CVE-2026-44572 vulnerabilities

Vulnerabilities for packages: keep...

CVE-2026-44576 vulnerabilities

Vulnerabilities for packages: keep...

CVE-2026-44575 vulnerabilities

Vulnerabilities for packages: keep...

CVE-2026-44574 vulnerabilities

Vulnerabilities for packages: keep...

CVE-2026-44577 vulnerabilities

Vulnerabilities for packages: keep...

CVE-2026-44580 vulnerabilities

Vulnerabilities for packages: keep...

EUVD-2026-29212

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

CVE-2026-8321 inkeep agents runAuth Middleware runAuth.ts createDevContext authentication bypass

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

Unity Linux 20.1060e / 20.1070e Security Update: rubygem-puma (UTSA-2026-017658)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017658 advisory. Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that...

GHSA-V39H-62P7-JPJC vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, prism, serve, wazuh-dashboard-fips, kibana, langfuse-fips, arangodb, saf, argo-workflows, keep, tileserver-gl, langfuse, tileserver-gl-fips, keep-fips, gitlab-rails-ce-fips, vitess, opensearch-dashboards, drupal,...

CVE-2026-6322 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, prism, serve, wazuh-dashboard-fips, kibana, langfuse-fips, arangodb, saf, argo-workflows, keep, tileserver-gl, langfuse, tileserver-gl-fips, keep-fips, gitlab-rails-ce-fips, vitess, opensearch-dashboards, drupal,...

CVE-2026-6321 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, prism, serve, wazuh-dashboard-fips, kibana, langfuse-fips, arangodb, saf, argo-workflows, keep, tileserver-gl, langfuse, tileserver-gl-fips, keep-fips, gitlab-rails-ce-fips, vitess, opensearch-dashboards, drupal,...

OESA-2026-2276 python-python-multipart security update

A streaming multipart parser for Python Security Fixes: Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options UPLOADDIR and UPLOADKEEPFILENAME=True. An attacker can write uploaded...

CVE-2026-42561 vulnerabilities

Vulnerabilities for packages: litellm, semgrep, airflow, lmcache-cuda-12.8, airflow-core, wazuh-manager, keep-fips, reflex, keep, wazuh-manager-fips, synapse...

GHSA-2H4P-VJRC-8XPQ vulnerabilities

Vulnerabilities for packages: airflow, airflow-core, mlflow-fips, keep-fips, reflex, keep, pgadmin4, mlflow, pgadmin4-fips...

CVE-2026-44307 vulnerabilities

Vulnerabilities for packages: airflow, airflow-core, mlflow-fips, keep-fips, reflex, keep, pgadmin4, mlflow, pgadmin4-fips...

GHSA-PP6C-GR5W-3C5G vulnerabilities

Vulnerabilities for packages: litellm, semgrep, airflow, lmcache-cuda-12.8, airflow-core, wazuh-manager, keep-fips, reflex, keep, wazuh-manager-fips, synapse...

EUVD-2026-26712

Bandit is vulnerable to CL.CL request smuggling via unrejected duplicate Content-Length header...

CVE-2026-39805

Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers. 'Elixir.Bandit.Headers':getcontentlength/1 in lib/bandit/headers.ex uses List.keyfind/3, which returns only the first matching header. When a request...

EUVD-2026-24498

Oxia is a metadata store and coordination system. Prior to 0.16.2, a race condition between session heartbeat processing and session closure can cause the server to panic with send on closed channel. The heartbeat method uses a blocking channel send while holding a mutex, and under specific timin...