Open Source Vulnerabilities

ollama-fips, ollama-fips

Security fix for GHSA-56w8-48fp-6mgv applied in: ollama-fips 0.34.4-r2

kube-state-metrics, stakater-reloader, stakater-reloader, gomplate, loki, loki, loki, loki, opa-fips, istio-pilot-discovery, kedacore-http-add-on, kedacore-http-add-on, rclone, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, keda, yunikorn-k8shim, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-alertmanager, prometheus-operator, prometheus-operator, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, prometheus, prometheus, argo-cd, cert-manager, dex, restic-fips, nfs-subdir-external-provisioner, prometheus-node-exporter, wave, weaviate-fips

trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped

kube-state-metrics, stakater-reloader, stakater-reloader, gomplate, loki, loki, loki, loki, opa-fips, istio-pilot-discovery, kedacore-http-add-on, kedacore-http-add-on, rclone, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, keda, yunikorn-k8shim, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-alertmanager, prometheus-operator, prometheus-operator, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, prometheus, prometheus, argo-cd, cert-manager, dex, restic-fips, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, wave, weaviate-fips

When http

kube-state-metrics, stakater-reloader, stakater-reloader, gomplate, loki, loki, loki, loki, opa-fips, istio-pilot-discovery, kedacore-http-add-on, kedacore-http-add-on, rclone, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, keda, yunikorn-k8shim, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-alertmanager, prometheus-operator, prometheus-operator, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, prometheus, prometheus, argo-cd, cert-manager, dex, restic-fips, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, wave, weaviate-fips

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression

stakater-reloader, stakater-reloader, kube-state-metrics, gomplate, loki, loki, loki, loki, opa-fips, istio-pilot-discovery, kedacore-http-add-on, kedacore-http-add-on, rclone, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, keda, yunikorn-k8shim, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-alertmanager, prometheus-operator, prometheus-operator, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, prometheus, prometheus, argo-cd, cert-manager, dex, restic-fips, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, wave, weaviate-fips

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specify...

stakater-reloader, stakater-reloader, kube-state-metrics, gomplate, loki, loki, loki, loki, opa-fips, istio-pilot-discovery, kedacore-http-add-on, kedacore-http-add-on, rclone, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, keda, yunikorn-k8shim, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-alertmanager, prometheus-operator, prometheus-operator, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, prometheus, prometheus, argo-cd, cert-manager, dex, restic-fips, prometheus-node-exporter, wave, weaviate-fips

On Windows, when the target of Root

kube-state-metrics, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, kube-state-metrics, gomplate, loki, loki, loki, loki, argo-cd, argo-cd, argo-cd, argo-cd, argo-cd, argo-cd, kyverno, opa-fips, istio-pilot-discovery, grafana-rollout-operator, kedacore-http-add-on, kedacore-http-add-on, knative-net-istio, knative-net-istio, rclone, rclone, rclone, rclone, rclone, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, stakater-reloader, keda, yunikorn-k8shim, grafana, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, stakater-reloader, stakater-reloader, prometheus-alertmanager, prometheus-operator, prometheus-operator, victoriametrics-cluster, weaviate-fips, prometheus-statsd-exporter, prometheus-mysqld-exporter, prometheus-statsd-exporter, istio-pilot-discovery, istio-pilot-discovery, opentofu, prometheus, prometheus, argo-cd, cert-manager, dex, dex, restic-fips, dex, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, cloudprober-fips, victoria-metrics, victoria-metrics, ollama-fips, ollama-fips, wave, weaviate-fips

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently

stakater-reloader, stakater-reloader, kube-state-metrics, gomplate, loki, loki, loki, loki, opa-fips, istio-pilot-discovery, kedacore-http-add-on, kedacore-http-add-on, rclone, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, keda, yunikorn-k8shim, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-alertmanager, prometheus-operator, prometheus-operator, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, prometheus, prometheus, argo-cd, cert-manager, dex, restic-fips, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, wave, weaviate-fips

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes

stakater-reloader, stakater-reloader, kube-state-metrics, gomplate, loki, loki, loki, loki, opa-fips, istio-pilot-discovery, kedacore-http-add-on, kedacore-http-add-on, rclone, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, keda, yunikorn-k8shim, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-alertmanager, prometheus-operator, prometheus-operator, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, prometheus, prometheus, argo-cd, cert-manager, dex, restic-fips, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, wave, weaviate-fips

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...

kube-state-metrics, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, gomplate, kube-state-metrics, loki, loki, loki, loki, argo-cd, argo-cd, argo-cd, argo-cd, argo-cd, kyverno, argo-cd, opa-fips, istio-pilot-discovery, grafana-rollout-operator, kedacore-http-add-on, kedacore-http-add-on, knative-net-istio, knative-net-istio, rclone, rclone, rclone, rclone, rclone, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, stakater-reloader, keda, yunikorn-k8shim, grafana, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, stakater-reloader, stakater-reloader, opentelemetry-collector-contrib, prometheus-alertmanager, prometheus-operator, prometheus-operator, victoriametrics-cluster, weaviate-fips, prometheus-statsd-exporter, prometheus-mysqld-exporter, prometheus-statsd-exporter, istio-pilot-discovery, istio-pilot-discovery, opentofu, prometheus, prometheus, argo-cd, cert-manager, dex, dex, dex, restic-fips, cloudprober-fips, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, victoria-metrics, victoria-metrics, ollama-fips, ollama-fips, wave, weaviate-fips

malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...

stakater-reloader, stakater-reloader, kube-state-metrics, gomplate, loki, loki, loki, loki, opa-fips, istio-pilot-discovery, kedacore-http-add-on, kedacore-http-add-on, rclone, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, keda, yunikorn-k8shim, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-alertmanager, prometheus-operator, prometheus-operator, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, prometheus, prometheus, argo-cd, cert-manager, dex, restic-fips, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, wave, weaviate-fips

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU

kube-state-metrics, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, kube-state-metrics, gomplate, loki, loki, loki, loki, argo-cd, argo-cd, argo-cd, argo-cd, argo-cd, kyverno, argo-cd, opa-fips, istio-pilot-discovery, grafana-rollout-operator, kedacore-http-add-on, kedacore-http-add-on, knative-net-istio, knative-net-istio, rclone, rclone, rclone, rclone, rclone, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, stakater-reloader, keda, yunikorn-k8shim, grafana, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, stakater-reloader, stakater-reloader, opentelemetry-collector-contrib, prometheus-operator, prometheus-operator, prometheus-alertmanager, victoriametrics-cluster, weaviate-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, opentofu, prometheus, prometheus, argo-cd, cert-manager, dex, dex, dex, restic-fips, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, victoria-metrics, victoria-metrics, cloudprober-fips, ollama-fips, ollama-fips, wave, weaviate-fips

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing

org.apache.logging.log4j:log4j-1.2-api, org.apache.logging.log4j:log4j-core, org.apache.logging.log4j:log4j-layout-template-json

TuxCare security update for org.apache.logging.log4j (5 CVEs)

kube-state-metrics, stakater-reloader, stakater-reloader, stakater-reloader, kube-state-metrics, stakater-reloader, stakater-reloader, stakater-reloader, gomplate, loki, loki, loki, loki, argo-cd, argo-cd, argo-cd, argo-cd, argo-cd, argo-cd, kyverno, opa-fips, istio-pilot-discovery, grafana-rollout-operator, kedacore-http-add-on, kedacore-http-add-on, knative-net-istio, knative-net-istio, rclone, rclone, rclone, rclone, rclone, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, stakater-reloader, keda, yunikorn-k8shim, grafana, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, stakater-reloader, stakater-reloader, opentelemetry-collector-contrib, prometheus-alertmanager, prometheus-operator, prometheus-operator, victoriametrics-cluster, weaviate-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, opentofu, prometheus, prometheus, argo-cd, cert-manager, restic-fips, dex, dex, dex, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, cloudprober-fips, victoria-metrics, victoria-metrics, wave, ollama-fips, ollama-fips, weaviate-fips

HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

kube-state-metrics, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, kube-state-metrics, gomplate, loki, loki, loki, loki, argo-cd, argo-cd, argo-cd, argo-cd, argo-cd, kyverno, argo-cd, opa-fips, istio-pilot-discovery, grafana-rollout-operator, kedacore-http-add-on, kedacore-http-add-on, knative-net-istio, knative-net-istio, rclone, rclone, rclone, rclone, rclone, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-net-istio, knative-serving, knative-serving, knative-serving, knative-serving, haproxy-ingress, haproxy-ingress, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus, prometheus, stakater-reloader, keda, yunikorn-k8shim, grafana, keda, prometheus-operator, renovate, prometheus-mysqld-exporter, prometheus-mysqld-exporter, prometheus-node-exporter-fips, prometheus-node-exporter-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, stakater-reloader, stakater-reloader, prometheus-operator, prometheus-operator, opentelemetry-collector-contrib, prometheus-alertmanager, victoriametrics-cluster, weaviate-fips, prometheus-statsd-exporter, prometheus-statsd-exporter, prometheus-mysqld-exporter, istio-pilot-discovery, istio-pilot-discovery, opentofu, prometheus, prometheus, argo-cd, cert-manager, dex, dex, restic-fips, dex, nfs-subdir-external-provisioner, nfs-subdir-external-provisioner, prometheus-node-exporter, victoria-metrics, victoria-metrics, cloudprober-fips, wave, ollama-fips, ollama-fips, weaviate-fips

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request

ollama-fips, ollama-fips

Security fix for GHSA-hcg3-q754-cr77 applied in: ollama-fips 0.34.4-r2

stakater-reloader, stakater-reloader, stakater-reloader, stakater-reloader, grafana-rollout-operator, kedacore-http-add-on, kedacore-http-add-on, rclone, yunikorn-k8shim, renovate, prometheus-alertmanager, wave

Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

opensearch-dashboards-2

wso2is

In Bouncy Castle for Java before 1

wso2is

In Bouncy Castle for Java before 1

gradle, gradle, wso2is

In Bouncy Castle for Java before 1

gradle, wso2is

In Bouncy Castle for Java before 1

gradle, gradle, wso2is

In Bouncy Castle for Java before 1

gradle, gradle, wso2is

In Bouncy Castle for Java before 1

gradle, gradle, wso2is

In Bouncy Castle for Java before 1

sonarqube, spark-sc213-jdk17-py312, apache-hive, elasticsearch, elasticsearch, strimzi-kafka-operator, apache-hive

yawkat LZ4 Java provides LZ4 compression for Java

apache-hive, apache-hive

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name

apache-hive, apache-hive

Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE)

apache-hive, apache-hive

Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active

apache-hive, apache-hive

Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack

apache-hive, apache-hive

Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors

apache-hive, apache-hive

Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...

kafka, solr

Security fix for GHSA-wjpw-4j6x-6rwh applied in: kafka 4.2.0-r1, solr 10.0.0-r0

apache-hive, apache-hive

Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

solr

In Eclipse Jetty, versions 12

apache-hive, apache-hive

WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request

kafka, solr

Security fix for GHSA-xxh7-fcf3-rj7f applied in: kafka 4.2.0-r1, solr 10.0.0-r0

solr

Security fix for GHSA-vc5p-v9hr-52mj applied in: solr 9.9.0-r0

apache-hive, apache-hive

Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit

apache-hive, apache-hive

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments

apache-hive, apache-hive

WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute

spark-sc213-jdk17-py312, elasticsearch, elasticsearch, gradle, wso2is

Security fix for GHSA-mhm7-754m-9p8w applied in: spark-sc213-jdk17-py312 4.1.3-r4, elasticsearch 9.4.4-r1, gradle 8.14.5-r1, wso2is 7.3.0-r1

apache-hive, apache-hive

Spring RSocket application is exposed to a memory leak via a malformed SETUP frame

apache-hive, apache-hive

Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect

apache-hive, apache-hive

Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) is used with a BigDecimal or...

apache-hive, apache-hive

PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1

apache-hive, wso2is

Uncontrolled Recursion vulnerability in Apache Commons

apache-hive, apache-hive

Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is not explicitly speci...

apache-hive, apache-hive

UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns

apache-hive, apache-hive

PAC4J is vulnerable to LDAP Injection in multiple methods