CVE-2025-66414 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2025-44005 vulnerabilities

Vulnerabilities for packages: caddy...

GHSA-H8CP-697H-8C8P vulnerabilities

Vulnerabilities for packages: caddy-fips, caddy...

CVE-2018-15472 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-94FV-WXC5-F8VM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-WQ7H-QGQ6-WJQM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-WXM8-9V8Q-CPXR vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-9485 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-10110 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-4FV6-2265-MQXM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-15575 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-97GM-QXRM-C6W2 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-54H4-GJC6-H34H vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2025-66577

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can supply X-Forwarded-For or X-Real-IP headers which...

CVE-2025-66566

yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is...

CVE-2025-14104

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

CVE-2025-65082

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through...

GHSA-P493-635Q-R6GR vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2016-3956 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2020-15095 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...