GHSA-RWJ8-PGH3-R573 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, checkov, awx...

GHSA-956X-8GVW-WG5V vulnerabilities

Vulnerabilities for packages: datahub-ingestion, opal, mlflow, datahub-ingestion-fips, checkov, awx...

CVE-2026-55832 vulnerabilities

Vulnerabilities for packages: ascan...

GHSA-V2HH-GCRM-F6HX vulnerabilities

Vulnerabilities for packages: vitess, argo-workflows, gitlab-rails-ce, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, wazuh-dashboard, keep, prism, kibana, opensearch-dashboards-fips, opensearch-dashboards, unleash-fips, keep-fips, renovate, arangodb, tileserver-gl-fips, unleash,...

CVE-2026-16221 vulnerabilities

Vulnerabilities for packages: vitess, argo-workflows, gitlab-rails-ce, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, wazuh-dashboard, keep, prism, kibana, opensearch-dashboards-fips, opensearch-dashboards, unleash-fips, keep-fips, renovate, arangodb, tileserver-gl-fips, unleash,...

GHSA-H668-6X6G-F8R5 vulnerabilities

Vulnerabilities for packages: ascan...

GHSA-2F96-G7MH-G2HX vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

GHSA-956X-8GVW-WG5V vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

GHSA-RWJ8-PGH3-R573 vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-csi-driver, cert-manager-cmctl, percona-server-mongodb-operator, aws-privateca-issuer, kuberay-operator, mariadb-operator, step-issuer, cert-manager-webhook-pdns...

CVE-2026-16221 vulnerabilities

Vulnerabilities for packages: yaml-language-server, renovate, langfuse, prism, tileserver-gl, argo-workflows, opensearch-dashboards, vitess...

GHSA-V2HH-GCRM-F6HX vulnerabilities

Vulnerabilities for packages: yaml-language-server, renovate, langfuse, prism, tileserver-gl, argo-workflows, opensearch-dashboards, vitess...

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

CVE-2026-52686

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...

CVE-2026-64600

In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfsreflinkfillcowhole,delalloc are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a...

CVE-2026-6390

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...