GHSA-F3M7-GQXR-G87X vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-FQPX-62JV-7R6R vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-Q6F4-QQRG-JV6X vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GHSA-VHCH-2WF3-M8RP vulnerabilities

Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, thingsboard, trino, tez...

CVE-2026-44891 vulnerabilities

Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, thingsboard, trino, tez...

CVE-2025-12506 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

CVE-2026-13320 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

GHSA-M49F-RVV4-R4RV vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

GHSA-H5PW-H3J7-CJ7F vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

GHSA-PGGX-2V9R-J6GM vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

CVE-2026-7492 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-rails-ce, gitlab-runner-fips...

GHSA-Q3FV-X8VG-QQM4 vulnerabilities

Vulnerabilities for packages: cloudbeat, trivy-operator, cloudbeat-fips, trivy-operator-fips...

CVE-2026-54448 vulnerabilities

Vulnerabilities for packages: cloudbeat, trivy-operator, cloudbeat-fips, trivy-operator-fips...

GHSA-VHCH-2WF3-M8RP vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, tez, tinkerpop, celeborn, hadoop-fips, seata, trino, apache-hop-fips, pinot-fips, management-api-for-apache-cassandra-4.0, thingsboard, apache-hop, management-api-for-apache-cassandra-5.0, pinot...

CVE-2026-44891 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, tez, tinkerpop, celeborn, hadoop-fips, seata, trino, apache-hop-fips, pinot-fips, management-api-for-apache-cassandra-4.0, thingsboard, apache-hop, management-api-for-apache-cassandra-5.0, pinot...

CVE-2026-26032

The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" directory. This subdirectory is calculated based on...

SUSE CVE-2026-15772

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-44891

Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.stomp.StompSubframeDecoder fails to limit the total number of headers or their cumulative size per frame, and the maxLineLength parameter only...

SUSE CVE-2026-50151

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the...

SUSE CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...