CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, az, litellm, kubeflow-pipelines, pgadmin4, ggshield, openstack-keystone-2025.1-fips, kserve-xgbserver-fips, openstack-keystone-2025.2, chroma, kserve-lgbserver, kubeflow-pipelines-visualization-server, openstack-keystone-2026.1, dask-kubernetes,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, az, litellm, kubeflow-pipelines, pgadmin4, ggshield, openstack-keystone-2025.1-fips, kserve-xgbserver-fips, openstack-keystone-2025.2, chroma, kserve-lgbserver, kubeflow-pipelines-visualization-server, openstack-keystone-2026.1, dask-kubernetes,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, kserve, datadog-agent, kubeflow-pipelines, kubeflow-jupyter-web-app, ggshield, kubeflow-volumes-web-app, jupyter-base-notebook, kubeflow-katib, dask-kubernetes, open-webui, az, kubeflow-pipelines-visualization-server...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: k8s-sidecar, kserve, datadog-agent, kubeflow-pipelines, kubeflow-jupyter-web-app, ggshield, kubeflow-volumes-web-app, jupyter-base-notebook, kubeflow-katib, dask-kubernetes, open-webui, az, kubeflow-pipelines-visualization-server...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...

chromium-browser: angle: Chromium: Web origin policy bypass via uninitialized resource in ANGLE

A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to bypass the web origin policy, leading to unauthorized access to...

webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper validation checks...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...

webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, leading to memory corruption...

ROOT-APP-MAVEN-CVE-2025-41234 CVE-2025-41234 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2025-41234 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

EUVD-2026-90216

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3...

CVE-2026-55094 Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)

Taskcluster is the task execution framework that supports Mozilla's continuous integration and release processes. Prior to version 100.3.0, Taskcluster is vulnerable to unauthenticated RCE on Taskcluster deployments with an anonymous role that exposes the GraphQL endpoint and parses filter...