CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, crossplane-provider-azure-storage, prometheus, gptscript, kots, gitea, nerdctl, fq, ingress-nginx-controller, k3s, external-secrets-operator, prometheus-operator, kyverno, crossplane-provider-aws-elasticache, helm, telegraf, hydra,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, crossplane-provider-azure-storage, prometheus, gptscript, kots, gitea, nerdctl, fq, ingress-nginx-controller, k3s, external-secrets-operator, prometheus-operator, kyverno, crossplane-provider-aws-elasticache, helm, telegraf, hydra,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, crossplane-provider-azure-storage, prometheus, gptscript, kots, gitea, nerdctl, fq, ingress-nginx-controller, k3s, external-secrets-operator, prometheus-operator, kyverno, crossplane-provider-aws-elasticache, helm, telegraf, hydra,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, crossplane-provider-azure-storage, prometheus, gptscript, kots, gitea, nerdctl, fq, ingress-nginx-controller, k3s, external-secrets-operator, prometheus-operator, kyverno, crossplane-provider-aws-elasticache, helm, telegraf, hydra,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, crossplane-provider-azure-storage, prometheus, gptscript, kots, gitea, nerdctl, fq, ingress-nginx-controller, k3s, external-secrets-operator, prometheus-operator, kyverno, crossplane-provider-aws-elasticache, helm, telegraf, hydra,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, crossplane-provider-azure-storage, prometheus, gptscript, kots, gitea, nerdctl, fq, ingress-nginx-controller, k3s, external-secrets-operator, prometheus-operator, kyverno, crossplane-provider-aws-elasticache, helm, telegraf, hydra,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, crossplane-provider-azure-storage, prometheus, gptscript, kots, gitea, nerdctl, fq, ingress-nginx-controller, k3s, external-secrets-operator, prometheus-operator, kyverno, crossplane-provider-aws-elasticache, helm, telegraf, hydra,...

Non-CA certificate accepted as intermediate issuer in public_key path validation

...

SUSE CVE-2026-48526

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the...

EUVD-2026-33166

A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular...

Linux Distros Unpatched Vulnerability : CVE-2026-10028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that...

DEBIAN-CVE-2026-10028

A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular...

CVE-2026-10028

A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular...

CVE-2026-10028

A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular...

CVE-2026-10028

A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain to an application that uses glib-networking with the GnuTLS backend enabled and performs certificate verification. This crafted chain, which contains circular...

DEBIAN-CVE-2026-48526

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the...

PYSEC-2026-179

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the...

PYSEC-0000-CVE-2026-48526

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the...

CVE-2026-48526

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the...

UBUNTU-CVE-2026-48526

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the...