GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: apache-hop-fips, spark-fips, strimzi-kafka-operator-fips, spark, opensearch, camunda-zeebe, camunda, strimzi-kafka-operator, apache-hop, opensearch-fips...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, spark-fips, strimzi-kafka-operator-fips, spark, opensearch, camunda-zeebe, camunda, strimzi-kafka-operator, apache-hop, opensearch-fips...

CVE-2026-13676 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, vitess, wazuh-dashboard, gitlab-rails-ce-fips, unleash-proxy, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, arangodb, kibana, keep-fips, prism, keep, nextcloud-server, yaml-language-server...

CVE-2026-59887 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kibana, gitlab-rails-ce-fips...

GHSA-4C8G-83QW-93J6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, vitess, wazuh-dashboard, gitlab-rails-ce-fips, unleash-proxy, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, arangodb, kibana, keep-fips, prism, keep, nextcloud-server, yaml-language-server...

GHSA-V245-V573-V5VM vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kibana, gitlab-rails-ce-fips...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: traccar, seata, s3proxy-fips, strimzi-kafka-operator-fips, airbyte-server, infinispan, pinot, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apicurio-registry, kayenta-fips, spark-kubernetes-operator-fips, apache-nifi, spark, kafbat-ui-fips,...

GHSA-XCPC-8H2W-3J85 vulnerabilities

Vulnerabilities for packages: sqlpad...

CVE-2026-39244 vulnerabilities

Vulnerabilities for packages: sqlpad...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: spark, strimzi-kafka-operator, opensearch...

GHSA-MH99-V99M-4GVG vulnerabilities

Vulnerabilities for packages: serve, thingsboard, langfuse, ts-patch, pulumi, renovate, saf, nextcloud-server, rancher-api-ui, prism, argo-workflows, npm, lerna, opensearch-dashboards, sqlpad...

CVE-2026-14257 vulnerabilities

Vulnerabilities for packages: serve, thingsboard, langfuse, ts-patch, pulumi, renovate, saf, nextcloud-server, rancher-api-ui, prism, argo-workflows, npm, lerna, opensearch-dashboards, sqlpad...

CVE-2026-64554

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a pointer into the skb head, from ip6find1stfragopt, then calls skbchecksumhelp. For a cloned skb skbchecksumhelp reallocates the head via...

CVE-2026-64553

In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLEATTRDATA psample open codes nlaput presumably to avoid wiping the data with 0s just to override it with packet data. This open coding is missing clearing the pad, however, each netlink attr i...

CVE-2026-64551

In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a STALECOOKIE cause is received in the COOKIEECHOED state, sctpsfdo526stale reads the 4-byte Measure of Staleness that follows the cause...

CVE-2026-64552

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receivebig receivebig bounds the device-announced length by bigpacketsnumskbfrags + 1 PAGESIZE. That is still too loose: addrecvbufbig sets sg1 to start at offset sizeofstruct paddedvnethdr into the...

CVE-2026-64550

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: validate MAP frame length before ingress parsing When ingress deaggregation is disabled, rmnetmapingresshandler passes the skb straight to rmnetmapingresshandler, skipping the length validation that...

CVE-2026-64549

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10xsetup bpa10xsetup sends the vendor command 0xfc0e and passes the response to btdevinfo and hcisetfwinfo as a "%s" string starting at skb-data + 1, without checking the...

CVE-2026-64547

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...

CVE-2026-64546

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a struct displayidtiledblock and reads the full fixed layout up to tile-topologyid7 without checking block-numbytes. The DisplayID...