CLEANSTART-2026-JG22599 Security fixes in maven 3.9.14-r1

Package maven version 3.9.14-r1 fixes 1 vulnerabilities: CVE-2025-67030...

CLEANSTART-2026-YQ07393 Security fixes in kafka-fips 3.8.1-r6

Package kafka-fips version 3.8.1-r6 fixes 6 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-qh8g-58pp-2wxh, ghsa-wjpw-4j6x-6rwh, CVE-2024-6763, CVE-2025-11143...

CLEANSTART-2026-DV38059 Security fixes in k8ssandra-client-fips 0.6.4-r6

Package k8ssandra-client-fips version 0.6.4-r6 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-MI80887 Security fixes in clamav 0.99.3-r0

Package clamav version 0.99.3-r0 fixes 7 vulnerabilities: CVE-2017-12374, CVE-2017-12375, CVE-2017-12376, CVE-2017-12377, CVE-2017-12378...

CLEANSTART-2026-WE18899 Security fixes in argo-workflows 3.7.9-r0

Package argo-workflows version 3.7.9-r0 fixes 2 vulnerabilities: ghsa-37cx-329c-33x3, CVE-2026-25934...

CLEANSTART-2026-AR53211 Security fixes in kubernetes-dns-node-cache 1.24.1-r0

Package kubernetes-dns-node-cache version 1.24.1-r0 fixes 2 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-GB17688 Security fixes in postgresql15 15.2-r0

Package postgresql15 version 15.2-r0 fixes 1 vulnerabilities: CVE-2022-41862...

CLEANSTART-2026-ID74762 Security fixes for CVE-2026-41080, CVE-2026-45186 applied in versions: 2.35.9-r1, 2.35.9-r2

Multiple security vulnerabilities affect the aws-cli package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HP74907 Security fixes for CVE-2025-22868, CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39822, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42505, CVE-2026-56852, ghsa-6v2p-p543-phr9 applied in versions: 1.1.0-r0, 1.1.0-r1, 1.1.0-r2, 1.4.10-r0, 1.4.13-r0, 1.4.14-r0, 1.4.8-r0

Multiple security vulnerabilities affect the stakater-reloader package. These issues are resolved in later releases. See references for individual vulnerability details...

MAL-2026-10301 Malicious code in fflc-updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0da486d000821631873ccd6fbb8eac17ee6dc94e8802946ef9d4cd288048e95 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

OPENSUSE-SU-2026:11240-1 python313-websockets-16.0-2.1 on GA media

These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed...

MAL-2026-7298 Malicious code in icons.generated (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8757 Malicious code in slnstep8375 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8151 Malicious code in oaibo825590 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-6414 Malicious code in two-factor-prompt-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ebb96758f051c0a5a1c8fe97fb05c898f2489f4567fb64fbd271eb103dcadc Package self-identifies as a dependency-confusion proof-of-concept aimed at an internal/private package name. The postinstall script postinstall.js...

ROOT-APP-GOBINARY-CVE-2025-30204 CVE-2025-30204 in rootio-github.com/golang-jwt/jwt/v4 - Patched by Root

Root has patched CVE-2025-30204 in the rootio-github.com/golang-jwt/jwt/v4 package for Root:Go. Multiple fixed versions available...

MAL-2026-6047 Malicious code in @mastra/voice-google-gemini-live (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7292d326aee198d9a062ea2ac2675a0c48058faacb97aee1b862c8605b9a0658 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

OPENSUSE-SU-2026:10990-1 python-M2Crypto-doc-0.48.0-1.1 on GA media

These are all security issues fixed in the python-M2Crypto-doc-0.48.0-1.1 package on the GA media of openSUSE Tumbleweed...

DEBIAN-CVE-2026-46275

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciuart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to Use-After-Free UAF and Null Pointer Dereference NPD conditions were observed in the lifecycle management of hciuart. The primary...

UBUNTU-CVE-2026-43157

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps rxfcpfvfbmap and txfcpfvfbmap are allocated by cgxlmacinit but never freed in cgxlmacexit. Unbinding and rebinding the driver therefore triggers kmemleak:...