Open Source Vulnerabilities
Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodies
Starlet versions from 0.20 before 0.33 for Perl allow memory exhaustion via unbounded buffering when decoding chunked request bodies
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection
Starlet versions before 0.33 for Perl send a body in responses to HEAD requests, corrupting the next response on a persistent or pipelined connection
Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request bodies
Starlet versions from 0.20 before 0.33 for Perl allow CPU exhaustion via regular expression backtracking when decoding chunked request bodies
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
commercial-gitlab-rails-ee-fips-19.4
commercial-gitlab-rails-ee-fips-19.4
commercial-gitlab-rails-ee-fips-19.4
thanos, thanos
OpenTelemetry-Go is the Go implementation of OpenTelemetry
thanos/ thanos
OpenTelemetry-Go is the Go implementation of OpenTelemetry
Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory
Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory
nfs-subdir-external-provisioner-fips
Security fix for GHSA-6wxm-mpqj-6jpf applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0
nfs-subdir-external-provisioner-fips
Security fix for GHSA-6wxm-mpqj-6jpf applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0
nfs-subdir-external-provisioner-fips
Security fix for GHSA-hp87-p4gw-j4gq applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0
nfs-subdir-external-provisioner-fips
Security fix for GHSA-hp87-p4gw-j4gq applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0
nfs-subdir-external-provisioner-fips
Security fix for GHSA-cg3q-j54f-5p7p applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0
nfs-subdir-external-provisioner-fips
Security fix for GHSA-cg3q-j54f-5p7p applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0
nfs-subdir-external-provisioner-fips
Security fix for GHSA-v778-237x-gjrc applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0
nfs-subdir-external-provisioner-fips
Security fix for GHSA-v778-237x-gjrc applied in: nfs-subdir-external-provisioner-fips 4.0.18-r0
github.com/containerd/containerd/v2, github.com/containerd/containerd, rootio-github.com/containerd/containerd/v2, rootio-github.com/containerd/containerd
CVE-2026-53492 in github.com/containerd/containerd/v2 - Patched by Root
github.com/containerd/containerd/v2/ github.com/containerd/containerd/ rootio-github.com/containerd/containerd/v2/ rootio-github.com/containerd/containerd
CVE-2026-53492 in github.com/containerd/containerd/v2 - Patched by Root
github.com/containerd/containerd, rootio-github.com/containerd/containerd
CVE-2026-50195 in github.com/containerd/containerd - Patched by Root
github.com/containerd/containerd/ rootio-github.com/containerd/containerd
CVE-2026-50195 in github.com/containerd/containerd - Patched by Root
wazuh-dashboard-dashboards-reporting
wazuh-dashboard-dashboards-reporting
github.com/projectcontour/contour, rootio-github.com/projectcontour/contour
CVE-2026-41246 in github.com/projectcontour/contour - Patched by Root
github.com/projectcontour/contour/ rootio-github.com/projectcontour/contour
CVE-2026-41246 in github.com/projectcontour/contour - Patched by Root
HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request
HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request
wazuh-dashboard-dashboards-notifications
nodejs22, nodejs22
Security update for nodejs22
CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route
CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route
grafana, openbao, temporal-server-fips, kumactl
Security fix for GHSA-j88v-2chj-qfwx applied in: grafana 13.0.1-r0, openbao 2.5.4-r1, temporal-server-fips 1.31.1-r1, kumactl 2.14.0-r1
grafana/ openbao/ temporal-server-fips/ kumactl
Security fix for GHSA-j88v-2chj-qfwx applied in: grafana 13.0.1-r0, openbao 2.5.4-r1, temporal-server-fips 1.31.1-r1, kumactl 2.14.0-r1
argo-workflow-controller-fips-4.0, argo-workflow-executor-fips-4.0
argo-workflow-controller-fips-4.0/ argo-workflow-executor-fips-4.0
argo-workflow-controller-fips-4.0, argo-workflow-executor-fips-4.0
argo-workflow-controller-fips-4.0/ argo-workflow-executor-fips-4.0
