1157674 matches found
Cross-site Scripting (XSS)
DOMPurify is vulnerable to cross-site scripting XSS. The vulnerability is due to the use of realm-specific instanceof checks when sanitizing DOM nodes from a different same-origin realm, which allows an attacker to bypass sanitization for form attributes, template content, and shadow DOM, leading...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the process that creates and forwards ServiceAccount tokens to output destinations without verifying the authorization of the creator. An attacker can gain unauthorized access to sensitive credentials by...
CVE-2025-14525 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester, virt-controller-fips, virt-operator-fips, virt-handler, virt-launcher...
CVE-2024-33394 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester, virt-controller-fips, virt-operator-fips, virt-operator, virt-launcher...
GHSA-4Q63-MR2M-57HF vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester, virt-controller-fips, virt-operator-fips, virt-operator, virt-launcher...
GHSA-VJHF-6XFR-5P9G vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester, virt-controller-fips, virt-operator-fips, virt-operator, virt-launcher...
CVE-2024-31420 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester, virt-controller-fips, virt-operator-fips, virt-operator, virt-launcher...
GHSA-25MH-HP8X-CGRV vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester, virt-controller-fips, virt-operator-fips, virt-handler, virt-launcher...
CVE-2026-54904 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-rails, ruby3.4-rails, logstash, ruby3.2-fluentd-kubernetes-daemonset,...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-rails, ruby3.4-rails, logstash, ruby3.2-fluentd-kubernetes-daemonset,...
GHSA-6WX8-W4F5-WWCR vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-rails, ruby3.4-rails, logstash, ruby3.2-fluentd-kubernetes-daemonset,...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-rails, ruby3.4-rails, logstash, ruby3.2-fluentd-kubernetes-daemonset,...
GHSA-PHWJ-RPRQ-35PP vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, ruby3.4-rails, logstash, logstash-fips, ruby3.3-rails, pact-broker-docker-fips...
GHSA-8678-W3JW-XFC2 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, ruby3.4-rails, logstash, logstash-fips, ruby3.3-rails, pact-broker-docker-fips...
GHSA-WFPW-MMFH-QQ69 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, ruby3.4-rails, logstash, logstash-fips, ruby3.3-rails, pact-broker-docker-fips...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-rails, ruby3.4-rails, logstash, ruby3.2-fluentd-kubernetes-daemonset,...
GHSA-5V8H-3H3Q-446P vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, ruby3.4-rails, logstash, logstash-fips, ruby3.3-rails, pact-broker-docker-fips...
GHSA-WJV4-X9W8-WM3H vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, ruby3.4-rails, logstash, logstash-fips, ruby3.3-rails, pact-broker-docker-fips...
GHSA-P67V-3W7G-WJG7 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, ruby3.4-rails, logstash, logstash-fips, ruby3.3-rails, pact-broker-docker-fips...
GHSA-5PRR-V3J2-97MH vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, ruby3.4-rails, logstash, logstash-fips, ruby3.3-rails, pact-broker-docker-fips...