SUSE SLES15: dracut-saltboot / golang-github-QubitProducts-exporter_exporter / etc (SUSE-SU-2026:1013-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1013-1 advisory. dracut-saltboot: - Version update to 1.1.0: Retry DHCP requests up to 3 times bsc1253004...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: kine, nats, k3s, nats-top...

CVE-2026-29785 vulnerabilities

Vulnerabilities for packages: kine, nats, k3s, nats-top...

CVE-2026-29785 vulnerabilities

Vulnerabilities for packages: telegraf, nats, milvus, prometheus-nats-exporter, nats-fips, k3s, prometheus-nats-exporter-fips, nats-top, nats-top-fips, kine, rke2-runtime-fips, rke2-runtime...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: telegraf, nats, milvus, prometheus-nats-exporter, nats-fips, k3s, prometheus-nats-exporter-fips, nats-top, nats-top-fips, kine, rke2-runtime-fips, rke2-runtime...

Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: dracut-saltboot: Version update to 1.1.0: Retry DHCP requests up to 3 times bsc1253004 golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization and update golang-github-boynux-squidexporter: Version update from 1.6.0 to 1.13.0 with the...

SUSE-SU-2026:1013-1 Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: dracut-saltboot: - Version update to 1.1.0: Retry DHCP requests up to 3 times bsc1253004 golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization and update golang-github-boynux-squidexporter: - Version update from 1.6.0 to 1.13.0 wi...

Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization and update golang-github-boynux-squidexporter: Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes jscPED-14971: Added compatibility for Squid 6...

SUSE-SU-2026:1011-1 Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Non-customer-facing optimization and update golang-github-boynux-squidexporter: - Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes jscPED-14971: Added compatibility for Squi...

CVE-2026-32040

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

EUVD-2026-13328

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

CVE-2026-32040 OpenClaw < 2026.2.23 - HTML Injection via Unvalidated Image MIME Type in Data-URL Interpolation

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

CVE-2026-32040

OpenClaw contains an html injection vulnerability in the HTML session exporter for versions prior to 2026.2.23. The issue arises from unvalidated mimeType values in image content blocks inside data-URL contexts, which can break out of the img src data-URL and enable cross-site scripting when the ...

CVE-2026-32040

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

CVE-2026-32040: Improper Neutralization of Input During Web Page Generation

OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicious mimeType values in image content blocks. Attackers can craft session entries with specially crafted mimeType...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, cluster-proportional-autoscaler, otel-cli, crossplane-provider-aws-sqs, docker-compose, kubeflow-pipelines, kubernetes-csi-external-attacher, sbom-scorecard, restic, sqlexporter, terraform-provider-azapi, keda, addon-resizer, stakater-reloader,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, cluster-proportional-autoscaler, otel-cli, crossplane-provider-aws-sqs, docker-compose, kubeflow-pipelines, kubernetes-csi-external-attacher, sbom-scorecard, restic, sqlexporter, terraform-provider-azapi, keda, addon-resizer, stakater-reloader,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: kserve-rest-proxy, cluster-proportional-autoscaler, otel-cli, crossplane-provider-aws-sqs, docker-compose, kubeflow-pipelines, kubernetes-csi-external-attacher, sbom-scorecard, restic, sqlexporter, terraform-provider-azapi, keda, addon-resizer, stakater-reloader,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: deck-fips, chartmuseum-fips, kubeflow-katib, secrets-store-csi-driver-provider-aws, deck, kyverno-policy-reporter-plugins-trivy-fips, docker-compose, gitlab-runner-fips, crossplane-provider-aws-cloudwatchlogs-fips, pulumi-language-yaml, bank-vaults, cass-operator-fip...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: deck-fips, chartmuseum-fips, kubeflow-katib, secrets-store-csi-driver-provider-aws, deck, docker-compose, gitlab-runner-fips, crossplane-provider-aws-cloudwatchlogs-fips, pulumi-language-yaml, bank-vaults, cass-operator-fips, wal-g, cluster-api-provider-vsphere,...