CLEANSTART-2026-YI70323 Security fixes in openbao-fips 2.5.4-r0

Package openbao-fips version 2.5.4-r0 fixes 2 vulnerabilities: CVE-2026-32952, CVE-2026-41889...

CVE-2026-41889 affecting package keda for versions less than 2.14.1-15

CVE-2026-41889 affecting package keda for versions less than 2.14.1-15. A patched version of the package is available...

ROOT-APP-GOBINARY-CVE-2026-41889 CVE-2026-41889 in rootio-github.com/jackc/pgx/v4 - Patched by Root

Root has patched CVE-2026-41889 in the rootio-github.com/jackc/pgx/v4 package for Root:Go. Multiple fixed versions available...

steampipe-2.4.4-1.1 on GA media (moderate)

steampipe-2.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10976-1 Rating: moderate Cross-References: CVE-2026-41889 CVSS scores: CVE-2026-41889 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-41889 SUSE : 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

CVE-2026-41889 affecting package telegraf for versions less than 1.31.0-22

CVE-2026-41889 affecting package telegraf for versions less than 1.31.0-22. A patched version of the package is available...

Security Bulletin: IBM Verify Antenna is affected by multiple vulnerabilities (CVE-2026-33815, CVE-2026-33816, CVE-2026-41889)

Summary IBM Verify Antenna has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-41889 DESCRIPTION: pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string...

DEBIAN-CVE-2026-41889

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be interpreted as a placeholder outside of a...

Linux Distros Unpatched Vulnerability : CVE-2026-41889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: openfga, caddy-fips, sftpgo-plugin-eventstore, keda, sftpgo, goose-fips, ldap2pg, temporal, grafana-fips, kine, temporal-server, gitlab-elasticsearch-indexer-fips, gitaly-fips, cerbos, keda-fips, gitlab-kas-fips, telegraf, openbao-fips, falcosidekick-fips,...