GHSA-R277-6W6Q-XMQW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-autoscalingplans, crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-azure-storagesync, crossplane-provider-aws-cur-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-backup-fips,...

GHSA-JPCW-4WR7-C3VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-autoscalingplans, crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-azure-storagesync, crossplane-provider-aws-cur-fips, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-backup-fips,...

GHSA-V74W-7MR3-4QG3 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, thingsboard...

GHSA-R292-9MHP-454M vulnerabilities

Vulnerabilities for packages: lerna, sqlpad, opensearch-dashboards, code-server, pulumi, kubeflow-centraldashboard, npm, node-gyp...

CVE-2026-57497 vulnerabilities

Vulnerabilities for packages: spegel, k3s, kubo, ipfs-cluster...

GHSA-G35J-M5XG-VH3Q vulnerabilities

Vulnerabilities for packages: spegel, k3s, kubo, ipfs-cluster...

GHSA-JPCW-4WR7-C3VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, crossplane-provider-aws-eks, crossplane-provider-aws-ec2, dataplaneapi, crossplane-provider-aws-dynamodb, crossplane-provider-aws-s3, crossplane-provider-aws-sqs, crossplane-provider-aws-firehose, crossplane-provider-family-aws,...

GHSA-R277-6W6Q-XMQW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, crossplane-provider-aws-eks, crossplane-provider-aws-ec2, dataplaneapi, crossplane-provider-aws-dynamodb, crossplane-provider-aws-s3, crossplane-provider-aws-sqs, crossplane-provider-aws-firehose, crossplane-provider-family-aws,...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: akhq, thingsboard, cassandra-reaper, debezium-connector-informix, debezium-connector-vitess, apicurio-registry, kafka, cassandra, apache-pulsar, debezium-connector-spanner, confluent-kafka, strimzi-kafka-operator, debezium-connector-db2, wildfly...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: akhq, thingsboard, cassandra-reaper, debezium-connector-informix, debezium-connector-vitess, apicurio-registry, kafka, cassandra, apache-pulsar, debezium-connector-spanner, confluent-kafka, strimzi-kafka-operator, debezium-connector-db2, wildfly...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: apache-pulsar, debezium-connector-db2, hono, kafka-bridge, kafka-bridge-fips, cassandra-reaper, dependency-track-apiserver, floci, spark-kubernetes-operator, traccar-fips, debezium-connector-informix, kafka, strimzi-kafka-operator-fips, apicurio-registry-fips,...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: apache-pulsar, debezium-connector-db2, hono, kafka-bridge, kafka-bridge-fips, cassandra-reaper, dependency-track-apiserver, floci, spark-kubernetes-operator, traccar-fips, debezium-connector-informix, kafka, strimzi-kafka-operator-fips, apicurio-registry-fips,...

CVE-2026-54089 vulnerabilities

Vulnerabilities for packages: filebrowser...

GHSA-XQP3-JQ6G-X3QM vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-64529

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

CVE-2026-64528

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when the console flow is engaged 1. When console flow control is enabled UPFCONSFLOW, s3c24xxserialstoptx calls...

CVE-2026-64526

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnlopscomplete tsconfigpreparedata calls ethnlopsbegin, we need to call ethnlopscomplete before returning the error...

CVE-2026-64524

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolutioncount and fix WIN8 fallback A SYNTHVIDRESOLUTIONRESPONSE with resolutioncount 64 walks past the supportedresolutionSYNTHVIDMAXRESOLUTIONCOUNT array in the parse loop. Bound resolutioncount against t...

CVE-2026-64523

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshakenlacceptdoit needs the file pointer backing req-hrsk-sksocket to survive the window between handshakereqnext and the subsequent FDPREPARE and getfile. The...

CVE-2026-64520

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Bound PARTITIONINFOGETREGS copies The register-based PARTITIONINFOGET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index...