Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    sonarqube

    Summary

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    UTF8DataInputJsonParser

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    NumberInput

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    jackson-databind's deserializer for java

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    jackson-databind binds a JSON string to a javax

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    TypeDeserializerBase

    Published
    30 Oct 2026
    Packages

    sonarqube

    Summary

    Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

    Published
    30 Oct 2026
    CGA-h252-46qx-phg9
    Fix available
    Packages

    verticadb-operator-fips

    Summary

    Published
    30 Oct 2026
    Packages

    litellm-database

    Summary

    Security fix for GHSA-7gcm-g887-7qv7 applied in: litellm-database 1.103.9-r3

    Published
    30 Oct 2026
    Packages

    litellm-database, litellm-database

    Summary

    denial-of-service (DoS) vulnerability exists in google

    Published
    30 Oct 2026
    Packages

    argo-cd

    Summary

    Security fix for GHSA-8wmf-6v46-5gfg applied in: argo-cd 3.5.6-r2

    Published
    30 Oct 2026
    Packages

    argo-cd

    Summary

    OpenTelemetry-Go is the Go implementation of OpenTelemetry

    Published
    30 Oct 2026
    CGA-27h3-rw5j-8fh4
    Fix available
    Packages

    crossplane-2.2, crossplane-2.2

    Summary

    Published
    30 Oct 2026
    CGA-6jxr-cwv6-5wq5
    Fix available
    Packages

    crossplane-2.2, crossplane-2.2

    Summary

    Published
    30 Oct 2026
    CGA-rf7j-49q5-wgxj
    Fix available
    Packages

    nushell, nushell

    Summary

    Published
    30 Oct 2026
    CGA-hph4-xfjg-9wc5
    No fix available
    Packages

    linux-qemu-6.18-headers

    Summary

    Published
    30 Oct 2026
    CGA-rfmx-w4c5-p5gw
    No fix available
    Packages

    tekton-pipelines-events-fips-1.11

    Summary

    Published
    30 Oct 2026
    CGA-pvqh-f47g-w9g5
    Fix available
    Packages

    tekton-pipelines-controller-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-qm5x-85rw-hjhm
    Fix available
    Packages

    tekton-pipelines-controller-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-3jvh-864h-48jr
    No fix available
    Packages

    reports-server

    Summary

    Published
    30 Oct 2026
    CGA-wxpj-4543-83fp
    Fix available
    Packages

    tekton-pipelines-controller-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-v82v-xc69-3vvg
    Fix available
    Packages

    reports-server

    Summary

    Published
    30 Oct 2026
    CGA-hvw4-6fxh-grqc
    Fix available
    Packages

    reports-server

    Summary

    Published
    30 Oct 2026
    CGA-34f9-vprr-q2qj
    No fix available
    Packages

    reports-server

    Summary

    Published
    30 Oct 2026
    CGA-g7rg-23f2-jfhr
    No fix available
    Packages

    knative-eventing-1.23-mtchannel-broker

    Summary

    Published
    30 Oct 2026
    CGA-rxfv-4ghg-vp96
    No fix available
    Packages

    knative-eventing-1.23-mtchannel-broker

    Summary

    Published
    30 Oct 2026
    CGA-587p-7cc5-h99c
    Fix available
    Packages

    automq

    Summary

    Published
    30 Oct 2026
    CGA-4p5p-284c-gwwc
    No fix available
    Packages

    harvester-fips

    Summary

    Published
    30 Oct 2026
    CGA-72m8-gm5c-w73h
    No fix available
    Packages

    harvester-fips

    Summary

    Published
    30 Oct 2026
    CGA-x989-v9gj-8rm8
    Fix available
    Packages

    crossplane-2.2-crank, crossplane-2.2-crank

    Summary

    Published
    30 Oct 2026
    CGA-562p-jf9h-753h
    Fix available
    Packages

    crossplane-2.2-crank, crossplane-2.2-crank

    Summary

    Published
    30 Oct 2026
    CGA-3v7g-8frj-c68h
    Fix available
    Packages

    tekton-pipelines-entrypoint-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-qmh2-f596-fgj5
    Fix available
    Packages

    tekton-pipelines-entrypoint-fips-1.18

    Summary

    Published
    30 Oct 2026
    CGA-h8cj-fwq9-j6qr
    Fix available
    Packages

    pixi, pixi

    Summary

    Published
    30 Oct 2026
    CGA-cf8c-p7jh-9xqf
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-9jrc-pq29-x89j
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-q94f-9vw7-q4v2
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-hw2w-hgg4-2jpf
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-hf4w-m7m4-35r2
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-wxmp-275r-6mqm
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-722p-qmrp-v5h6
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-29j9-248m-p4v2
    No fix available
    Packages

    eco-nodejs-24.18.0

    Summary

    Published
    30 Oct 2026
    CGA-69m4-x96c-34fx
    Fix available
    Packages

    spark-4.1-scala-2.13, spark-4.1-scala-2.13

    Summary

    Published
    30 Oct 2026
    CGA-wjh2-cfr2-76h4
    Fix available
    Packages

    consul-fips-2.0

    Summary

    Published
    30 Oct 2026
    CGA-2rgh-xp96-2hqr
    Fix available
    Packages

    consul-fips-2.0

    Summary

    Published
    30 Oct 2026
    CGA-cr68-285q-pxf9
    No fix available
    Packages

    consul-fips-2.0

    Summary

    Published
    30 Oct 2026
    CGA-j94p-83vf-47vc
    No fix available
    Packages

    consul-fips-2.0

    Summary

    Published
    30 Oct 2026