CVE-2026-42036 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce, wazuh-dashboard, jitsucom-jitsu, redisinsight, kubeflow-centraldashboard, langfuse, langfuse-fips, nextcloud-server, opensearch-dashboards, kubeflow-katib, awx, lerna, gitlab-rails-ce-fips, saf, kibana, opensearch-dashboards-fips,...

CVE-2026-42033 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce, wazuh-dashboard, jitsucom-jitsu, redisinsight, kubeflow-centraldashboard, langfuse, langfuse-fips, nextcloud-server, opensearch-dashboards, kubeflow-katib, awx, lerna, gitlab-rails-ce-fips, saf, kibana, opensearch-dashboards-fips,...

GHSA-Q8QP-CVCW-X6JJ vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, langfuse-fips, nextcloud-server, opensearch-dashboards, gitlab-rails-ce-fips, saf, prism, wazuh-dashboard, jitsucom-jitsu, redisinsight, kubeflow-katib, lerna, kibana, langfuse, librechat, wazuh-dashboard-fips, opensearch-dashboards-fips,...

CVE-2026-42040 vulnerabilities

Vulnerabilities for packages: prism, gitlab-rails-ce, wazuh-dashboard, jitsucom-jitsu, redisinsight, kubeflow-centraldashboard, langfuse, langfuse-fips, nextcloud-server, opensearch-dashboards, kubeflow-katib, awx, lerna, gitlab-rails-ce-fips, saf, kibana, opensearch-dashboards-fips,...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-41139 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, wazuh-dashboard, opensearch-dashboards...

CVE-2026-41139 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-35554 vulnerabilities

Vulnerabilities for packages: debezium, debezium-connector-vitess, wildfly, apache-nifi, debezium-connector-db2, debezium-connector-ibmi, debezium-connector-informix, opensearch, druid, debezium-connector-spanner, thingsboard, logstash, strimzi-kafka-operator...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: debezium, debezium-connector-vitess, wildfly, apache-nifi, debezium-connector-db2, debezium-connector-ibmi, debezium-connector-informix, opensearch, druid, debezium-connector-spanner, thingsboard, logstash, strimzi-kafka-operator...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: hono, strimzi-kafka-operator, apache-nifi, thingsboard, opensearch, opensearch-fips, debezium, wildfly, strimzi-kafka-operator-fips, debezium-connector-ibmi, knative-kafka-broker-fips, knative-kafka-broker, seata, druid, debezium-connector-db2,...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, wazuh-dashboard, opensearch-dashboards...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, kibana, opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, kibana, opensearch-dashboards-fips, opensearch-dashboards...

CLEANSTART-2026-CB01846 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.6.1-r0, 2.6.1-r1, 2.6.1-r7

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YG73853 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.5.1-r0, 2.5.1-r1, 2.5.1-r2

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...