9.10.4 Unauthenticated Class Schema Deletion on MongoDB

parse

Parse Server 9.0.0 before 9.10.4 Reserved Field Name Injection via Object Writes

parse

Parse Server 9.0.0 before 9.10.5 Authentication Bypass via AuthAdapter Subclasses

parse

Parse Server 9.0.0 before 9.10.5 Privilege Escalation via SMS MFA Login

parse

Parse Server 9.0.0 before 9.10.5 LiveQuery Information Disclosure via $or Subscriptions

temporal-server, temporal-server

writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster

temporal-server, temporal-server

When frontend

temporal-server, temporal-server

When system

temporal-server, temporal-server

frontend gRPC server's streaming interceptor chain did not include the authorization interceptor

thingsboard, thingsboard

Security fix for GHSA-wg6q-6289-32hp applied in: thingsboard 4.3.1-r0

Stored XSS via crafted URLs in HTML ticket content in Request Tracker

thingsboard, thingsboard

Security fix for GHSA-6hcq-hmm3-jj3c applied in: thingsboard 4.3.1-r0

thingsboard, thingsboard

Security fix for GHSA-9m3c-qcxr-9x87 applied in: thingsboard 4.3.1-r0

thingsboard, thingsboard

Security fix for GHSA-4cx2-fc23-5wg6 applied in: thingsboard 4.3.1-r0

thingsboard, thingsboard

Security fix for GHSA-5qcv-4rpc-jp93 applied in: thingsboard 4.3.1-r0

Stored XSS via related ticket subject on RTIR Split and Create Incident forms

thingsboard, thingsboard

Security fix for GHSA-c3fc-8qff-9hwx applied in: thingsboard 4.3.1-r0

thingsboard, thingsboard

Security fix for GHSA-4773-3jfm-qmx3 applied in: thingsboard 4.3.1-r0

thingsboard, thingsboard

Security fix for GHSA-x4m4-345f-5h5g applied in: thingsboard 4.3.1-r0

thingsboard, thingsboard

Security fix for GHSA-rv64-5gf8-9qq8 applied in: thingsboard 4.3.1-r0