Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-cj98-c9h7-xh33
    Fix available
    Packages

    datadog-agent-7.85-fakeintake

    Summary

    Published
    30 Oct 2026
    Packages

    cassandra-reaper-fips

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    cassandra-reaper-fips

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

    Published
    30 Oct 2026
    Packages

    cassandra-reaper-fips

    Summary

    Netty is a network application framework for development of protocol servers and clients

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    When parsing a multipart form (either explicitly with Request

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    ParseAddressList function incorrectly handles comments (text within parentheses) within display names

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Command go env is documented as outputting a shell script containing the Go environment

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Calling Decoder

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    net/http HTTP/1

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-v39h-62p7-jpjc applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-q3j6-qgpj-74h6 applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-xxjr-mmjv-4gpg applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-mh29-5h37-fv8m applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-q8mj-m7cp-5q26 applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    CGA-87r4-qcqv-8hfr
    Fix available
    Packages

    dogstatsd-7.85

    Summary

    Published
    30 Oct 2026
    CGA-cx27-chr9-97q6
    Fix available
    Packages

    dogstatsd-7.85

    Summary

    Published
    30 Oct 2026
    Packages

    argo-workflows

    Summary

    Security fix for GHSA-hmw2-7cc7-3qxx applied in: argo-workflows 3.6.19-r5

    Published
    30 Oct 2026
    Packages

    argo-workflows, sqlpad

    Summary

    Versions of the package @tootallnate/once before 3

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-vpq2-c234-7xj6 applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Dottie provides nested object access and manipulation in JavaScript

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-r5mx-6wc6-7h9w applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, sqlpad

    Summary

    uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs

    Published
    30 Oct 2026
    Packages

    argo-workflows, sqlpad

    Summary

    Security fix for GHSA-w5hq-g745-h8pq applied in: argo-workflows 3.6.19-r5, sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    This affects versions of the package bn

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-378v-28hj-76wf applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Sequelize is a Node

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-6457-6jrx-69cr applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    adm-zip before 0

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-xcpc-8h2w-3j85 applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-j759-j44w-7fr8 applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-x6wf-f3px-wcqx applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-wh4c-j3r5-mjhp applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-f6ww-3ggp-fr8h applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    sqlpad

    Summary

    Security fix for GHSA-2v35-w6hq-6mfw applied in: sqlpad 7.5.7-r2

    Published
    30 Oct 2026
    Packages

    argo-workflows, sqlpad, sqlpad

    Summary

    Impact: In body-parser versions prior to 1

    Published
    30 Oct 2026
    CGA-mh6c-ppjf-wq5g
    Fix available
    Packages

    datadog-agent-fips-7.85

    Summary

    Published
    30 Oct 2026
    CGA-cfw2-q268-g52j
    Fix available
    Packages

    datadog-agent-fips-7.85

    Summary

    Published
    30 Oct 2026
    Packages

    sqlpad, sqlpad

    Summary

    Security fix for GHSA-v422-hmwv-36x6 applied in: sqlpad 7.5.7-r2, sqlpad 7.5.7-r3

    Published
    30 Oct 2026
    CGA-88qg-qp72-3h9c
    Fix available
    Packages

    datadog-agent-fips-7.85

    Summary

    Published
    30 Oct 2026
    CGA-qcmc-cwc5-ghvv
    Fix available
    Packages

    datadog-agent-fips-7.85

    Summary

    Published
    30 Oct 2026
    CGA-9572-p4fh-8v42
    Fix available
    Packages

    datadog-agent-fips-7.85

    Summary

    Published
    30 Oct 2026
    CGA-98jm-x746-cxj8
    Fix available
    Packages

    datadog-agent-fips-7.85

    Summary

    Published
    30 Oct 2026