851 matches found
CVE-2026-79921 vulnerabilities
Vulnerabilities for packages: bento-fips, keda, opentelemetry-collector-contrib-fips, sftpgo-plugin-pubsub, trufflehog-fips, trufflehog, nuclio-controller, minio-fips, dapr, keda-fips, telegraf, versitygw-fips, guac, minio, falcosidekick, dapr-fips, argo-events, argo-events-fips,...
CVE-2026-76757
CVE-2026-76757 affects the Drupal Gammu SMS Daemon contrib module across all versions (. ). The Drupal security team has marked the project as unsupported , and the known security flaw remains unaddressed by the maintainer. No specific root cause or affected function is identified in the provided...
CLEANSTART-2026-WP42827 Security fixes in opentelemetry-collector-contrib 0.159.0-r1
Package opentelemetry-collector-contrib version 0.159.0-r1 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...
CLEANSTART-2026-LU79721 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r1
Package opentelemetry-collector-contrib-fips version 0.158.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-DF04587 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r3
Package opentelemetry-collector-contrib-fips version 0.158.0-r3 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-IA07692 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r2
Package opentelemetry-collector-contrib-fips version 0.158.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-FB79569 Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r1
Package opentelemetry-collector-contrib-fips version 0.159.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-LD03070 Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r2
Package opentelemetry-collector-contrib-fips version 0.159.0-r2 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...
CLEANSTART-2026-WR36950 Security fixes in opentelemetry-collector-contrib 0.159.0-r2
Package opentelemetry-collector-contrib version 0.159.0-r2 fixes 2 vulnerabilities: CVE-2026-56864, CVE-2026-56865...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.159.0-0.1.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.159.0-0.1.1.hum1.src src Security Fixes:...
DRUPAL-CONTRIB-2026-116
This module enables you to create one or more multisites with highly granular page permissions. The module doesn't sufficiently sanitize HTML code contained in the page name when displayed in the built-in tree browser. This results in a cross-site scripting vulnerability that may allow attackers ...
DRUPAL-CONTRIB-2026-110
This module enables you to disable access to the /user/login form unless a secret key is provided. The module does not sufficiently restrict repeated attempts to guess that key, allowing brute-force attacks against the access-control mechanism...
DRUPAL-CONTRIB-2026-108
This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints. The module doesn't sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to...
DRUPAL-CONTRIB-2026-107
The module provides a permission that allows users to configure email templates containing Twig code. This permission was not marked as restricted. A site administrator might inadvertently grant this permission to less-trusted users. This would allow those users to execute Twig within email...
DRUPAL-CONTRIB-2026-105
This module enables site administrators to require CAPTCHA confirmation on specific pages. The module does not sufficiently validate its CAPTCHA verification cookies. Under certain circumstances, an unauthenticated user or automated bot can forge the cookie and bypass CAPTCHA verification entirel...
CVE-2026-16646
PanKM is a Drupal contrib module affected across all versions (. ). Drupal's security team has marked the project unsupported , indicating a known security issue that the maintainer has not fixed. The vulnerability is rated Critical by Drupal, with a CVSS 3.1 base score of 5.7 (Medium) (AV:N/AC:H...
DRUPAL-CONTRIB-2026-102
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons...
GO-2024-2900 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, tempo, opentelemetry-collector, opentelemetry-collector-fips...
GO-2024-3110 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, kubernetes-fips, gosu, node-feature-discovery, cadvisor, ctop, neuvector-scanner-fips, neuvector-fips, buildah, k3s, eks-distro, cluster-autoscaler-fips, grype, cadvisor-fips, cluster-autoscaler, runc, syft, grafana-alloy-fips,...