CVE-2026-104872 vulnerabilities

Vulnerabilities for packages: librechat, zitadel, kibana, azurite...

GHSA-QQMP-WF37-98F9 vulnerabilities

Vulnerabilities for packages: librechat, zitadel, kibana, azurite...

GHSA-54P9-H82J-F925 vulnerabilities

Vulnerabilities for packages: litellm, wazuh-manager, authentik-fips, mlflow-fips, request-1276, py3-cassandra-medusa, authentik, airflow, wazuh-manager-fips, crossplane-function-pythonic, puppygraph-python, nemo-rl-cuda-13.0...

CVE-2026-104874 vulnerabilities

Vulnerabilities for packages: litellm, wazuh-manager, authentik-fips, mlflow-fips, request-1276, py3-cassandra-medusa, authentik, airflow, wazuh-manager-fips, crossplane-function-pythonic, puppygraph-python, nemo-rl-cuda-13.0...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: sccache, apollo-router, linkerd2-proxy, ntpd-rs, vector, komodo, shadowsocks-rust...

CVE-2026-47884 vulnerabilities

Vulnerabilities for packages: datahub-gms, datahub-gms-fips, camunda, geoserver, apache-nifi-registry, apache-activemq, camunda-zeebe, apache-activemq-fips...

GHSA-PC63-QCMH-9CMG vulnerabilities

Vulnerabilities for packages: datahub-gms, datahub-gms-fips, camunda, geoserver, apache-nifi-registry, apache-activemq, camunda-zeebe, apache-activemq-fips...

CVE-2026-104844 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, jupyter-base-notebook, arangodb, langfuse, graalvm, langfuse-fips, node-red, npm, vitess, renovate, librechat, pulumi, actions-runner, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, gitlab-rails-ce...

GHSA-RJ75-HQRM-R3GF vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, jupyter-base-notebook, arangodb, langfuse, graalvm, langfuse-fips, node-red, npm, vitess, renovate, librechat, pulumi, actions-runner, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, gitlab-rails-ce...

GHSA-68FV-2MGG-JV7Q vulnerabilities

Vulnerabilities for packages: renovate, saf, opensearch-dashboards, jupyter-base-notebook, vitess, nextcloud-server, langfuse, rancher-api-ui...

CVE-2026-93749 vulnerabilities

Vulnerabilities for packages: renovate, saf, opensearch-dashboards, jupyter-base-notebook, vitess, nextcloud-server, langfuse, rancher-api-ui...

CVE-2026-75140 vulnerabilities

Vulnerabilities for packages: opensearch, apache-tika, spdx-tools-java, nextflow...

GHSA-65R4-943X-97JJ vulnerabilities

Vulnerabilities for packages: opensearch, apache-tika, spdx-tools-java, nextflow...

CVE-2026-104844 vulnerabilities

Vulnerabilities for packages: vitess, jupyter-base-notebook, npm, langfuse, renovate, pulumi...

GHSA-RJ75-HQRM-R3GF vulnerabilities

Vulnerabilities for packages: vitess, jupyter-base-notebook, npm, langfuse, renovate, pulumi...

GHSA-5J98-2G5X-46V6 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, ntpd-rs, sccache, vector, shadowsocks-rust...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, ntpd-rs, sccache, vector, shadowsocks-rust...

GHSA-6F2X-V7Q7-M7M5 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, ntpd-rs, sccache, vector, shadowsocks-rust...

CVE-2026-84897

src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSHMSGKEXDHGEXGROUP 31 and SSHMSGKEXDHGEXREPLY 33 when a server receives them from an unauthenticated client. IsMessageAllowedServer applies no direction check to the key exchange...

CVE-2026-81535

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...