Open Source Vulnerabilities

argo-cd-fips

Security fix for GHSA-3xc5-wrhm-f963 applied in: argo-cd-fips 3.3.7-r0

apache-zookeeper, kafka, strimzi-kafka-operator

In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

gitea, gitea, argo-cd-fips

Security fix for GHSA-gm2x-2g9h-ccm8 applied in: gitea 1.25.5-r0, argo-cd-fips 3.3.7-r0

kafka, strimzi-kafka-operator

In Eclipse Jetty, a first HTTP/1

gitea, gitea, argo-cd-fips

Security fix for GHSA-jhf3-xxhw-2wpp applied in: gitea 1.25.5-r0, argo-cd-fips 3.3.7-r0

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, elasticsearch, elasticsearch, strimzi-kafka-operator

Netty is a network application framework for development of protocol servers and clients

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, elasticsearch, elasticsearch, strimzi-kafka-operator

Netty is a network application framework for development of protocol servers and clients

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, elasticsearch, elasticsearch, strimzi-kafka-operator

Netty is a network application framework for development of protocol servers and clients

kafka

zstd-jni versions 1

kafka

zstd-jni versions 1

kafka

zstd-jni versions before 1

kafka

zstd-jni before 1

kafka

zstd-jni versions before 1

kafka

zstd-jni versions 1

kafka

zstd-jni before 1

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

strimzi-kafka-operator

TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, keycloak, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, elasticsearch, elasticsearch, strimzi-kafka-operator

Netty is a network application framework for development of protocol servers and clients

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is a network application framework for development of protocol servers and clients

sonarqube, spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is a network application framework for development of protocol servers and clients

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, keycloak, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, wso2am, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

spark-sc213-jdk17-py312, spark-sc213-jdk17-py312, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

elasticsearch, elasticsearch, strimzi-kafka-operator

Security fix for GHSA-r7wm-3cxj-wff9 applied in: elasticsearch 9.4.4-r1, strimzi-kafka-operator 0.51.0-r4

melange

Security fix for GHSA-w5pp-99ch-qj29 applied in: melange 0.50.0-r1

argo-cd, argo-cd-fips, melange

Security fix for GHSA-m7cr-m3pv-hgrp applied in: argo-cd 3.2.7-r2, argo-cd-fips 3.3.7-r2, melange 0.50.0-r1

melange

Security fix for GHSA-389r-gv7p-r3rp applied in: melange 0.50.0-r1

wildfly, wildfly, strimzi-kafka-operator

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition

argo-cd, argo-cd-fips, melange

Security fix for GHSA-crhj-59gh-8x96 applied in: argo-cd 3.2.7-r2, argo-cd-fips 3.3.7-r2, melange 0.50.0-r1

melange

Security fix for GHSA-hcwr-pq9g-rq3m applied in: melange 0.50.0-r1

melange

Security fix for GHSA-m7hm-vm4x-28jf applied in: melange 0.50.0-r1

rclone, rclone, melange

Security fix for GHSA-m3xc-h892-ggx6 applied in: rclone 1.74.1-r0, rclone 1.73.5.r1, melange 0.50.0-r1

rclone, melange

Security fix for GHSA-qw64-3x98-g7q2 applied in: rclone 1.73.5.r1, melange 0.50.0-r1

melange

Security fix for GHSA-qq3r-w4hj-gjp6 applied in: melange 0.50.0-r1

argo-cd, argo-cd-fips

go-git is an extensible git implementation library written in pure Go

argo-cd, argo-cd-fips

go-git is an extensible git implementation library written in pure Go

temporal-server, temporal-server, temporal-server, temporal-server, temporal-server-fips

writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster

temporal-server, temporal-server, temporal-server, temporal-server, temporal-server-fips

frontend gRPC server's streaming interceptor chain did not include the authorization interceptor

sonarqube, spark-sc213-jdk17-py312, wildfly, wildfly, strimzi-kafka-operator

Netty is an asynchronous, event-driven network application framework

org.springframework.data:spring-data-rest-core

TuxCare security update for org.springframework.data:spring-data-rest-core (2 CVEs)

grafana, openbao, temporal-server-fips

Memory-safety vulnerability in github