Open Source Vulnerabilities

gitlab-rails-ce-fips-19.4

gitlab-rails-ce-19.3

gitlab-rails-ce-19.3

gitlab-rails-ce-19.3

gitlab-rails-ce-19.1

gitlab-rails-ce-19.1

gitlab-rails-ce-19.1

ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, metallb

tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing

ollama-fips, ollama-fips, metallb

Security fix for GHSA-qxp5-gwg8-xv66 applied in: ollama-fips 0.34.4-r2, metallb 0.13.12-r3

ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, metallb

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component

metallb

attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing

grafana, helm

CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

nfs-subdir-external-provisioner-fips, metallb

Security fix for GHSA-8r3f-844c-mc37 applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

metallb

protojson

opensearch-dashboards-2

gitlab-rails-ce-fips-19.0

gitlab-rails-ce-fips-19.0

gitlab-rails-ce-fips-19.0

ascan, ascan

ascan, ascan

ascan, ascan

ascan, ascan

cluster-autoscaler-fips-1.37

cluster-autoscaler-fips-1.37

cluster-autoscaler-fips-1.37

cluster-autoscaler-fips-1.37

cluster-autoscaler-fips-1.37

nfs-subdir-external-provisioner-fips, metallb

Security fix for GHSA-6v2p-p543-phr9 applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

prometheus-mysqld-exporter, metallb

attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

ollama-fips, ollama-fips, nfs-subdir-external-provisioner-fips, metallb

Security fix for GHSA-vvgc-356p-c3xw applied in: ollama-fips 0.34.4-r2, nfs-subdir-external-provisioner-fips 4.0.18-r0, metallb 0.13.12-r3

kibana-8.19

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

step-ca, step-ca, step

Nebula is a scalable overlay networking tool

dex, opentelemetry-collector-contrib, keda, velero, prometheus-alertmanager, opentofu, dex, wave, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, traefik, cosign

malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

storybook

TuxCare security update for storybook (2 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

kubernetes-csi-external-snapshotter, temporal-server-fips, kumactl, velero-fips, velero-fips, velero-fips

Security fix for GHSA-5cgq-3rg8-m6cv applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, temporal-server-fips 1.31.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3

kubernetes-csi-external-snapshotter, temporal-server-fips, ollama-fips, ollama-fips, step-ca, kumactl, velero-fips, velero-fips, velero-fips

Security fix for GHSA-f5wc-c3c7-36mc applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, step-ca 0.30.2-r2, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3

kubernetes-csi-external-snapshotter, temporal-server-fips, ollama-fips, ollama-fips, step-ca, kumactl, velero-fips, velero-fips, velero-fips

Security fix for GHSA-vgwf-h737-ff37 applied in: kubernetes-csi-external-snapshotter 8.6.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, step-ca 0.30.2-r2, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

external-dns, kyverno, opentelemetry-collector-contrib, atlantis, cluster-autoscaler-fips, syft, syft, rclone, velero, prometheus, prometheus-operator, bank-vaults, prometheus-node-exporter-fips, prometheus-alertmanager, vault, vault, istio-pilot-discovery, nfs-subdir-external-provisioner, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, trust-manager-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, consul, kubernetes-event-exporter, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, consul, cluster-autoscaler, weaviate-fips, rancher-fleet-agent, helm-operator, helm-operator, kubernetes-dns-node-cache, helm-operator, nats-streaming, nats-streaming, nats-streaming, etcd, step-kms-plugin, thanos, prometheus, thanos, etcd, temporal-server-fips, opa, opa, opa, helm

Previously, a channel registered in the mux's chanList is not usable until it is established

external-dns, kyverno, opentelemetry-collector-contrib, atlantis, cluster-autoscaler-fips, syft, syft, rclone, velero, prometheus, prometheus-operator, bank-vaults, prometheus-node-exporter-fips, prometheus-alertmanager, vault, vault, istio-pilot-discovery, nfs-subdir-external-provisioner, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, trust-manager-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, consul, kubernetes-event-exporter, terraform, consul, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, weaviate-fips, rancher-fleet-agent, helm-operator, helm-operator, nats-streaming, nats-streaming, nats-streaming, helm-operator, etcd, step-kms-plugin, thanos, prometheus, thanos, etcd, temporal-server-fips, opa, opa, opa, helm

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

pydantic

CVE-2024-3772 in pydantic - Patched by Root

gitlab-rails-ce-19.5

gitlab-rails-ce-19.5