Open Source Vulnerabilities
gitlab-kas-19.2, gitlab-kas-19.2
datadog-agent-7.80, datadog-agent-7.80
datadog-agent-7.80, datadog-agent-7.80
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
com.fasterxml.jackson.core:jackson-databind
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
symfony/http-client
TuxCare security update for symfony/http-client (1 CVE)
symfony/http-client
TuxCare security update for symfony/http-client (1 CVE)
knative-eventing-1.24-channel-controller
knative-eventing-1.24-channel-controller
knative-eventing-1.24-channel-controller
knative-eventing-1.24-channel-controller
knative-eventing-fips-1.24-jobsink
knative-eventing-fips-1.24-jobsink
knative-eventing-fips-1.24-jobsink
knative-eventing-fips-1.24-jobsink
neuvector-sigstore-interface, neuvector-sigstore-interface
neuvector-sigstore-interface/ neuvector-sigstore-interface
knative-eventing-fips-1.24-webhook
knative-eventing-fips-1.24-webhook
knative-eventing-fips-1.24-webhook
knative-eventing-fips-1.24-webhook
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
cilium-1.19-operator-aws, cilium-1.19-operator-aws
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
Echo: WebSocket proxy can retain connections and handlers after client disconnect
Echo: WebSocket proxy can retain connections and handlers after client disconnect
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename
Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication
EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
EspoCRM before 9.3.11 and 10.0.8 Unauthenticated Denial of Service via Password-Redaction Regex
ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard
ToolJet 3.20.2-lts before 3.20.242-lts Signup Bypass via SignupDisableGuard
MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads
MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads
MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware
go-chi chi before 5.5.0 Authentication Bypass via SupressNotFound Middleware
SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias
SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias
n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger
n8n before 1.123.83, 2.41.4, and 2.42.1 Slack Token Exfiltration via Slack Trigger
n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction
n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction
argo-cd-3.2-compat, argo-cd-3.2-compat
n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass
n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass
