GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: openbao, seaweedfs-rocksdb, opentelemetry-collector, splunk-otel-collector, dagger, flux-kustomize-controller-fips, flux-operator-fips, docker, frankenphp-8.4, spire-server, vault, buildah, buildkitd-fips, external-dns, crossplane-provider-azure-portal, kyverno-fips,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, splunk-otel-collector, opentelemetry-collector, dagger, frankenphp-8.4, docker, spire-server, longhorn-cli-fips, longhorn-manager-fips, vault, external-dns, kyverno-fips, redpanda-console, kine, argocd-image-updater, gatus-fips, act, apply-cve-bump...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: openbao, seaweedfs-rocksdb, opentelemetry-collector, splunk-otel-collector, dagger, flux-kustomize-controller-fips, flux-operator-fips, docker, frankenphp-8.4, spire-server, vault, buildah, buildkitd-fips, external-dns, crossplane-provider-azure-portal, kyverno-fips,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, opentelemetry-collector, frankenphp-8.4, spire-server, vault, external-dns, kyverno-fips, kine, argocd-image-updater, seaweedfs-rocksdb-fips, flux-source-controller, cilium-cli, etcd, argo-cd, flux-fips, prometheus-elasticsearch-exporter, zot,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: openbao, seaweedfs-rocksdb, opentelemetry-collector, crossplane-provider-aws-rds-fips, crossplane-provider-aws-cloudwatchevents, crossplane-provider-aws-scheduler, crossplane-provider-aws-elbv2, elastic-agent, act, crossplane-provider-aws-sqs, atlantis-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: openbao, seaweedfs-rocksdb, opentelemetry-collector, crossplane-provider-aws-rds-fips, crossplane-provider-aws-cloudwatchevents, crossplane-provider-aws-scheduler, crossplane-provider-aws-elbv2, elastic-agent, act, crossplane-provider-aws-sqs, atlantis-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, opentelemetry-collector, dagger, frankenphp-8.4, spire-server, vault, external-dns, kyverno-fips, redpanda-console, kine, argocd-image-updater, act, apply-cve-bump, flux-source-controller, cilium-cli, etcd, apko-fips, argo-cd, flux-fips,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: seaweedfs-rocksdb, splunk-otel-collector, opentelemetry-collector, dagger, frankenphp-8.4, docker, spire-server, longhorn-cli-fips, longhorn-manager-fips, vault, external-dns, kyverno-fips, redpanda-console, kine, argocd-image-updater, gatus-fips, act, apply-cve-bump...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.4, spire-server, vault, buildah, external-dns, kyverno-fips, kine, cilium-cli, buildah-fips, etcd, argo-cd, prometheus-elasticsearch-exporter, zot, external-secrets-operator, vault-fips, kube-conformance, reports-server, minio,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: openbao, opentelemetry-collector, dagger, frankenphp-8.4, spire-server, vault, buildah, external-dns, kyverno-fips, redpanda-console, kine, argocd-image-updater, step, act, apply-cve-bump, flux-source-controller, cilium-cli, buildah-fips, etcd, apko-fips, argo-cd,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, frankenphp-8.4, spire-server, vault, buildah, external-dns, kyverno-fips, kine, cilium-cli, buildah-fips, etcd, argo-cd, prometheus-elasticsearch-exporter, zot, packer-fips, external-secrets-operator, vault-fips, kube-conformance,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: gitlab-kas, k9s, cilium, argocd-image-updater, gitea, telegraf, kots, chisel, cilium-cli, osv-scanner, zarf, minio, k3s, snyk-cli, fscrypt, kubescape, aactl, flux-image-automation-controller, kubernetes, skaffold, kaf, trivy-operator, kine, prometheus, containerd,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitlab-kas, k9s, cilium, argocd-image-updater, gitea, telegraf, kots, chisel, cilium-cli, osv-scanner, zarf, minio, k3s, snyk-cli, fscrypt, kubescape, docker-machine-driver-harvester, aactl, flux-image-automation-controller, kubernetes, skaffold, kaf, trivy-operator,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: k9s, cilium, argo-cd, telegraf, kots, cilium-cli, gptscript, pulumi-language-dotnet, fscrypt, go-discover, aactl, wolfictl, step-issuer, terragrunt, prometheus, istio, gomplate, prometheus-operator, spire-server, external-secrets-operator, flux-source-controller,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: gitlab-kas, k9s, cilium, splunk-otel-collector, argocd-image-updater, argo-cd, gitea, telegraf, pulumi, kots, scorecard, guac, cilium-cli, osv-scanner, zarf, minio, chezmoi, gptscript, argo-events, k3s, pulumi-language-dotnet, datadog-agent, pulumi-language-java,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: gitlab-kas, cilium, telegraf, kots, cilium-cli, minio, k3s, snyk-cli, fscrypt, aactl, kubernetes, podman, kaf, buildah, kine, prometheus, containerd, istio, kubernetes-dashboard, docker-cli-buildx, zot, cert-manager, mattermost, knative-serving, prometheus-operator,...

CVE-2026-48059 vulnerabilities

Vulnerabilities for packages: apicurio-registry, zipkin, knative-kafka-broker, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, seata, request-9047-keycloak-fips, thingsboard, pinot, apache-activemq-artemis, neo4j, celeborn, hono, tez, apache-pulsar, apache-hop-fips, hadoop-fip...

GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: apicurio-registry, zipkin, knative-kafka-broker, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, seata, request-9047-keycloak-fips, thingsboard, pinot, apache-activemq-artemis, neo4j, celeborn, hono, tez, apache-pulsar, apache-hop-fips, hadoop-fip...

Improper Validation of Unsafe Equivalence in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Unsafe Equivalence in Input in the CXF-RS or CXF-SOAP endpoints due to missing inbound filtering via setInFilterStartsWith. An attacker can execute arbitrary code and write files by injecting Camel-internal header...

GHSA-8364-HFQJ-PWM6 Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...