Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    renovate

    Summary

    Security fix for GHSA-rcw4-f5rp-g42v applied in: renovate 43.181.2-r1

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Security fix for GHSA-8238-w5pm-2374 applied in: renovate 43.181.2-r1

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    adm-zip is a JavaScript library for creating and extracting ZIP archives in Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    adm-zip before 0

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    adm-zip is a JavaScript library for creating and extracting ZIP archives in Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    adm-zip 0

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    adm-zip versions 0

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Vitest is a testing framework powered by Vite

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    simple-git, an interface for running git commands in any node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    simple-git, an interface for running git commands in any node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    simple-git, an interface for running git commands in any node

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, renovate

    Summary

    shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    JSONata is a JSON query and transformation language

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    JSONata is a JSON query and transformation language

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    JSONata is a JSON query and transformation language

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Handlebars provides the power necessary to let users build semantic templates

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Handlebars provides the power necessary to let users build semantic templates

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    simple-git, an interface for running git commands in any node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Security fix for GHSA-g7r4-m6w7-qqqr applied in: renovate 43.181.2-r1

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Vitest is a testing framework powered by Vite

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    Security fix for GHSA-5p4m-2wfm-xmqj applied in: renovate 43.181.2-r1

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    js-yaml is a JavaScript YAML parser and dumper

    Published
    30 Oct 2026
    Packages

    argo-workflows, renovate

    Summary

    js-yaml is a JavaScript YAML parser and dumper

    Published
    30 Oct 2026
    Packages

    renovate, renovate, renovate, renovate

    Summary

    Versions of the package pacote from 11

    Published
    30 Oct 2026
    Packages

    renovate, renovate

    Summary

    http-cache-semantics through 4

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    renovate, renovate, renovate, renovate

    Summary

    sigstore-js provides JavaScript libraries for interacting with Sigstore services

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    jupyterhub-k8s-hub

    Summary

    PyJWT is a Python implementation of JSON Web Token standards

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici's WebSocket client crashes the whole Node

    Published
    30 Oct 2026
    Packages

    renovate

    Summary

    undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still ...

    Published
    30 Oct 2026
    Packages

    renovate, renovate

    Summary

    ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

    Published
    30 Oct 2026
    Packages

    renovate, renovate, renovate

    Summary

    PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it

    Published
    30 Oct 2026
    Packages

    argo-workflows, argo-workflows, argo-workflows, renovate, renovate, renovate

    Summary

    Picomatch is a glob matcher written JavaScript

    Published
    30 Oct 2026
    Packages

    grafana

    Summary

    TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash

    Published
    30 Oct 2026
    Packages

    keda, keda

    Summary

    amqp091-go is a Go AMQP 0

    Published
    30 Oct 2026
    Packages

    argo-workflows, renovate, renovate

    Summary

    brace-expansion through 5

    Published
    30 Oct 2026
    Packages

    renovate, renovate

    Summary

    brace-expansion library generates arbitrary strings containing a common prefix and suffix

    Published
    30 Oct 2026
    Packages

    renovate, renovate

    Summary

    brace-expansion through 5

    Published
    30 Oct 2026
    Packages

    wso2am, wso2is

    Summary

    Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" configuration option

    Published
    30 Oct 2026