Open Source Vulnerabilities

elasticsearch, elasticsearch

Security fix for GHSA-rmj7-2vxq-3g9f applied in: elasticsearch 9.4.4-r1

keycloak

In Eclipse Vert

argo-workflows, argo-workflows, argo-workflows

form-data is a library for creating readable multipart/form-data streams

argo-workflows, argo-workflows, argo-workflows

flatted is a circular JSON parser

prometheus, prometheus

Security fix for GHSA-2464-8j7c-4cjm applied in: prometheus 3.5.3-r11, prometheus 3.5.3-r12

argo-workflows, argo-workflows, argo-workflows

flatted is a circular JSON parser

argo-workflows, argo-workflows

Security fix for GHSA-2g4f-4pwh-qvx6 applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows

Security fix for GHSA-4v9v-hfq4-rm2v applied in: argo-workflows 3.7.15-r0

argo-workflows, argo-workflows

Security fix for GHSA-58qx-3vcg-4xpx applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows

Security fix for GHSA-pxg6-pf52-xh8x applied in: argo-workflows 3.7.15-r0

argo-workflows, go

archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations

argo-workflows, argo-workflows

Security fix for GHSA-f886-m6hf-6m8v applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows, argo-workflows

Security fix for GHSA-hmw2-7cc7-3qxx applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows

certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain

argo-workflows, argo-workflows

Security fix for GHSA-qj8w-gfj5-8c6v applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.17-r0

keycloak

Netty is an asynchronous, event-driven network application framework

argo-workflows

Security fix for GHSA-968p-4wvh-cqc8 applied in: argo-workflows 3.7.15-r0

argo-workflows, argo-workflows

Security fix for GHSA-5m6q-g25r-mvwx applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

elasticsearch, elasticsearch

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-q3j6-qgpj-74h6 applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1, argo-workflows 3.7.17-r0

spark-sc213-jdk17-py312, elasticsearch, elasticsearch

Netty is an asynchronous, event-driven network application framework

argo-workflows, argo-workflows

Security fix for GHSA-554w-wpv2-vw27 applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows, argo-workflows

Security fix for GHSA-3v7f-55p6-f55p applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.17-r0

python-CairoSVG, python-CairoSVG, python-CairoSVG, python-CairoSVG, python-CairoSVG, python-CairoSVG, python-CairoSVG, python-CairoSVG, python-CairoSVG, python-CairoSVG, python-CairoSVG

Security update for python-CairoSVG

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-c2c7-rcm5-vvqj applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-37ch-88jc-xwx2 applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-96hv-2xvq-fx4p applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-c27g-q93r-2cwf applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-25h7-pfq9-p65f applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-23c5-xmqv-rm74 applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-7r86-cg39-jmmj applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-3ppc-4f35-3m26 applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-wf6x-7x77-mvgw applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-w7jw-789q-3m8p applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r2

argo-workflows, argo-workflows

Security fix for GHSA-5gfm-wpxj-wjgq applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r1

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-rf6f-7fwh-wjgh applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-rhx6-c78j-4q9w applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r2

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-3xgq-45jj-v275 applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-9wv6-86v2-598j applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-952p-6rrq-rcjv applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows

Security fix for GHSA-r5fr-rjxr-66jc applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r2

argo-workflows, argo-workflows

Security fix for GHSA-grv7-fg5c-xmjg applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.17-r0

argo-workflows, argo-workflows, argo-workflows

Security fix for GHSA-fjxv-7rqg-78g4 applied in: argo-workflows 3.7.15-r0, argo-workflows 3.7.16-r2, argo-workflows 3.7.17-r0

argo-workflows, go

When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http

argo-workflows, argo-workflows

net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

argo-workflows, argo-workflows, go

When parsing a multipart form (either explicitly with Request

argo-workflows, argo-workflows, go

ParseAddressList function incorrectly handles comments (text within parentheses) within display names

argo-workflows, argo-workflows

Command go env is documented as outputting a shell script containing the Go environment

argo-workflows, argo-workflows, go

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

argo-workflows, argo-workflows, go

Calling Decoder