CVE-2026-50560 vulnerabilities

Vulnerabilities for packages: thingsboard, neo4j, docker-selenium, trino, celeborn, infinispan, sonarqube, opensearch, druid, kserve-modelmesh, management-api-for-apache-cassandra-5.0, spark, apache-pulsar, flyway, strimzi-kafka-operator...

GHSA-563Q-J3CM-6JXM vulnerabilities

Vulnerabilities for packages: thingsboard, neo4j, docker-selenium, trino, celeborn, infinispan, sonarqube, opensearch, druid, kserve-modelmesh, management-api-for-apache-cassandra-5.0, spark, apache-pulsar, flyway, strimzi-kafka-operator...

GHSA-HVCG-QMG6-JM4C vulnerabilities

Vulnerabilities for packages: celeborn, infinispan, opensearch, management-api-for-apache-cassandra-5.0, logstash, tez, kserve-modelmesh, apache-pulsar, thingsboard, neo4j, docker-selenium, druid, wildfly, flyway, trino, keycloak, sonarqube, spark, strimzi-kafka-operator...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow, mitmproxy, k8s-sidecar, jupyter-base-notebook, datadog-agent, kubeflow-volumes-web-app, in-toto, mlflow, mycli, kubeflow-jupyter-web-app, py3-cassandra-medusa, semgrep, superset, ggshield, dask-kubernetes, kserve...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: celeborn, infinispan, opensearch, management-api-for-apache-cassandra-5.0, logstash, cassandra, tez, kserve-modelmesh, apache-pulsar, thingsboard, neo4j, docker-selenium, druid, flyway, trino, keycloak, sonarqube, solr, spark...

GHSA-C653-97M9-RCG9 vulnerabilities

Vulnerabilities for packages: celeborn, infinispan, opensearch, management-api-for-apache-cassandra-5.0, logstash, cassandra, tez, kserve-modelmesh, apache-pulsar, thingsboard, neo4j, docker-selenium, druid, flyway, trino, keycloak, sonarqube, solr, spark...

CVE-2026-42563 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

GHSA-897W-FCG9-F6XJ vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

CVE-2026-42305 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

GHSA-9277-MP7X-85JF vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

CVE-2026-42563 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

CVE-2026-42305 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

GHSA-897W-FCG9-F6XJ vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

GHSA-9277-MP7X-85JF vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve...

CLEANSTART-2026-PK73499 Security fixes for CVE-2026-5588, CVE-2026-5598, ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-c3fc-8qff-9hwx, ghsa-fghv-69vj-qj49, ghsa-p93r-85wp-75v3, ghsa-prj3-ccx8-p6x4, ghsa-wg6q-6289-32hp, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16, 0.9.0-r1

Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-28684 vulnerabilities

Vulnerabilities for packages: ggshield, superset, kserve...

GHSA-MF9W-MJ56-HR94 vulnerabilities

Vulnerabilities for packages: ggshield, superset, kserve...

CVE-2026-28684 vulnerabilities

Vulnerabilities for packages: litellm, localstack, authentik-fips, authentik, keep, superset, kserve, keep-fips, ggshield...

GHSA-MF9W-MJ56-HR94 vulnerabilities

Vulnerabilities for packages: litellm, localstack, authentik-fips, authentik, keep, superset, kserve, keep-fips, ggshield...

CLEANSTART-2026-EZ90321 Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper s...

Multiple security vulnerabilities affect the kserve-modelmesh package. Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid...