Open Source Vulnerabilities

argo-cd-fips, argo-cd-fips

Security fix for GHSA-xf85-363p-868w applied in: argo-cd-fips 3.3.7-r5, argo-cd-fips 3.3.7-r6

grafana, openbao, temporal-server-fips

Memory-safety vulnerability in github

argo-cd-fips, argo-cd-fips

Security fix for GHSA-jxpm-75mh-9fp7 applied in: argo-cd-fips 3.3.7-r5, argo-cd-fips 3.3.7-r6

argo-cd-fips, argo-cd-fips

Security fix for GHSA-rg3g-4rw9-gqrp applied in: argo-cd-fips 3.3.7-r5, argo-cd-fips 3.3.7-r6

argo-cd, argo-cd-fips, argo-cd-fips

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

argo-cd-fips, argo-cd-fips

Security fix for GHSA-h98r-wv3h-fr38 applied in: argo-cd-fips 3.3.7-r5, argo-cd-fips 3.3.7-r6

argo-cd, argo-cd-fips, argo-cd-fips

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

argo-cd-fips, argo-cd-fips

Security fix for GHSA-3v3m-wc6v-x4x3 applied in: argo-cd-fips 3.3.7-r5, argo-cd-fips 3.3.7-r6

argo-cd, argo-cd, argo-cd-fips, argo-cd-fips

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes

argo-cd, argo-cd-fips

Security fix for GHSA-gxhx-2686-5h9g applied in: argo-cd 3.5.6-r1, argo-cd-fips 3.3.7-r2

grafana, argo-cd-fips

vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2

grafana, openbao, temporal-server-fips

Security fix for GHSA-9jj7-4m8r-rfcm applied in: grafana 13.0.0-r0, openbao 2.5.4-r1, temporal-server-fips 1.31.1-r1

renovate, renovate

KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web

renovate, renovate, renovate

traverse (npm) versions 0

renovate, renovate

Security fix for GHSA-r4xh-jqrq-34v2 applied in: renovate 43.181.2-r1, renovate 44.152.0-r1

renovate, renovate, renovate

vulnerability was determined in postcss-selector-parser up to 6

argo-workflows, argo-workflows, argo-workflows, renovate, renovate, renovate, renovate

Picomatch is a glob matcher written JavaScript

argo-workflows, argo-workflows, argo-workflows, renovate, renovate

js-yaml is a JavaScript YAML parser and dumper

renovate, renovate

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

dompurify

TuxCare security update for dompurify (1 CVE)

renovate, renovate, renovate, renovate

sigstore-js provides JavaScript libraries for interacting with Sigstore services

temporal-server, temporal-server, temporal-server, temporal-server

Security fix for GHSA-p2gr-hm8g-q772 applied in: temporal-server 1.31.1-r1, temporal-server 1.31.1-r2, temporal-server 1.31.1-r3, temporal-server 1.31.1-r4

renovate

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

renovate, renovate, renovate

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

temporal-server, temporal-server, temporal-server, temporal-server

Security fix for GHSA-hmhp-gh8m-c8xp applied in: temporal-server 1.31.1-r1, temporal-server 1.31.1-r2, temporal-server 1.31.1-r3, temporal-server 1.31.1-r4

renovate, renovate

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

renovate, renovate, renovate

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

renovate, renovate, renovate

brace-expansion library generates arbitrary strings containing a common prefix and suffix

renovate, renovate, renovate, renovate, renovate

sigstore-js provides JavaScript libraries for interacting with Sigstore services

renovate

node-tar is a full-featured Tar for Node

temporal-server, temporal-server, temporal-server, temporal-server

When frontend

temporal-server, temporal-server, temporal-server, temporal-server

When system

github.com/klauspost/compress, rootio-github.com/klauspost/compress

CVE-2026-63209 in github.com/klauspost/compress - Patched by Root

org.springframework:spring-core, org.springframework:spring-web, io.root.org.springframework:spring-core, io.root.org.springframework:spring-web

AIKIDO-2026-11158 in org.springframework:spring-core - Patched by Root

org.springframework:spring-core, io.root.org.springframework:spring-core

CVE-2021-22060 in org.springframework:spring-core - Patched by Root

org.springframework:spring-core, io.root.org.springframework:spring-core

CVE-2025-41249 in org.springframework:spring-core - Patched by Root

re2js, @rootio/re2js

CVE-2026-116795 in re2js - Patched by Root

prometheus-alertmanager

HashiCorp memberlist before version 0

@intlify/shared, @intlify/core-base, vue-i18n, @rootio/intlify__shared, @rootio/intlify__core-base, @rootio/vue-i18n

CVE-2026-118257 in @intlify/shared - Patched by Root

tensorflow-gpu-jupyter, tensorflow-gpu-jupyter

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4

tensorflow-gpu-jupyter, tensorflow-gpu-jupyter

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4

renovate

Babel is a compiler for writing next generation JavaScript

renovate

node-re2 provides RE2 regular expression bindings for Node

renovate

Handlebars provides the power necessary to let users build semantic templates

renovate

baseline-browser-mapping 2

renovate

Security fix for GHSA-253c-mchw-3w2r applied in: renovate 43.181.2-r1

renovate

markdown-it is a Markdown parser

renovate

### Summary `qs

renovate

### Summary When `qs

renovate

### Summary `qs