GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: buildah, newrelic-fluent-bit-output, prometheus-alertmanager, kratos, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, temporal-server, tetragon, vertical-pod-autoscaler, polaris, cis-operator, nri-kubernetes, nsc, cass-operator,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: buildah, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, temporal-server, tetragon, vertical-pod-autoscaler, polaris, cis-operator, nri-kubernetes, nsc, cass-operator, knative-eventing,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, buildah, newrelic-fluent-bit-output, prometheus-alertmanager, step-ca, gitlab-pages, chartmuseum, dask-gateway, fscrypt, kpt, crossplane-provider-aws-kinesis, openfga, sftpgo-plugin-eventstore, argo-events, minio, azcopy,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, buildah, newrelic-fluent-bit-output, prometheus-alertmanager, step-ca, gitlab-pages, chartmuseum, dask-gateway, fscrypt, kpt, crossplane-provider-aws-kinesis, openfga, sftpgo-plugin-eventstore, argo-events, minio, azcopy,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: karpenter-fips, kubernetes-dashboard-auth-fips, cephcsi, memcached-exporter, gogatekeeper, terragrunt, minify, nsc-fips, wuzz, grafana-mimir, teleport-operator-fips, request-1279, crossplane-provider-aws-cloudformation, yace, aws-network-policy-agent-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: karpenter-fips, kubernetes-dashboard-auth-fips, cephcsi, memcached-exporter, gogatekeeper, terragrunt, grafana-mimir, teleport-operator-fips, request-1279, crossplane-provider-aws-cloudformation, consul, longhorn-engine, cloud-provider-azure-fips,...

Important: Red Hat Security Advisory: opentelemetry-collector security update

An update for opentelemetry-collector is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

ALSA-2026:4177 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 For more details about the security issues,...

ALSA-2026:4174 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls CVE-2025-68121 For more details about the security issues,...

RHEL 9 : opentelemetry-collector (RHSA-2026:4177)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:4177 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query...

RHEL 10 : opentelemetry-collector (RHSA-2026:4174)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:4174 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: golang: net/url: Memory exhaustion in query...

Linux Distros Unpatched Vulnerability : CVE-2025-13350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux 6.8 GA retains the legacy AFUNIX garbage collector but backports upstream commit 8594d9b85c07 afunix: Don't call skbget for OOB skb. When orphaned...

Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector

Summary Multiple vulnerabilities were addressed in IBM StreamSets Data Collector version 7.2.0 Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, eve...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...