CLSA-2026-1779065202 TuxCare security update for karma (10 CVEs)

TuxCare rebuilt karma to address 10 CVEs. Fixed in 3.0.0-tuxcare.1...

CLSA-2026-1776299661 TuxCare security update for karma (7 CVEs)

TuxCare rebuilt karma to address 7 CVEs. Fixed in 4.0.1-tuxcare.1...

CLSA-2026-1774398085 TuxCare security update for grunt-karma (7 CVEs)

TuxCare rebuilt grunt-karma to address 7 CVEs. Fixed in 4.0.1-tuxcare.1...

CLSA-2026-1774657354 TuxCare security update for karma (3 CVEs)

TuxCare rebuilt karma to address 3 CVEs. Fixed in 4.1.0-tuxcare.1...

CLEANSTART-2026-UX44371 Security fixes in karma-fips 0.122-r0

Package karma-fips version 0.122-r0 fixes 1 vulnerabilities: ghsa-mqqf-5wvp-8fh8...

GHSA-3FXJ-6JH8-HVHX vulnerabilities

Vulnerabilities for packages: karma, karma-fips, telegraf, fluxcd-kustomize-mutating-webhook, cosmo-router-fips, cosmo-router, fluxcd-kustomize-mutating-webhook-fips, zitadel...

GHSA-9G5Q-2W5X-HMXF vulnerabilities

Vulnerabilities for packages: karma, karma-fips, telegraf, fluxcd-kustomize-mutating-webhook, cosmo-router-fips, cosmo-router, fluxcd-kustomize-mutating-webhook-fips, zitadel...

GHSA-RJR7-JGGH-PGCP vulnerabilities

Vulnerabilities for packages: karma, karma-fips, telegraf, fluxcd-kustomize-mutating-webhook, cosmo-router-fips, cosmo-router, fluxcd-kustomize-mutating-webhook-fips, zitadel...

org.webjars.npm:karma-phantomjs-launcher (>=1.0.1, <=1.0.4), org.webjars.npm:phantomjs-prebuilt (2.1.16) +1 more potentially affected by CVE-2026-56876 via org.webjars.npm:extract-zip (>=1.7.0, <=2.0.1)

org.webjars.npm:extract-zip MAVEN version =1.7.0, =1.0.1, =3.3.0, =7.1.0 Source cves: CVE-2026-56876 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17660778...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: minio-operator, aws-otel-collector, jaeger, karma, loki, splunk-otel-collector, minio, amazon-cloudwatch-agent-operator, k8sgpt, metrics-server, tempo, istio, grafana, opentelemetry-operator, prometheus-pushgateway, telegraf, opentelemetry-collector,...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: minio-operator, aws-otel-collector, jaeger, karma, loki, splunk-otel-collector, minio, tempo, istio, prometheus-pushgateway, telegraf, certificate-transparency, cloud-sql-proxy, minio-object-browser, datadog-agent, keda, mcp-grafana, grafana-pyroscope, mc, trillian...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: minio-operator, aws-otel-collector, jaeger, karma, loki, splunk-otel-collector, minio, tempo, istio, prometheus-pushgateway, telegraf, certificate-transparency, cloud-sql-proxy, minio-object-browser, datadog-agent, keda, mcp-grafana, grafana-pyroscope, mc, trillian...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, newrelic-k8s-metadata-injection, karpenter-fips, external-secrets-operator-fips, goreleaser, nodetaint-fips, flux-image-automation-controller, aws-privateca-issuer-fips, newrelic-k8s-metadata-injection-fips, victorialogs-fips,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: flux-source-watcher, newrelic-k8s-metadata-injection, karpenter-fips, external-secrets-operator-fips, goreleaser, nodetaint-fips, flux-image-automation-controller, aws-privateca-issuer-fips, newrelic-k8s-metadata-injection-fips, victorialogs-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: flagger-fips, goose, crossplane-provider-aws-efs, amazon-ssm-agent, vault-secrets-operator, cadence-fips, commercial-grafana, newrelic-k8s-metadata-injection, k8s-device-plugin, redpanda, nri-mongodb, crossplane-provider-keycloak-fips, spire-controller-manager,...

CLEANSTART-2026-OH74241 Security fixes for GHSA-MQQF-5WVP-8FH8 applied in versions: 0.122-r0

Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

UBUNTU-CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...