Open Source Vulnerabilities

gitlab-rails-ce-19.5

gitlab-rails-ce-19.5

commercial-gitlab-rails-ee-fips-19.3

commercial-gitlab-rails-ee-fips-19.3

commercial-gitlab-rails-ee-fips-19.3

kube-vip-fips

GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language

kube-vip-fips

Security fix for GHSA-frrj-87jh-2772 applied in: kube-vip-fips 1.2.1-r1

nextcloud-server-34

python-3.14, python-3.14

kube-state-metrics, external-dns, kube-state-metrics, argo-cd, argo-cd, kyverno, dex, grafana-rollout-operator, kedacore-http-add-on, kedacore-http-add-on, syft, rclone, rclone, rclone, velero, prometheus, bank-vaults, prometheus-alertmanager, temporal-server, temporal-server-fips, istio-pilot-discovery, opentofu, opentofu, tekton-chains, dex, consul, kubernetes-event-exporter, temporal-server, terraform, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, consul, kube-metrics-adapter, kube-metrics-adapter, rancher-fleet-agent, rancher-fleet-agent, argo-workflows, helm-operator, helm-operator, helm-operator, kubernetes-dns-node-cache, secrets-store-csi-driver-provider-aws, etcd, helm-operator, step-kms-plugin, thanos, prometheus, thanos, etcd, temporal-server-fips, velero-plugin-for-aws, velero-plugin-for-aws, fluent-operator, opa, opa, velero-plugin-for-aws, velero-plugin-for-csi, velero-plugin-for-csi, velero-plugin-for-csi

gRPC-Go is the Go language implementation of gRPC

external-dns, argo-cd, dex, kyverno, etcd, cluster-autoscaler-fips, rclone, prometheus, bank-vaults, prometheus-alertmanager, temporal-server-fips, opentofu, tekton-chains, kubernetes-event-exporter, cluster-autoscaler, cluster-autoscaler, rancher-fleet-agent, helm-operator, helm-operator, helm-operator, secrets-store-csi-driver-provider-aws, etcd, helm-operator, step-kms-plugin, prometheus, etcd, velero-plugin-for-aws, fluent-operator, velero-plugin-for-aws, velero-plugin-for-csi

gRPC-Go is the Go language implementation of gRPC

external-dns, argo-cd, dex, kyverno, etcd, kedacore-http-add-on, cluster-autoscaler-fips, kedacore-http-add-on, rclone, velero, prometheus, bank-vaults, prometheus-alertmanager, opentofu, tekton-chains, dex, kubernetes-event-exporter, cluster-autoscaler, temporal-server, cluster-autoscaler, rancher-fleet-agent, helm-operator, helm-operator, helm-operator, secrets-store-csi-driver-provider-aws, etcd, helm-operator, step-kms-plugin, thanos, prometheus, thanos, dynatrace-operator, dynatrace-operator, etcd, velero-plugin-for-aws, fluent-operator, velero-plugin-for-aws, velero-plugin-for-csi

gRPC-Go is the Go language implementation of gRPC

python-3.10, python-3.10

python-3.10, python-3.10

pixi, pixi

pixi, pixi

pixi, pixi

pixi, pixi

software.amazon.awssdk:cloudfront, io.root.software.amazon.awssdk:cloudfront

GHSA-443w-3rq3-5m5h in software.amazon.awssdk:cloudfront - Patched by Root

next, @rootio/next

CVE-2026-94483 in next - Patched by Root

next, @rootio/next

CVE-2026-103004 in next - Patched by Root

next, @rootio/next

CVE-2026-94485 in next - Patched by Root

next, @rootio/next

CVE-2026-94486 in next - Patched by Root

next, @rootio/next

CVE-2026-94544 in next - Patched by Root

next, @rootio/next

GHSA-673q-mjm6-r5xr in next - Patched by Root

kibana-9.3

opensearch-dashboards-2-fips-alerting-dashboards-plugin

commercial-gitlab-rails-ee-19.1

commercial-gitlab-rails-ee-19.1

commercial-gitlab-rails-ee-19.1

wazuh-dashboard

temporal-server-fips

Echo is a Go web framework

temporal-server-fips

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings

external-dns, kyverno, cluster-autoscaler-fips, atlantis, rclone, velero, prometheus, prometheus-operator, bank-vaults, prometheus-node-exporter-fips, prometheus-alertmanager, nfs-subdir-external-provisioner, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, trust-manager-fips, ollama-fips, ollama-fips, ollama-fips, ollama-fips, consul, kubernetes-event-exporter, cluster-autoscaler, consul, weaviate-fips, rancher-fleet-agent, thanos, prometheus, thanos, dynatrace-operator, dynatrace-operator, dynatrace-operator, dynatrace-operator, etcd, temporal-server-fips, opa

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

kibana-9.2

opensearch-dashboards-2-alerting-dashboards-plugin

traefik

In Traefik before versions 1

traefik

Traefik is an open source HTTP reverse proxy and load balancer

traefik

Traefik is an open source HTTP reverse proxy and load balancer

traefik

HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service

traefik

Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer for deploying microservices

openbao, traefik

Moby is an open source container framework

argo-cd, argo-cd, argo-cd, etcd, grafana-rollout-operator, kedacore-http-add-on, kubernetes-csi-external-resizer, cluster-autoscaler-fips, kedacore-http-add-on, knative-net-istio, knative-net-istio, velero, prometheus, prometheus, prometheus, grafana, bank-vaults, prometheus-alertmanager, rabbitmq-messaging-topology-operator, weaviate-fips, amazon-cloudwatch-agent, istio-pilot-discovery, argo-cd, opentofu, opentofu, tekton-chains, tekton-chains, cert-manager, restic-fips, grafana, weaviate-fips, weaviate-fips, eks-distro-kube-scheduler, eks-distro-kube-scheduler, eks-distro-kube-apiserver, eks-distro-kube-apiserver, terraform, cluster-autoscaler, temporal-server, cluster-autoscaler, cluster-autoscaler, cluster-autoscaler, kyverno, weaviate-fips, openbao, fluent-operator, kube-state-metrics-fips, kube-state-metrics-fips, helm-operator, helm-operator, helm-operator, helm-operator, etcd, victoriametrics-operator, victoriametrics-operator-fips, thanos, thanos, thanos, thanos, thanos, prometheus, fluent-operator

OpenTelemetry-Go is the Go implementation of OpenTelemetry

velero-plugin-for-aws, velero-plugin-for-csi

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes

commercial-gitlab-rails-ee-fips-19.1

commercial-gitlab-rails-ee-fips-19.1

commercial-gitlab-rails-ee-fips-19.1

py3-jupyterhub

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates

keycloak

Netty versions 4

gradle, spark-sc213-jdk17-py312, apache-hive, apache-hive, apache-hive, keycloak

jackson-databind's deserializer for java