CVE-2026-66010

DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOMELEMENTHANDLING.tagNameCheck, allowing attributes to bypass application security policies. Attackers can preserve sensitive attributes on custom elements that later re-inject them into...

CVE-2026-16730

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup notably SOPEERPIDFD are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and den...

GHSA-WC96-39FC-566F vulnerabilities

Vulnerabilities for packages: pinot, apache-hop-fips, apache-hop, thingsboard, tez, pinot-fips...

CVE-2026-56820 vulnerabilities

Vulnerabilities for packages: pinot, apache-hop-fips, apache-hop, thingsboard, tez, pinot-fips...

CVE-2026-56822 vulnerabilities

Vulnerabilities for packages: pinot, apache-hop-fips, apache-hop, thingsboard, tez, pinot-fips...

CVE-2026-56821 vulnerabilities

Vulnerabilities for packages: pinot, apache-hop-fips, apache-hop, thingsboard, tez, pinot-fips...

GHSA-272M-GCWP-MPWG vulnerabilities

Vulnerabilities for packages: pinot, apache-hop-fips, apache-hop, thingsboard, tez, pinot-fips...

GHSA-G7HG-VRCF-MVMR vulnerabilities

Vulnerabilities for packages: pinot, apache-hop-fips, apache-hop, thingsboard, tez, pinot-fips...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, kafka-fips, kafka, neo4j...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, kafka-fips, kafka, neo4j...

GHSA-8R6M-32JQ-JX6Q vulnerabilities

Vulnerabilities for packages: langfuse, tileserver-gl-fips, thingsboard-fips, langfuse-fips, tileserver-gl, kibana...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, kafka-fips, kafka, neo4j...

CVE-2026-6790 vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, kafka-fips, kafka, neo4j...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, kafka-fips, kafka, neo4j...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: confluent-kafka-jre-bcfips, kafka-fips, kafka, neo4j...

CVE-2026-50289 vulnerabilities

Vulnerabilities for packages: homepage...

GHSA-5XPP-75JX-M839 vulnerabilities

Vulnerabilities for packages: homepage...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: flyway-fips, apache-nifi, cloudwatch-exporter, keycloak, floci, s3proxy-fips, apache-pulsar, request-9047-keycloak-fips, kayenta-fips, apicurio-registry-fips, nuxeo, s3proxy, apicurio-registry, kayenta, knative-kafka-broker, kafbat-ui, flyway, hono, reposilite,...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: flyway-fips, apache-nifi, cloudwatch-exporter, keycloak, floci, s3proxy-fips, apache-pulsar, request-9047-keycloak-fips, kayenta-fips, apicurio-registry-fips, nuxeo, s3proxy, apicurio-registry, kayenta, knative-kafka-broker, kafbat-ui, flyway, hono, reposilite,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: flyway-fips, apache-nifi, cloudwatch-exporter, keycloak, floci, s3proxy-fips, apache-pulsar, request-9047-keycloak-fips, kayenta-fips, apicurio-registry-fips, nuxeo, s3proxy, apicurio-registry, kayenta, knative-kafka-broker, kafbat-ui, flyway, hono, reposilite,...