Search results

[MEDIUM] uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1469 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Apr 26, 2026

[MEDIUM] follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1454 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Apr 18, 2026

[MEDIUM] yauzl contains an off-by-one error

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1402 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Mar 16, 2026

[HIGH] minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1376 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Mar 2, 2026

[HIGH] Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1242 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Dec 5, 2025

[HIGH] glob CLI: Command injection via -c/--cmd executes matches with shell:true

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1223 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Nov 22, 2025

[MEDIUM] js-yaml has prototype pollution in merge (<<)

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1213 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Nov 17, 2025

[MEDIUM] validator.js has a URL validation bypass vulnerability in its isURL function

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1170 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Oct 16, 2025

[LOW] tmp allows arbitrary temporary file / directory write via symbolic link dir parameter

dependabot-security-finding

needs-triagePriority and effort undetermined yetPriority and effort undetermined yet

priority/p0Needs to be addressed immediatelyNeeds to be addressed immediately

Status: Open.

#1078 In cdk8s-team/cdk8s-cdktf-resolver;

· cdk8s-automation opened on Aug 10, 2025