GHSA-97GM-QXRM-C6W2 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-4FV6-2265-MQXM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-94FV-WXC5-F8VM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-9485 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-WQ7H-QGQ6-WJQM vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-54H4-GJC6-H34H vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-10110 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-WXM8-9V8Q-CPXR vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-15575 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2025-66577

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can supply X-Forwarded-For or X-Real-IP headers which...

CVE-2025-66566

yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is...

CVE-2025-14104

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

CVE-2025-6966

NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...

USN-7909-4 linux-gcp, linux-gke, linux-gkeop vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

CVE-2025-65082

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through...

MAL-2025-192318 Malicious code in chai-as-deployed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebc44576073489ddc650d352e43bee3aa036bcdc2914887eb9c36be2780e09b The package chai-as-deployed was found to contain malicious code. Source: ghsa-malware 117c632d121fc31a4f589c4d76730535c6d5b576ae6e3addab756be448c13b...

MAL-2025-192319 Malicious code in chai-promised-chain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a501d6eba591eb49cf120c8aee8c4e0600aacf2263984d3ae14e0d1b53daa92 The package chai-promised-chain was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192316 Malicious code in tailwindcss-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481964585a35f69204d7414e9baf1d490be4d82239919026f044584bf7a64ddd The package tailwindcss-animation-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481964585a35f69204d7414e9baf1d490be4d82239919026f044584bf7a64ddd The package tailwindcss-animation-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in react-svg-fill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c6ef17232fb1949de6b62053246036337cb070a7b06a466bb122d789c9ca3 The package react-svg-fill was found to contain malicious code. Source: ghsa-malware b09c58dca53550942f8c2595496e45d321f85551e7ce7a94e7059e50448f4709...