Open Source Vulnerabilities

renovate, renovate

brace-expansion library generates arbitrary strings containing a common prefix and suffix

argo-workflows, argo-workflows, renovate, renovate

brace-expansion library generates arbitrary strings containing a common prefix and suffix

wso2is

incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers

renovate, renovate

brace-expansion library generates arbitrary strings containing a common prefix and suffix

renovate, renovate

brace-expansion library generates arbitrary strings containing a common prefix and suffix

renovate, renovate

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority

wso2is

username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled

sonarqube, gradle, wso2is

non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters)

flux-fips-2.10

flux-fips-2.10

flux-fips-2.10

gradle, gradle

In Eclipse JGit versions 7

renovate

node-tar is a tar archive manipulation library for Node

flux-fips-2.10

flux-fips-2.10

flux-fips-2.10

gradle

security flaw has been discovered in mwiede jsch up to 2

sonarqube, gradle

Improper certificate validation in Apache MINA SSHD (server-side)

gradle, spark-sc213-jdk17-py312, gradle

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

argo-workflows

ws is an open source WebSocket client and server for Node

argo-workflows

Security fix for GHSA-ppp5-5v6c-4jwp applied in: argo-workflows 3.7.16-r1

argo-workflows

Security fix for GHSA-2328-f5f3-gj25 applied in: argo-workflows 3.7.16-r1

argo-workflows

Security fix for GHSA-q67f-28xg-22rw applied in: argo-workflows 3.7.16-r1

argo-workflows

cookie is a basic HTTP cookie parser and serializer for HTTP servers

argo-workflows

Security fix for GHSA-76c9-3jph-rj3q applied in: argo-workflows 3.7.16-r2

argo-workflows

Security fix for GHSA-fv7c-fp4j-7gwp applied in: argo-workflows 3.7.16-r2

argo-workflows

Security fix for GHSA-mx8g-39q3-5c79 applied in: argo-workflows 3.7.16-r2

argo-workflows

Security fix for GHSA-79cf-xcqc-c78w applied in: argo-workflows 3.7.16-r2

argo-workflows

Security fix for GHSA-xxjr-mmjv-4gpg applied in: argo-workflows 3.7.16-r2

argo-workflows

Immutable

argo-workflows

Immutable

argo-workflows, argo-workflows

fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization

argo-workflows, argo-workflows

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions

argo-workflows, argo-workflows

jsdiff is a JavaScript text differencing implementation

argo-workflows, argo-workflows

Versions of the package cross-spawn before 6

argo-workflows

NPM package `braces`, versions prior to 3

argo-workflows, argo-workflows

vulnerability was found in juliangruber brace-expansion up to 1

argo-workflows, argo-workflows

ajv (Another JSON Schema Validator) before 8

argo-workflows, argo-workflows

Babel is a compiler for writing next generation JavaScript

argo-workflows, argo-workflows

Security fix for GHSA-r4q5-vmmm-2653 applied in: argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-67mh-4wv8-2f99 applied in: argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-5c6j-r48x-rmvq applied in: argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Versions of the package @tootallnate/once before 3

argo-workflows, argo-workflows

Security fix for GHSA-vpq2-c234-7xj6 applied in: argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-v6h2-p8h4-qcjw applied in: argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-h67p-54hq-rp68 applied in: argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows

Security fix for GHSA-73rr-hh4g-fpgx applied in: argo-workflows 3.7.17-r0

argo-workflows

Security fix for GHSA-v2hh-gcrm-f6hx applied in: argo-workflows 3.7.17-r0

argo-workflows

Security fix for GHSA-mp7j-qc5w-4988 applied in: argo-workflows 3.7.17-r0

argo-workflows

Security fix for GHSA-3jxr-9vmj-r5cp applied in: argo-workflows 3.7.17-r0