Open Source Vulnerabilities

awx

argo-workflows

Security fix for GHSA-52cp-r559-cp3m applied in: argo-workflows 3.7.17-r0

argo-workflows

Security fix for GHSA-4c8g-83qw-93j6 applied in: argo-workflows 3.7.17-r0

argo-workflows

Security fix for GHSA-v56q-mh7h-f735 applied in: argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

webpack-dev-server versions up to and including 5

argo-workflows

Security fix for GHSA-xvcm-6775-5m9r applied in: argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

webpack-dev-server allows users to use webpack with a development server that provides live reloading

argo-workflows, argo-workflows

webpack-dev-server allows users to use webpack with a development server that provides live reloading

argo-workflows, argo-workflows

Impact: When a user-configured proxy on webpack-dev-server has a broad context (e

argo-workflows, argo-workflows

Serialize JavaScript to a superset of JSON that includes regular expressions and functions

argo-workflows, argo-workflows

ws is an open source WebSocket client and server for Node

argo-workflows

websocket-driver is a WebSocket protocol handler with pluggable I/O

argo-workflows, argo-workflows

path-to-regexp turns path strings into a regular expressions

argo-workflows

websocket-driver is a WebSocket protocol handler with pluggable I/O

argo-workflows, argo-workflows

Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (

argo-workflows, argo-workflows, argo-workflows

Webpack is a module bundler

argo-workflows, argo-workflows

on-headers is a node

argo-workflows, argo-workflows, argo-workflows

Webpack is a module bundler

argo-workflows, argo-workflows

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

argo-workflows, argo-workflows

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

argo-workflows, argo-workflows

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

argo-workflows, argo-workflows

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

argo-workflows, argo-workflows, argo-workflows

path-to-regexp turns path strings into a regular expressions

argo-workflows, argo-workflows

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

argo-workflows, argo-workflows

interpretation-conflict (CWE-436) vulnerability in node-forge versions 1

argo-workflows, argo-workflows

Security fix for GHSA-38r7-794h-5758 applied in: argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript

argo-workflows, argo-workflows

Security fix for GHSA-8fgc-7cc6-rx7x applied in: argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows, argo-workflows

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

argo-workflows

Security fix for GHSA-v39h-62p7-jpjc applied in: argo-workflows 3.7.16-r1

sonarqube, elasticsearch, elasticsearch

In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials

argo-workflows, argo-workflows, argo-workflows

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

argo-workflows

Security fix for GHSA-xv26-6w52-cph6 applied in: argo-workflows 3.7.17-r0

argo-workflows, argo-workflows, argo-workflows

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects

argo-workflows, argo-workflows, argo-workflows

NPM package `micromatch` prior to 4

argo-workflows, argo-workflows

Lodash versions 4

argo-workflows, argo-workflows

Impact: Lodash versions 4

argo-workflows, argo-workflows

Impact: The fix for CVE-2021-23337 (https://github

elasticsearch, elasticsearch

Security fix for GHSA-558v-64gr-wgg4 applied in: elasticsearch 9.4.4-r1

argo-workflows, argo-workflows

launch-editor allows users to open files with line numbers in editor from Node

elasticsearch, elasticsearch

Security fix for GHSA-5jmj-h7xm-6q6v applied in: elasticsearch 9.4.4-r1

argo-workflows, argo-workflows, argo-workflows

js-yaml is a JavaScript YAML parser and dumper

elasticsearch, elasticsearch

Security fix for GHSA-5gvw-p9qm-jgwh applied in: elasticsearch 9.4.4-r1

elasticsearch, elasticsearch

Security fix for GHSA-hgj6-7826-r7m5 applied in: elasticsearch 9.4.4-r1

argo-workflows, argo-workflows, argo-workflows

Immutable

elasticsearch, elasticsearch

Security fix for GHSA-3pjw-73gf-8qr5 applied in: elasticsearch 9.4.4-r1

argo-workflows, argo-workflows

http-proxy-middleware is node

elasticsearch, elasticsearch

Security fix for GHSA-j3rv-43j4-c7qm applied in: elasticsearch 9.4.4-r1

keycloak

In Eclipse Vert

argo-workflows, argo-workflows, argo-workflows

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP)