GHSA-GJ4P-F535-7C3J vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

GHSA-GQPG-53JH-CPQF vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

GHSA-HQXW-2V34-R7G3 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

GHSA-M2VM-4PMQ-6GPC vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

CVE-2025-39958 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

CVE-2025-71074 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-aws, linux-gcp, linux-qemu, linux-azure...

CVE-2025-71227 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

CVE-2026-22993 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

CVE-2026-23017 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

CVE-2026-23152 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-34743)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-34743 advisory. - XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to...

CVE-2026-39361

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validateenrichmenturl function in src/handler/http/request/enrichmenttable/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets e.g. "::1" not "::1". An authenticated...

Security Bulletin: IBM Operations Analytics – Log Analysis is affected by a security feature bypass due to Azure SDK for Java

Summary Azure SDK for Java is used by IBM Operations Analytics – Log Analysis as part of secure, asynchronous messaging and event streaming over AMQP Advanced Message Queuing Protocol. CVE‑2020‑16971. Vulnerability Details CVEID:CVE-2020-16971 DESCRIPTION: Azure SDK for Java Security Feature Bypa...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: coredns, rancher-agent, tekton-chains, trivy-operator, crossplane-provider-aws-kinesis, argo-workflows, kyverno-notation-aws, kyverno, pulumi, kubernetes-csi-external-snapshotter, kuma, cri-tools, clickhouse-operator, rancher, secrets-store-csi-driver-provider-azure,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: coredns, rancher-agent, tekton-chains, trivy-operator, crossplane-provider-aws-kinesis, argo-workflows, kyverno-notation-aws, kyverno, pulumi, kubernetes-csi-external-snapshotter, kuma, cri-tools, clickhouse-operator, rancher, secrets-store-csi-driver-provider-azure,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rolesanywhere-fips, knative-serving-fips, kserve, prometheus-podman-exporter, gitlab-kas, chartmuseum, fulcio, vault-fips, tkn-fips, fleet-server, vault, crossplane-provider-aws-dynamodb-fips, tekton-pipelines, weaviate, chaos-mesh, k3s,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rolesanywhere-fips, knative-serving-fips, kserve, prometheus-podman-exporter, gitlab-kas, chartmuseum, fulcio, vault-fips, tkn-fips, fleet-server, vault, crossplane-provider-aws-dynamodb-fips, tekton-pipelines, weaviate, chaos-mesh, k3s,...

CVE-2026-39361

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validateenrichmenturl function in src/handler/http/request/enrichmenttable/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets e.g. "::1" not "::1". An authenticated...

EUVD-2026-19869

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validateenrichmenturl function in src/handler/http/request/enrichmenttable/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets e.g. "::1" not "::1". An authenticated...

CVE-2026-39361

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validateenrichmenturl function in src/handler/http/request/enrichmenttable/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets e.g. "::1" not "::1". An authenticated...