GHSA-9G5Q-2W5X-HMXF vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook-fips, fluxcd-kustomize-mutating-webhook, cosmo-router-fips, karma-fips, telegraf, karma, zitadel, cosmo-router...

GHSA-RJR7-JGGH-PGCP vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook-fips, fluxcd-kustomize-mutating-webhook, cosmo-router-fips, karma-fips, telegraf, karma, zitadel, cosmo-router...

org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-56876 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)

org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-56876 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17660778...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: k8sgpt, karma, opentelemetry-operator, opentelemetry-collector-contrib, prometheus-pushgateway, mc, cloud-sql-proxy, certificate-transparency, tempo, amazon-cloudwatch-agent-operator, loki, fluent-bit-plugin-loki, keda, trillian, opentelemetry-collector, telegraf,...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: karma, grafana-pyroscope, prometheus-pushgateway, mc, cloud-sql-proxy, certificate-transparency, tempo, loki, keda, trillian, telegraf, minio-operator, istio, jaeger, aws-otel-collector, datadog-agent, minio-object-browser, splunk-otel-collector, mcp-grafana, minio...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: karma, grafana-pyroscope, prometheus-pushgateway, mc, cloud-sql-proxy, certificate-transparency, tempo, loki, keda, trillian, telegraf, minio-operator, istio, jaeger, aws-otel-collector, datadog-agent, minio-object-browser, splunk-otel-collector, mcp-grafana, minio...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: atlas-fips, commercial-expanso-edge, aws-privateca-issuer, commercial-chainloop-cli, nova-fips, aws-network-policy-agent, sftpgo-plugin-eventsearch, victoriametrics-cluster, actions-runner-controller, flux-source-controller-fips, smarter-device-manager,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: atlas-fips, commercial-expanso-edge, aws-privateca-issuer, commercial-chainloop-cli, nova-fips, aws-network-policy-agent, sftpgo-plugin-eventsearch, victoriametrics-cluster, actions-runner-controller, flux-source-controller-fips, smarter-device-manager,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, google-guest-agent-manager, litefs, local-static-provisioner-fips, crossplane-provider-aws-rolesanywhere-fips, vault-fips, syncthing, kubernetes-csi-external-resizer-fips, prometheus-redis-exporter-fips, cluster-api-provider-vsphere,...

CLEANSTART-2026-OH74241 Security fixes for GHSA-MQQF-5WVP-8FH8 applied in versions: 0.122-r0

Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

UBUNTU-CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

CVE-2026-25236 affects the PEAR PHP framework. The vulnerability is a SQL injection risk in karma queries caused by unsafe literal substitution for an IN (...) list. Root cause: unsafe literal handling in Karma DAMBLAN-related queries prior to version 1.33.0. Impact: potential SQL injection. Miti...

EUVD-2026-5199

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...