Open Source Vulnerabilities

sonarqube

yawkat LZ4 Java provides LZ4 compression for Java

sonarqube

yawkat LZ4 Java provides LZ4 compression for Java

sonarqube

yawkat LZ4 Java provides LZ4 compression for Java

sonarqube

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

sonarqube

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

sonarqube

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA

sonarqube, sonarqube

Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795

kubernetes

Security fix for GHSA-cgrx-mc8f-2prm applied in: kubernetes 1.34.10-r1

kubernetes

runc is a CLI tool for spawning and running containers according to the OCI specification

sonarqube

NumberInput

golang.org/x/mod, rootio-golang.org/x/mod

CVE-2026-56864 in golang.org/x/mod - Patched by Root

golang.org/x/mod, rootio-golang.org/x/mod

CVE-2026-56865 in golang.org/x/mod - Patched by Root

sonarqube

jackson-databind's deserializer for java

imagemagick, rootio-imagemagick

CVE-2026-62343 in imagemagick - Patched by Root

imagemagick, rootio-imagemagick

CVE-2026-62363 in imagemagick - Patched by Root

imagemagick, rootio-imagemagick

CVE-2026-62946 in imagemagick - Patched by Root

imagemagick, rootio-imagemagick

CVE-2026-64685 in imagemagick - Patched by Root

imagemagick, rootio-imagemagick

CVE-2026-86420 in imagemagick - Patched by Root

sonarqube

DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator

kubernetes, kubernetes

Security fix for GHSA-x744-4wpc-v9h2 applied in: kubernetes 1.34.10-r1, kubernetes 1.34.10-r2

sonarqube

jackson-databind binds a JSON string to a javax

sonarqube, sonarqube

Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

sonarqube, sonarqube

TypeDeserializerBase

sonarqube

Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

kubernetes

html

velero

golang-jwt is a Go implementation of JSON Web Tokens

kubernetes

html

velero

Security fix for GHSA-mh63-6h87-95cp applied in: velero 1.15.2-r1

kubernetes, kubernetes, velero, velero, velero, velero, velero, velero, velero, trust-manager

norm

kubernetes

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

librsvg

Security update for librsvg

kubernetes

Security fix for GHSA-9h8m-3fm2-qjrq applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-hfvc-g4fc-pqhx applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-p77j-4mvh-x3m3 applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-5cv4-jp36-h3mw applied in: kubernetes 1.34.10-r2

trust-manager, velero, velero, velero, velero, velero, velero

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

kubernetes

Security fix for GHSA-qpw4-5x99-6vjp applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-9m57-25v3-79x9 applied in: kubernetes 1.34.10-r2

trust-manager, velero, velero, velero, velero, velero, velero, velero

On Unix systems, opening a file in an os

kubernetes

Security fix for GHSA-45gg-vh54-h5m9 applied in: kubernetes 1.34.10-r2

kubernetes, kubernetes, kubernetes, kubernetes, trust-manager

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

kubernetes

Security fix for GHSA-78mq-xcr3-xm33 applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-f6x5-jh6r-wrfv applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-q4h4-gmj2-qvw2 applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-j5w8-q4qc-rx2x applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-w879-237q-wc7r applied in: kubernetes 1.34.10-r2

kubernetes

OpenTelemetry-Go is the Go implementation of OpenTelemetry

kubernetes

Security fix for GHSA-jppx-rxg9-jmrx applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-89gr-r52h-f8rx applied in: kubernetes 1.34.10-r2

kubernetes

Security fix for GHSA-x527-x647-q7gg applied in: kubernetes 1.34.10-r2