Open Source Vulnerabilities

apache-zookeeper, apache-hive, apache-zookeeper

Security fix for GHSA-2r2c-cx56-8933 applied in: apache-zookeeper 3.8.6-r4, apache-hive 4.0.1-r7, apache-zookeeper 3.9.5-r4

rancher-fleet-agent

go-git is an extensible git implementation library written in pure Go

go1.25

Security fix for GHSA-jq53-42q6-pqr5 applied in: go1.25 1.25.6-r0

rancher-fleet-agent

go-git is an extensible git implementation library written in pure Go

go1.25

c-ares is an asynchronous resolver library

apache-zookeeper, spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, elasticsearch, elasticsearch, strimzi-kafka-operator, solr, apache-zookeeper

Netty is an asynchronous, event-driven network application framework

apache-zookeeper

Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine

solr, apache-zookeeper

Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs

apache-zookeeper, apache-zookeeper, kafka, apache-zookeeper

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

kafka, solr, solr, apache-zookeeper

In Eclipse Jetty, the HTTP/1

wazuh-dashboard-dashboards-visualizations-fips

rancher-fleet-agent

Helm is a package manager for Charts for Kubernetes

argo-cd-fips, argo-cd-fips, rancher-fleet-agent

Security fix for GHSA-vh4v-2xq2-g5cg applied in: argo-cd-fips 3.3.7-r5, argo-cd-fips 3.3.7-r6, rancher-fleet-agent 0.13.16-r1

argo-cd-fips, argo-cd-fips, rancher-fleet-agent

Security fix for GHSA-8xwf-rjm4-xvhv applied in: argo-cd-fips 3.3.7-r5, argo-cd-fips 3.3.7-r6, rancher-fleet-agent 0.13.16-r1

argo-cd-fips, argo-cd-fips, rancher-fleet-agent

oras-go is a Go library for managing OCI artifacts

opentofu, rancher-fleet-agent

oras-go is a Go library for managing OCI artifacts

rancher-fleet-agent

containerd is an open-source container runtime

rancher-fleet-agent

containerd is an open-source container runtime

rancher-fleet-agent

containerd is an open-source container runtime

rancher-fleet-agent

containerd is an open-source container runtime

cosign, step-ca, step-ca

Security fix for GHSA-rjr7-jggh-pgcp applied in: cosign 2.6.5-r0, step-ca 0.28.4-r3, step-ca 0.28.4-r4

opentofu, rancher-fleet-agent

oras-go is a Go library for managing OCI artifacts

cosign, step-ca, step-ca

Security fix for GHSA-9g5q-2w5x-hmxf applied in: cosign 2.6.5-r0, step-ca 0.28.4-r3, step-ca 0.28.4-r4

argo-cd-fips, argo-cd-fips, rancher-fleet-agent

oras-go is a Go library for managing OCI artifacts

cosign, step-ca, step-ca

Security fix for GHSA-3fxj-6jh8-hvhx applied in: cosign 2.6.5-r0, step-ca 0.28.4-r3, step-ca 0.28.4-r4

argo-cd-fips, argo-cd-fips, rancher-fleet-agent

oras-go is a Go library for managing OCI artifacts

cortex, cortex, step-ca, step-ca

Open Redirect vulnerability in the go-chi/chi >=5

step-ca

Slack Nebula before 1

rancher-fleet-agent

containerd is an open-source container runtime

rancher-fleet-agent

containerd is an open-source container runtime

minio-operator, minio-operator, minio-operator, minio-operator

golang-jwt is a Go implementation of JSON Web Tokens

minio-operator, minio-operator, minio-operator, minio-operator

Security fix for GHSA-29wx-vh33-7x7r applied in: minio-operator 6.0.4-r1, minio-operator 6.0.4-r2, minio-operator 6.0.4-r3, minio-operator 6.0.4-r4

minio-operator, minio-operator, minio-operator, minio-operator

Security fix for GHSA-mh63-6h87-95cp applied in: minio-operator 6.0.4-r1, minio-operator 6.0.4-r2, minio-operator 6.0.4-r3, minio-operator 6.0.4-r4

minio-operator, minio-operator, minio-operator, minio-operator, minio-operator, minio-operator

golang-jwt is a Go implementation of JSON Web Tokens

rancher-fleet-agent

containerd is an open-source container runtime

rancher-fleet-agent

containerd is an open-source container runtime

spark-sc213-jdk17-py312, apache-hive, apache-nifi, apache-zookeeper

JLine is a Java library for handling console input

spark-sc213-jdk17-py312, apache-hive, apache-nifi, apache-zookeeper

JLine is a Java library for handling console input

gradle, sonarqube, apache-hive, gradle, apache-hive, wso2is, apache-hive, wso2am, wso2is, keycloak, activemq, apache-zookeeper

TypeDeserializerBase

gradle, sonarqube, apache-hive, gradle, apache-hive, wso2is, apache-hive, wso2am, wso2is, keycloak, apache-zookeeper

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

sonarqube, apache-hive, gradle, apache-hive, wso2is, apache-hive, wso2am, wso2is, keycloak, activemq, apache-zookeeper

NumberInput

gradle, sonarqube, apache-hive, gradle, apache-hive, wso2is, apache-hive, wso2am, wso2is, keycloak, activemq, apache-zookeeper

UTF8DataInputJsonParser

next, @rootio/next

GHSA-vcvr-r3jv-pc5j in next - Patched by Root

flux-2.10, flux-2.10

flux-2.10, flux-2.10

flux-2.10, flux-2.10

suseconnect-ng, suseconnect-ng, suseconnect-ng, suseconnect-ng, suseconnect-ng, suseconnect-ng

Security update for suseconnect-ng

github.com/envoyproxy/gateway, rootio-github.com/envoyproxy/gateway

CVE-2026-53714 in github.com/envoyproxy/gateway - Patched by Root

github.com/envoyproxy/gateway, rootio-github.com/envoyproxy/gateway

CVE-2026-53713 in github.com/envoyproxy/gateway - Patched by Root

grafana-rollout-operator, opentofu, terraform

OpenTelemetry-Go is the Go implementation of OpenTelemetry