Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
BIT-python-2024-6232
  • Bitnami/python
Regular-expression DoS when parsing TarFile headers 2 days ago
  • Fix available
  • Severity - 7.5 (High)
BIT-python-min-2024-6232
  • Bitnami/python-min
Regular-expression DoS when parsing TarFile headers 2 days ago
  • Fix available
  • Severity - 7.5 (High)
BIT-libpython-2024-6232
  • Bitnami/libpython
Regular-expression DoS when parsing TarFile headers 2 days ago
  • Fix available
  • Severity - 7.5 (High)
BIT-nifi-2026-87976
  • Bitnami/nifi
Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles 2 days ago
  • Fix available
  • Severity - 7.2 (High)
BIT-nifi-2026-86089
  • Bitnami/nifi
Apache NiFi: Missing Process Group Authorization for Connector Migration 2 days ago
  • Fix available
  • Severity - 7.1 (High)
BIT-nifi-2026-82561
  • Bitnami/nifi
Apache NiFi: Missing Authorization for Components Referenced in Flow Update Methods 2 days ago
  • Fix available
  • Severity - 5.9 (Medium)
BIT-nifi-2026-81866
  • Bitnami/nifi
Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration 2 days ago
  • Fix available
  • Severity - 4.3 (Medium)
BIT-nifi-2026-70469
  • Bitnami/nifi
Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests 2 days ago
  • Fix available
  • Severity - 7.5 (High)
BIT-python-min-2026-82049
  • Bitnami/python-min
tarfile extraction filters allow file modification and content disclosure via hard link to symlink 3 days ago
  • Fix available
  • Severity - 8.4 (High)
BIT-python-2026-82049
  • Bitnami/python
tarfile extraction filters allow file modification and content disclosure via hard link to symlink 3 days ago
  • Fix available
  • Severity - 8.4 (High)
BIT-libpython-2026-82049
  • Bitnami/libpython
tarfile extraction filters allow file modification and content disclosure via hard link to symlink 3 days ago
  • Fix available
  • Severity - 8.4 (High)
BIT-envoy-gateway-2026-53719
  • Bitnami/envoy-gateway
Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization 3 days ago
  • Fix available
  • Severity - 6.5 (Medium)
BIT-envoy-gateway-2026-53718
  • Bitnami/envoy-gateway
Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass 3 days ago
  • Fix available
  • Severity - 6.4 (Medium)
BIT-envoy-gateway-2026-53717
  • Bitnami/envoy-gateway
Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header 3 days ago
  • Fix available
  • Severity - 6.5 (Medium)
BIT-envoy-gateway-2026-53716
  • Bitnami/envoy-gateway
Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit 3 days ago
  • Fix available
  • Severity - 6.5 (Medium)
BIT-envoy-gateway-2026-53715
  • Bitnami/envoy-gateway
Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock 3 days ago
  • Fix available
  • Severity - 5.3 (Medium)