ROS-20240704-05

Vulnerability in the OpenSearch software package related to incorrectly restricting reference to an external XML entity. Exploitation of the vulnerability could allow an attacker to conduct XXE attacks...

GHSA-328P-362G-R48J vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-328P-362G-R48J vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

GHSA-876P-C77M-X2HC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

GHSA-876P-C77M-X2HC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2024-38996 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2024-38996 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

CVE-2024-39001 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2024-39001 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

GHSA-W877-JFW7-46RJ vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-W877-JFW7-46RJ vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2024-37902 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2024-37902 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2024-37890 vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards, kibana, arangodb, kubeflow-pipelines, opensearch-dashboards-fips, kubeflow-centraldashboard, gemini-cli...

GHSA-3H5V-Q93C-6H6Q vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards, kibana, arangodb, kubeflow-pipelines, opensearch-dashboards-fips, kubeflow-centraldashboard, gemini-cli...

GHSA-952P-6RRQ-RCJV vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, gitlab-rails-ce, lerna, gitlab-rails-ce-fips, opensearch-dashboards, semaphore, ts-patch, py3-captum, kibana, kubeflow-pipelines, opensearch-dashboards-fips, renovate...

GHSA-GRV7-FG5C-XMJG vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards, gitlab-rails-ce, lerna, gitlab-rails-ce-fips, py3-captum, kibana, arangodb, kubeflow-pipelines, opensearch-dashboards-fips...

CVE-2024-4068 vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards, gitlab-rails-ce, lerna, gitlab-rails-ce-fips, py3-captum, kibana, arangodb, kubeflow-pipelines, opensearch-dashboards-fips...

CVE-2024-4067 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, argo-workflows, gitlab-rails-ce, lerna, gitlab-rails-ce-fips, opensearch-dashboards, semaphore, ts-patch, py3-captum, kibana, kubeflow-pipelines, opensearch-dashboards-fips, renovate...

ROS-20240425-08

The OpenSearch software family vulnerability is related to a bug in the parser where an input string of small size can cause it to use an undefined amount of memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...