CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: tileserver-gl, librechat, lambda-nodejs, langfuse-fips, langfuse, tileserver-gl-fips...

GHSA-FM8W-2M5W-9J7R vulnerabilities

Vulnerabilities for packages: kubescape-server, kubescape, cilium, kubescape-server-fips...

CVE-2026-84124 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-QGW4-JQW6-383Q vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-3H3X-M88J-VRHJ vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-9Q9X-3H5P-QV27 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-8V78-CGM6-V8H8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-84QV-4WJ5-WWMM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-458M-M9VV-FRQ3 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-96PH-P3MM-PHXP vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-9WHR-FJ92-HCRC vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-HG9W-CW2V-4PM9 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-84137 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-84130 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-84120 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-3H3X-M88J-VRHJ vulnerabilities

Vulnerabilities for packages: firefox...

SUSE CVE-2026-49446

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...

SUSE CVE-2026-53658

Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inserts the username from HTTP Basic authentication into the LDAP uid search UserFilter without escaping LDAP metacharacters...

SUSE CVE-2026-54167

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before...

SUSE CVE-2026-55061

uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNIGETEDITOR or EDITOR with strings.Spliteditor, " " and passes every space-delimited suffix as an argument to the selected editor executable. An attacker who can...