Open Source Vulnerabilities

openvpn

OpenVPN 2

gnutls

vulnerability was found in GnuTLS

openvpn

Use after free in OpenVPN version 2

gnutls

vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1

openvpn

Using the --fragment option in certain configuration setups OpenVPN version 2

gnutls

flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted

openvpn

OpenVPN from 2

gnutls

flaw was found in GnuTLS

openvpn

OpenVPN before 2

openvpn

Improper validation of source IP addresses in OpenVPN version 2

openvpn

OpenVPN version 2

coreutils

In GNU Coreutils through 8

coreutils

flaw was found in the GNU coreutils "split" program

step-cli, nats-server-config-reloader-fips, gatekeeper, gatekeeper-fips, nats-server-config-reloader-fips, nats-server-fips, newrelic-k8s-metadata-injection, nats-server-fips, kyverno-policy-reporter-ui-fips, cloudflared

During the TLS 1

py3-tqdm

tqdm is an open source progress bar for Python and CLI

nss

When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead

nss

cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content

nss

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur

nettle

flaw was found in Nettle in versions before 3

cairo

cairo 1

nettle

flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext

cairo

flaw was found in cairo's image-compositor

cairo

issue was discovered in cairo 1

kyverno-policy-reporter-ui-fips, kyverno-policy-reporter-ui-fips, kyverno-policy-reporter-ui-fips, cloudflared

Security fix for GHSA-mqqf-5wvp-8fh8 applied in: kyverno-policy-reporter-ui-fips 2.5.1-r0, kyverno-policy-reporter-ui-fips 2.3.10-r0, kyverno-policy-reporter-ui-fips 2.4.4-r2, cloudflared 2025.11.1-r2

nss

flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3

nss

flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1

aspell

libaspell

nss

NSS (Network Security Services) versions prior to 3

aspell

objstack in GNU Aspell 0

nodetaint, opentofu

tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing

curl

In libexpat before 2

nss

NSS was susceptible to a timing side-channel attack when performing RSA decryption

nodetaint, opentofu

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component

curl

In libexpat before 2

kyverno-policy-reporter-ui, opentofu

golang-jwt is a Go implementation of JSON Web Tokens

curl

1

opentofu

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

curl

curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as the specification says

opentofu

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys

opentofu, opentofu

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries

opentofu, opentofu

xz is a pure golang package for reading and writing xz-compressed files

kyverno-policy-reporter-ui, opentofu, opentofu

flaw was found in github

nodetaint, promu, opentofu, opentofu

attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing

gatekeeper-fips, grafana, grafana, minio, gatekeeper, grafana, grafana, grafana, grafana, grafana, grafana, grafana, grafana, opentofu, opentofu

OpenTelemetry-Go is the Go implementation of OpenTelemetry

opentofu, opentofu

flaw was found in CIRCL's implementation of the FourQ elliptic curve

grafana, grafana, grafana, grafana, grafana, grafana, grafana, grafana, grafana, opentofu, opentofu

CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

dotnet-9

Security fix for GHSA-w3q9-fxm7-j8fq applied in: dotnet-9 9.0.113-r1

dotnet-9

Security fix for GHSA-h4j7-5rxr-p4wc applied in: dotnet-9 9.0.113-r1

python3

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427

dotnet-9

External control of file name or path in