ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.4.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-converter (>=8.4.0, <=8.8.2) +109 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.model (>=6.5.25, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.model MAVEN version =6.5.25, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.4.0, =8.8.2 and more Source cves: CVE-2026-33180 Source advisory: GHSA-P7M9-V2CM-2H7M...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-converter (>=4.0.0, <=4.0.1) +7 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.3), ca.uhn.hapi.fhir:hapi-fhir-converter (4.0.3) +8 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (4.0.3)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.convertors and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.3 - ca.uhn.hapi.fhir:hapi-fhir-converter...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +169 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.0.0, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.convertors MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.4.0, =6.8.0, =8.8.2 and more Source cves: CVE-2026-33180 Source advisory: GHSA-P7M9-V2CM-2H7M...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (5.6.5), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.6.0, <=5.6.5) +50 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.5.7)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 5.6.5 -...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.0.3, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3) +68 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.36)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.36 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.0.3, =6.0.0, =6.0.3, =6.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=6.4.2, <=6.4.7), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.2, <=6.4.7) +76 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (5.6.971)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version 5.6.971 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =6.4.2, =6.4.2, =6.4.2, =6.4.2,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=8.6.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-converter (>=8.6.0, <=8.8.2) +95 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3.support (>=6.6.0, <=6.8.2)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3.support MAVEN version =6.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.6.0, =8.8.2 and more Source cves: CVE-2026-33180 Source advisory: GHSA-P7M9-V2CM-2H7M...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.7.7, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (>=5.7.7, <=5.7.9) +79 more potentially affected by CVE-2026-33180 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.6.27)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.6.27 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =5.7.7, =5.7.7, =5.7.7,...

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...

aiexec-base (0.6.4), ano-code (>=0.1.6, <=0.1.11) +39 more potentially affected by CVE-2026-33123 via pypdf (5.1.0)

pypdf PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - aiexec-base 0.6.4 - ano-code =0.1.6, =0.0.1, =1.0.0, =0.6.0, =0.0.3, =0.1.0, =0.3.1, =3.3.6, =1.0.16, =0.2.37, =1.0.0, =0.1.11, =0.1.24 and more Sourc...

SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks

Summary The @aborruso/ckan-mcp-server MCP server provides tools including ckanpackagesearch and sparqlquery that accept a baseurl parameter, making HTTP requests to arbitrary endpoints without restriction. A CKAN portal client has no legitimate reason to contact cloud metadata or internal network...

GHSA-3XM7-QW7J-QC8V SSRF in @aborruso/ckan-mcp-server via base_url allows access to internal networks

Summary The @aborruso/ckan-mcp-server MCP server provides tools including ckanpackagesearch and sparqlquery that accept a baseurl parameter, making HTTP requests to arbitrary endpoints without restriction. A CKAN portal client has no legitimate reason to contact cloud metadata or internal network...

RHSA-2026:4720 Red Hat Security Advisory: 389-ds-base security update

Bulletin has no description...

BIT-AIRFLOW-2026-28779 Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications

Apache Airflow versions 3.1.0 through 3.1.7 session token token in cookies is set to path=/ regardless of the configured webserver baseurl or api baseurl. This allows any application co-hosted under the same domain to capture valid Airflow session tokens from HTTP request headers, allowing full...

Malware in yoshi-base

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Fedora: Security Advisory (FEDORA-2026-44c7458a92)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-6167-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-26096

Name of the Vulnerable Software and Affected Versions CKAN MCP Server versions prior to 0.4.85 Description The software allows making HTTP requests to arbitrary endpoints without restriction because it lacks URL validation on the base url parameter. This issue affects the ckan package search,...

PT-2026-28963

Уязвимость компонента Base браузеров Google Chrome и Microsoft Edge связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...