CLEANSTART-2026-VG40041 Security fix for ghsa-5rfx-cp42-p624 applied in: keycloak 26.4.7-r3, keycloak 26.5.0-r0, keycloak 26.5.0-r2, kogito-apps 10.1.0-r0

ghsa-5rfx-cp42-p624 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MC82995 Security fix for ghsa-968p-4wvh-cqc8 applied in: jitsucom-jitsu 2.11.0-r2

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-MS01738 Security fix for ghsa-3x9g-8vmp-wqvf applied in: airflow-2 2.10.3-r3, airflow-2 2.11.2-r4, airflow-3 3.1.8-r4, airflow-3 3.2.1-r4

ghsa-3x9g-8vmp-wqvf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VN36504 Security fix for ghsa-8rfp-98v4-mmr6 applied in: tensorflow-gpu-jupyter 2.21.0-r8

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IB33850 Security fixes in crossplane-provider-keycloak-fips 2.21.1-r1

Package crossplane-provider-keycloak-fips version 2.21.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-jpcw-4wr7-c3vq...

EUVD-2026-44723

Composer is a dependency Manager for the PHP language. Prior to 1.10.28, 2.2.28, and 2.9.8, Composer\IO\BaseIO::loadConfiguration validates GitHub OAuth tokens with the regex ^.A-Za-z0-9+$ and interpolates rejected tokens into an UnexpectedValueException; GitHub Actions GITHUBTOKEN values using t...

ghs-community.com Improper Access Control vulnerability OBB-3800055

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ghs-werdau.de Improper Access Control vulnerability OBB-3767007

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in ghs-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76032e6dfef4a3b22bbc424659b031d4ecdcd4eb2c4cb325def2142071679bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3362 Malicious code in ghs-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76032e6dfef4a3b22bbc424659b031d4ecdcd4eb2c4cb325def2142071679bf8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ghs-portal.gcps1.com XSS vulnerability

Open Bug Bounty ID: OBB-612393 Description| Value ---|--- Affected Website:| ghs-portal.gcps1.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...