GHSA-VW39-PJ36-HC59 vulnerabilities

Vulnerabilities for packages: zulu-psu...

GHSA-GGR8-5VV4-36MX vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GHSA-WCVJ-VPVW-9RR5 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, keycloak-fips, keycloak...

GHSA-P3V8-FM5P-V84H vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-RXW2-PC8J-VXWM

creationtimestamp| type| source ---|---|--- 2026-08-21 23:00:10+00:00| seen| https://t.me/pphmHackerNews/1828 2026-08-22 00:00:26+00:00| seen| https://t.me/pphmHackerNews/1828...

GHSA-MHH3-45V6-6VMH

creationtimestamp| type| source ---|---|--- 2026-08-21 23:00:10+00:00| seen| https://t.me/pphmHackerNews/1718 2026-08-22 00:00:27+00:00| seen| https://t.me/pphmHackerNews/1718...

GHSA-MHMQ-MMQJ-2V39

creationtimestamp| type| source ---|---|--- 2026-08-21 23:00:09+00:00| seen| https://t.me/pphmHackerNews/1832 2026-08-22 00:00:26+00:00| seen| https://t.me/pphmHackerNews/1832...

CVE-2026-73566

creationtimestamp| type| source ---|---|--- 2026-08-21 20:35:04+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m 2026-08-22 12:00:51+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa2m3bdg2n...

GHSA-RXHG-VCWW-2MPW

creationtimestamp| type| source ---|---|--- 2026-08-21 15:31:46+00:00| seen| https://gist.github.com/alon710/e119e0e3dc0dc9f08b09963cc2e8d5fb...

CLEANSTART-2026-AP22557 Security fixes in external-secrets-fips 2.7.0-r1

Package external-secrets-fips version 2.7.0-r1 fixes 5 vulnerabilities: CVE-2026-2303, ghsa-cp6g-7hqx-qxhp, ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g, ghsa-mpwr-8vm7-h73f...

CLEANSTART-2026-QB53329 Security fixes in local-static-provisioner-fips 2.7.0-r1

Package local-static-provisioner-fips version 2.7.0-r1 fixes 4 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, CVE-2025-52881, ghsa-cgrx-mc8f-2prm...

CLEANSTART-2026-YF94250 Security fixes in k8ssandra-client-fips 0.5.0-r7

Package k8ssandra-client-fips version 0.5.0-r7 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-p77j-4mvh-x3m3...

Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of GHSA-j658-c2gf-x6pq fix)

Summary Remote Code Execution RCE in velocityjs v2.1.6 via property-read to the Function constructor. This bypasses the fix for GHSA-j658-c2gf-x6pq "Prototype Pollution in set path assignment" — that advisory blocked constructor/proto/prototype only in the set assignment handler set.cjs, but...

ROOT-APP-NPM-GHSA-5C6J-R48X-RMVQ GHSA-5c6j-r48x-rmvq in @rootio/serialize-javascript - Patched by Root

Root has patched GHSA-5c6j-r48x-rmvq in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: argo-cd, kubernetes-dashboard, chisel, gptscript, cilium, nuclei, skaffold, gomplate, scorecard, buildkitd, melange, cilium-cli, guac, flux, splunk-otel-collector, datadog-agent, zarf, apko, opentelemetry-collector, helm, opentofu, trivy-operator, witness, osv-scanne...

Vim < 9.2.0597 Code Execution (GHSA-65p9-mwwx-7468)

The version of Vim installed on the remote host is prior to 9.2.0597. It is, therefore, affected by a vulnerability as referenced in the GHSA-65p9-mwwx-7468 advisory. - Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec as part of...

CLEANSTART-2026-EA72772 Security fixes for CVE-2024-7598, CVE-2025-13281, CVE-2025-1767, CVE-2025-47911, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, ghsa-4x4m-3c2p-qppc, ghsa-r6j8-c6r2-37rr applied in versions: 2.12.6-r0, 2.12.6-r1

Multiple security vulnerabilities affect the ip-masq-agent package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-R95X-QFJJ-FJJ2 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-45310

creationtimestamp| type| source ---|---|--- 2026-05-09 04:05:43+00:00| published-proof-of-concept| https://github.com/Hmbown/DeepSeek-TUI/security/advisories/GHSA-96ff-gc8g-wpvg...

GHSA-FW7P-63QQ-7HPR filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity

Point.MultiScalarMult failed to initialize its receiver. If the method was called on an initialized point that is not the identity point, MultiScalarMult produced an incorrect result. If the method was called on an uninitialized point, the behavior was undefined. In particular, if the receiver wa...