opensearch-dashboards-3-config

8 results · Feed

• Medium 6.3
  CVE-2025-66030

  node-forge ASN.1 OID Integer Truncation

  Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs…

  Digital Bazaar forge katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi npm
  Nov 26, 2025
• High 8.7
  CVE-2025-66031

  node-forge ASN.1 Unbounded Recursion

  Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that…

  Digital Bazaar forge katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi npm
  Nov 26, 2025
• High 8.6
  CVE-2025-12816

  CVE-2025-12816

  An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographi…

  Digital Bazaar forge node-forge katib-suggestion-hyperopt Debian Ubuntu Azure Linux Wolfi npm
  Nov 25, 2025
• Medium 5.3
  CVE-2025-64718

  js-yaml has prototype pollution in merge (<<)

  js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (`__proto__`). All users who parse untrusted yaml documen…

  nodeca js-yaml katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  Nov 13, 2025
• Critical 9.1
  CVE-2025-9288

  Missing type checks leading to hash rewind and passing on crafted data

  Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

  opensearch-dashboards-3 opensearch-dashboards-3-dashboards-reporting opensearch-dashboards-3-dashboards-observability opensearch-dashboards-3-alerting-dashboards-plugin Debian Ubuntu Azure Linux Wolfi npm
  Aug 20, 2025
• Critical 9.1
  CVE-2025-9287

  Missing type checks leading to hash rewind and passing on crafted data

  Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.

  opensearch-dashboards-3 opensearch-dashboards-3-dashboards-reporting opensearch-dashboards-3-dashboards-observability opensearch-dashboards-3-alerting-dashboards-plugin Debian Ubuntu Wolfi npm
  Aug 20, 2025
• Critical 9.4
  CVE-2025-7783 Public exploit

  Usage of unsafe random function in form-data for choosing boundary

  Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

  katib-suggestion-hyperopt katib-earlystopping katib-suggestion-pbt-enas katib-suggestion-skopt-enas Debian Ubuntu Azure Linux Wolfi npm
  Jul 18, 2025
• Low 3.1
  CVE-2025-5889

  juliangruber brace-expansion index.js expand redos

  A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation leads to inefficient regular expression complexity…

  juliangruber brace-expansion langfuse-3-worker renovate Debian Ubuntu Azure Linux Alpine Wolfi npm
  Jun 9, 2025