GHSA-39QC-96H7-956F vulnerabilities

Vulnerabilities for packages: hey, k3d...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: thanos-operator-fips, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips, thanos-operator...

MGASA-2022-0180 Updated golang-github-prometheus-client packages fix security vulnerability

HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1572 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.12)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2018-1999007 Source advisory: OSV:GHSA-6456-XJM5-G3PG...

DL1 bug fix update

An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, slapi-nis, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2022-21454 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21412 vulnerabilities

Vulnerabilities for packages: mysql...

MGASA-2022-0123 Updated openvpn packages fix security vulnerability

Potential authentication by-pass with multiple deferred authentication plug-ins. CVE-2022-0547...

CVE-2022-27191 vulnerabilities

Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner-fips, kubeflow-fips, dynamic-localpv-provisioner, terraform-provider-sendgrid, terraform-provider-sendgrid-fips, k3d...

CVE-2022-24329 vulnerabilities

Vulnerabilities for packages: thingsboard...

MGASA-2022-0079 Updated varnish packages fix security vulnerability

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and Varnish Enterprise Cache Plus 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections. CVE-2022-23959...

MGASA-2022-0069 Updated rlwrap packages fix security vulnerability

rlwrap update fixes use of /tmp/rlwrap.debug causing a denial of service for other users on the same system...

GHSA-QRRC-WW9X-R43G vulnerabilities

Vulnerabilities for packages: beats, beats-fips...

GHSA-FG2V-W576-W4V3 vulnerabilities

Vulnerabilities for packages: druid, celeborn, thingsboard, hadoop-client-modules...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by CVE-2022-23568 via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-23568 Source advisory: OSV:GHSA-6445-FM66-FVQ2...

CVE-2022-21367 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21332 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21327 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21320 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2022-21287 vulnerabilities

Vulnerabilities for packages: mysql...