CVE-2026-68494

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...

GHSA-8XCM-R25X-G524 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse, renovate, prism, kibana, pelias-api, langfuse-fips, vitess, code-server, actions-runner, npm...

CVE-2026-16729 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse, renovate, prism, kibana, pelias-api, langfuse-fips, vitess, code-server, actions-runner, npm...

GHSA-4CWX-7WF7-3272 vulnerabilities

Vulnerabilities for packages: renovate, langfuse, kibana, pelias-api, langfuse-fips, vitess, code-server...

CVE-2026-16728 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse, renovate, prism, kibana, pelias-api, langfuse-fips, vitess, code-server, actions-runner, npm...

CVE-2026-13697 vulnerabilities

Vulnerabilities for packages: renovate, langfuse, kibana, pelias-api, langfuse-fips, vitess, code-server...

GHSA-V3R7-H72X-CJCM vulnerabilities

Vulnerabilities for packages: pulumi, langfuse, renovate, prism, kibana, pelias-api, langfuse-fips, vitess, code-server, actions-runner, npm...

GHSA-M8RV-5G2X-5CG5 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse, renovate, prism, kibana, pelias-api, langfuse-fips, vitess, code-server, actions-runner, npm...

CVE-2026-15157 vulnerabilities

Vulnerabilities for packages: pulumi, langfuse, renovate, prism, kibana, pelias-api, langfuse-fips, vitess, code-server, actions-runner, npm...

CVE-2026-69244 vulnerabilities

Vulnerabilities for packages: kserve-models-web-app, awx, apache-beam-python-3.13-sdk, text-generation-inference, tritonserver-backend-vllm-cuda-13.0, dask-kubernetes-fips, dask-kubernetes, kserve, open-webui, apache-beam-python-3.11-sdk, puppygraph-python, vllm-cuda-13.2, datahub-ingestion-fips,...

GHSA-MFX4-HV73-Q22V vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, apache-beam-python-3.12-sdk, kserve, airflow-core, apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, kserve-models-web-app, awx, open-webui, puppygraph-python, py3-cassandra-medusa, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-69243 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, apache-beam-python-3.12-sdk, kserve, airflow-core, apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, kserve-models-web-app, awx, open-webui, puppygraph-python, py3-cassandra-medusa, py3.13-scanner-test-libraries-aiohttp,...

GHSA-R5VV-FF45-PRP2 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-954P-556P-R752 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-8359-H9FX-J6V9 vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-54691 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-WJV6-JCFJ-MF9R vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-386Q-5HP3-95M9 vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-55415 vulnerabilities

Vulnerabilities for packages: label-studio...

CVE-2026-55403 vulnerabilities

Vulnerabilities for packages: label-studio...