GHSA-957G-F97V-VPPC vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, apache-nifi-registry...

GHSA-X23C-287F-QQV5 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, kafbat-ui...

GHSA-MQ64-J8F9-9GCJ vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, kafbat-ui...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-camel-karavan-devmode, keycloak-config-cli, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, zipkin, jenkins, kafbat-ui...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-camel-karavan-devmode, keycloak-config-cli, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, zipkin, jenkins, kafbat-ui...

GHSA-72PG-X5F8-J25J vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, kafbat-ui...

CVE-2026-41841 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, kafbat-ui...

CVE-2026-41842 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, kafbat-ui...

CVE-2026-41843 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, kafbat-ui...

CVE-2026-41844 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, kafbat-ui-fips, apache-nifi-registry, kafbat-ui...

GHSA-3CHG-M5W7-QFV5 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-activemq-fips, apache-activemq, camunda, apache-nifi-registry...

CVE-2026-53502

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...

CVE-2026-18321

Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...

libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing negative size values in the repoaddsolv function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could...

libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within .solv files due to insufficient input validation. An attacker can provide a specially crafted .solv file, which, when processed by a vulnerable application, can lea...

SUSE CVE-2026-9672

unknown...

SUSE CVE-2026-44945

A privilege escalation vulnerability exists in Rancher's impersonation middleware pkg/auth/requests/impersonate.go. An authenticated Rancher user with the default user global role can gain full administrative access to the Rancher control plane and transitively to all downstream clusters it...

SUSE CVE-2026-55996

A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Rancher server itself use the dynamiclistener library to serve TLS traffic. Without an effective CN filter configured,...

SUSE CVE-2026-55997

Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no expiration, so a malicious user could obtain one either through the Rancher API, etcd, stored automation, or direct file access on...

SUSE CVE-2026-55998

The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...