GHSA-7RQJ-J65F-68WH vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse, langfuse-fips...

GHSA-XMF8-CVQR-RFGJ vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-7RQJ-J65F-68WH vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-X445-F3H2-J279 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-R28C-9Q8G-F849 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server, vitess, jitsucom-jitsu...

Important: Red Hat Security Advisory: Red Hat Quay 3.15.7

Red Hat Quay 3.15.7 is now available with bug fixes. Quay 3.15.7...

Important: Red Hat Security Advisory: RHACS 4.10.6 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

GHSA-CG4G-M8JX-VJV2

creationtimestamp| type| source ---|---|--- 2026-07-30 18:31:07+00:00| seen| https://gist.github.com/alon710/a4455529dbdac06b73f9e7a68363941a...

Malicious code in thedata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e05613178114f2f3d9171f429a5b6aba8e1a525e07db22d150be81c02d6f595 The package's main entry index.js re-exports two values, rsaKey and desKey, from apps/docs/app/theta.js, which simply readFileSync's...

GHSA-4MRV-5P47-P938

creationtimestamp| type| source ---|---|--- 2026-07-30 17:31:24+00:00| seen| https://gist.github.com/alon710/f9483ca84f65ab9c98c78744c876def1...

DEBIAN-CVE-2026-12932

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...

CVE-2026-51293

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

SUSE CVE-2026-17847

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17953

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-18019

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-20719

Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated users to crash the Mattermost webapp and desktop app via creating an issue or PR on GitHub.. Mattermost Advisory ID:...

SUSE CVE-2026-21388

Mattermost Plugins versions =2.3.1 fail to limit the request body size on the /lifecycle webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00610...

SUSE CVE-2026-26231

Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be able to write...

SUSE CVE-2026-27769

Mattermost versions 10.11.x = 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected using the Conntexted Workspaces feature to change the displayed status of local users via the Connected Workspaces API...

SUSE CVE-2026-28732

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 Fail to enforce slash command trigger-word uniqueness during command updates which allows an authenticated team member with Manage Own Slash Commands permission to hijack and impersonate existing system or custom slash...