Open Source Vulnerabilities

vgmstream txth-txtp txth.c sscanf stack-based overflow

java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources

java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control

kubernetes

etcd is a distributed key-value store for the data of a distributed system

step

gRPC-Go is the Go language implementation of gRPC

victoriametrics-operator-fips

Previously, a channel registered in the mux's chanList is not usable until it is established

cert-manager

OpenTelemetry-Go is the Go implementation of OpenTelemetry

langfuse

Hono is a Web application framework that provides support for any JavaScript runtime

aws-network-policy-agent

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

dynatrace-operator

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

trust-manager

Previously, a channel registered in the mux's chanList is not usable until it is established

git-lfs

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

dynatrace-operator

malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption

dynatrace-operator

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

dynatrace-operator

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

step

gRPC-Go is the Go language implementation of gRPC

step-issuer

Previously, a channel registered in the mux's chanList is not usable until it is established

step-issuer

Previously, a channel registered in the mux's chanList is not usable until it is established

vault-k8s

Previously, a channel registered in the mux's chanList is not usable until it is established

sealed-secrets

Previously, a channel registered in the mux's chanList is not usable until it is established

step

gRPC-Go is the Go language implementation of gRPC

sealed-secrets

Previously, a channel registered in the mux's chanList is not usable until it is established

external-secrets-operator

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

helm-operator

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

helm-operator

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

istio

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

istio

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

elasticsearch

yawkat LZ4 Java provides LZ4 compression for Java

npm

brace-expansion through 5

rancher-fleet-agent

Helm is a package manager for Charts for Kubernetes

opentelemetry-collector-contrib

malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

weaviate-fips

HashiCorp memberlist before version 0

weaviate-fips

HashiCorp memberlist before version 0

opentelemetry-collector

source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

solr

Netty is an asynchronous, event-driven network application framework

Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

usage_rules,

Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata

389-ds-base, 389-ds-base-bdb, 389-ds-base-devel, 389-ds-base-libs, 389-ds-base-snmp, python3-lib389

Critical: 389-ds-base security, bug fix, and enhancement update

kernel, kernel-64k, kernel-64k-core, kernel-64k-debug, kernel-64k-debug-core, kernel-64k-debug-devel, kernel-64k-debug-devel-matched, kernel-64k-debug-modules, kernel-64k-debug-modules-core, kernel-64k-debug-modules-extra, kernel-64k-devel, kernel-64k-devel-matched, kernel-64k-modules, kernel-64k-modules-core, kernel-64k-modules-extra, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-devel-matched, kernel-debug-modules, kernel-debug-modules-core, kernel-debug-modules-extra, kernel-debug-uki-virt, kernel-devel, kernel-devel-matched, kernel-doc, kernel-headers, kernel-modules, kernel-modules-core, kernel-modules-extra, kernel-modules-extra-matched, kernel-rt, kernel-rt-64k, kernel-rt-64k-core, kernel-rt-64k-debug, kernel-rt-64k-debug-core, kernel-rt-64k-debug-devel, kernel-rt-64k-debug-modules, kernel-rt-64k-debug-modules-core, kernel-rt-64k-debug-modules-extra, kernel-rt-64k-devel, kernel-rt-64k-modules, kernel-rt-64k-modules-core, kernel-rt-64k-modules-extra, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-core, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-core, kernel-rt-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-uki-virt, kernel-uki-virt-addons, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-devel-matched, kernel-zfcpdump-modules, kernel-zfcpdump-modules-core, kernel-zfcpdump-modules-extra, libperf, perf, python3-perf, rtla, rv

Important: kernel security, bug fix, and enhancement update

kernel, kernel-64k, kernel-64k-core, kernel-64k-debug, kernel-64k-debug-core, kernel-64k-debug-devel, kernel-64k-debug-devel-matched, kernel-64k-debug-modules, kernel-64k-debug-modules-core, kernel-64k-debug-modules-extra, kernel-64k-devel, kernel-64k-devel-matched, kernel-64k-modules, kernel-64k-modules-core, kernel-64k-modules-extra, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-devel-matched, kernel-debug-modules, kernel-debug-modules-core, kernel-debug-modules-extra, kernel-debug-uki-virt, kernel-devel, kernel-devel-matched, kernel-doc, kernel-headers, kernel-modules, kernel-modules-core, kernel-modules-extra, kernel-rt, kernel-rt-64k, kernel-rt-64k-core, kernel-rt-64k-debug, kernel-rt-64k-debug-core, kernel-rt-64k-debug-devel, kernel-rt-64k-debug-modules, kernel-rt-64k-debug-modules-core, kernel-rt-64k-debug-modules-extra, kernel-rt-64k-devel, kernel-rt-64k-modules, kernel-rt-64k-modules-core, kernel-rt-64k-modules-extra, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-core, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-core, kernel-rt-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-uki-virt, kernel-uki-virt-addons, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-devel-matched, kernel-zfcpdump-modules, kernel-zfcpdump-modules-core, kernel-zfcpdump-modules-extra, libperf, perf, python3-perf, rtla, rv

Important: kernel security update

dotnet7

dotnet7

dotnet7

dotnet6, dotnet7, dotnet8, dotnet10, dotnet8, dotnet10

gpsd-minimal, gpsd-minimal-clients

Important: gpsd-minimal security update

opentelemetry-collector

Important: opentelemetry-collector security update

opentelemetry-collector

Important: opentelemetry-collector security update

dotnet6, dotnet7, dotnet10, dotnet10

dotnet7