Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    sonarqube

    Summary

    Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    UTF8DataInputJsonParser

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    NumberInput

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    jackson-databind's deserializer for java

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    jackson-databind binds a JSON string to a javax

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    TypeDeserializerBase

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

    Published
    30 Oct 2026
    CGA-h252-46qx-phg9
    Fix available
    Packages

    verticadb-operator-fips

    Summary

    Published
    30 Oct 2026
    Packages

    litellm-database

    Summary

    Security fix for GHSA-7gcm-g887-7qv7 applied in: litellm-database 1.103.9-r3

    Published
    30 Oct 2026
    Packages

    litellm-database, litellm-database

    Summary

    denial-of-service (DoS) vulnerability exists in google

    Published
    30 Oct 2026
    Packages

    argo-cd

    Summary

    Security fix for GHSA-8wmf-6v46-5gfg applied in: argo-cd 3.5.6-r2

    Published
    30 Oct 2026
    Packages

    argo-cd

    Summary

    OpenTelemetry-Go is the Go implementation of OpenTelemetry

    Published
    30 Oct 2026
    CGA-27h3-rw5j-8fh4
    Fix available
    Packages

    crossplane-2.2, crossplane-2.2

    Summary

    Published
    30 Oct 2026
    CGA-6jxr-cwv6-5wq5
    Fix available
    Packages

    crossplane-2.2, crossplane-2.2

    Summary

    Published
    30 Oct 2026
    CGA-rf7j-49q5-wgxj
    Fix available
    Packages

    nushell, nushell

    Summary

    Published
    30 Oct 2026
    CGA-hph4-xfjg-9wc5
    No fix available
    Packages

    linux-qemu-6.18-headers

    Summary

    Published
    30 Oct 2026
    CGA-rfmx-w4c5-p5gw
    No fix available
    Packages

    tekton-pipelines-events-fips-1.11

    Summary

    Published
    30 Oct 2026
    CGA-pvqh-f47g-w9g5
    Fix available
    Packages

    tekton-pipelines-controller-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-qm5x-85rw-hjhm
    Fix available
    Packages

    tekton-pipelines-controller-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-3jvh-864h-48jr
    No fix available
    Packages

    reports-server

    Summary

    Published
    30 Oct 2026
    CGA-wxpj-4543-83fp
    Fix available
    Packages

    tekton-pipelines-controller-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-v82v-xc69-3vvg
    Fix available
    Packages

    reports-server

    Summary

    Published
    30 Oct 2026
    CGA-hvw4-6fxh-grqc
    Fix available
    Packages

    reports-server

    Summary

    Published
    30 Oct 2026
    CGA-34f9-vprr-q2qj
    No fix available
    Packages

    reports-server

    Summary

    Published
    30 Oct 2026
    CGA-g7rg-23f2-jfhr
    No fix available
    Packages

    knative-eventing-1.23-mtchannel-broker

    Summary

    Published
    30 Oct 2026
    CGA-rxfv-4ghg-vp96
    No fix available
    Packages

    knative-eventing-1.23-mtchannel-broker

    Summary

    Published
    30 Oct 2026
    CGA-587p-7cc5-h99c
    Fix available
    Packages

    automq

    Summary

    Published
    30 Oct 2026
    CGA-4p5p-284c-gwwc
    No fix available
    Packages

    harvester-fips

    Summary

    Published
    30 Oct 2026
    CGA-72m8-gm5c-w73h
    No fix available
    Packages

    harvester-fips

    Summary

    Published
    30 Oct 2026
    CGA-x989-v9gj-8rm8
    Fix available
    Packages

    crossplane-2.2-crank, crossplane-2.2-crank

    Summary

    Published
    30 Oct 2026
    CGA-562p-jf9h-753h
    Fix available
    Packages

    crossplane-2.2-crank, crossplane-2.2-crank

    Summary

    Published
    30 Oct 2026
    CGA-3v7g-8frj-c68h
    Fix available
    Packages

    tekton-pipelines-entrypoint-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-qmh2-f596-fgj5
    Fix available
    Packages

    tekton-pipelines-entrypoint-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-h8cj-fwq9-j6qr
    Fix available
    Packages

    pixi, pixi

    Summary

    Published
    30 Oct 2026
    CGA-cf8c-p7jh-9xqf
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-9jrc-pq29-x89j
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-q94f-9vw7-q4v2
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-hw2w-hgg4-2jpf
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-hf4w-m7m4-35r2
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-wxmp-275r-6mqm
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-722p-qmrp-v5h6
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-29j9-248m-p4v2
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-69m4-x96c-34fx
    Fix available
    Packages

    spark-4.1-scala-2.13, spark-4.1-scala-2.13

    Summary

    Published
    30 Oct 2026
    CGA-wjh2-cfr2-76h4
    Fix available
    Packages

    consul-fips-2.0

    Summary

    Published
    30 Oct 2026
    CGA-2rgh-xp96-2hqr
    Fix available
    Packages

    consul-fips-2.0

    Summary

    Published
    30 Oct 2026
    CGA-cr68-285q-pxf9
    No fix available
    Packages

    consul-fips-2.0

    Summary

    Published
    30 Oct 2026
    CGA-j94p-83vf-47vc
    No fix available
    Packages

    consul-fips-2.0

    Summary

    Published
    30 Oct 2026
    CGA-p3m4-h8xp-pj4q
    No fix available
    Packages

    neuvector-upgrader-fips

    Summary

    Published
    30 Oct 2026