GHSA-RHH3-JPG6-66XH vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-71436 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-71437 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-71438 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

GHSA-3F7W-8RR8-F37F vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, awx...

GHSA-P538-C434-8V24 vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, awx...

GHSA-6HR6-W5QG-QMWG vulnerabilities

Vulnerabilities for packages: mitmproxy, jupyter-all-spark-notebook, authentik, authentik-fips, apache-beam-python-3.14-sdk, airflow, prefect-fips, open-webui, localstack...

CVE-2026-71554 vulnerabilities

Vulnerabilities for packages: mitmproxy, jupyter-all-spark-notebook, authentik, authentik-fips, apache-beam-python-3.14-sdk, airflow, prefect-fips, open-webui, localstack...

GHSA-5P4M-2WFM-XMQJ vulnerabilities

Vulnerabilities for packages: arangodb, opensearch-dashboards, percona-server-mongodb, eslint, langfuse, foxx-cli, code-server, lerna, saf, langfuse-fips, homepage, unleash-proxy, prism, awx, vitess, unleash, authentik-fips, redisinsight, sqlpad, wazuh-dashboard-fips, kibana, mongod,...

GHSA-W737-WX49-QJ23 vulnerabilities

Vulnerabilities for packages: keycloak, nacos, airbyte-server-fips, zipkin, dependency-track, apicurio-registry-fips, request-9047-keycloak-fips, infinispan, apicurio-registry, nacos-docker, camunda-zeebe, apache-nifi, dependency-track-apiserver, keycloak-fips, airbyte-server...

GHSA-G3PR-3P32-FP23 vulnerabilities

Vulnerabilities for packages: keycloak, zipkin, infinispan, hono, camunda-zeebe, knative-kafka-broker-fips, nacos-docker, keycloak-fips, kafka-bridge, apicurio-registry, apicurio-registry-fips, nacos, airbyte-server-fips, dependency-track, request-9047-keycloak-fips, apache-nifi, ontop,...

GHSA-5P4M-2WFM-XMQJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, lerna, prism, vitess, jitsucom-jitsu, langfuse, eslint, sqlpad, saf, renovate, pulumi, ts-patch, code-server...

CVE-2026-40983 vulnerabilities

Vulnerabilities for packages: apicurio-registry, dependency-track, keycloak, zipkin, infinispan...

GHSA-PMHH-3W7G-XQP8 vulnerabilities

Vulnerabilities for packages: gradle, opensearch, nextflow, spdx-tools-java, apache-tika...

GHSA-W737-WX49-QJ23 vulnerabilities

Vulnerabilities for packages: apicurio-registry, dependency-track, keycloak, zipkin, infinispan...

CVE-2026-40984 vulnerabilities

Vulnerabilities for packages: apicurio-registry, dependency-track, keycloak, zipkin, infinispan...

GHSA-G3PR-3P32-FP23 vulnerabilities

Vulnerabilities for packages: apicurio-registry, dependency-track, keycloak, zipkin, infinispan...

CVE-2026-71497 vulnerabilities

Vulnerabilities for packages: gradle, opensearch, nextflow, spdx-tools-java, apache-tika...

policycoreutils: policycoreutils: TOCTOU race condition in fixfiles allows arbitrary SELinux label manipulation

A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker...

CVE-2026-71852

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...