CVE-2026-42038 vulnerabilities

Vulnerabilities for packages: awx, lerna, wazuh-dashboard-fips, gitlab-rails-ce-fips, kibana, prism, langfuse-fips, kubeflow-katib, nextcloud-server, jitsucom-jitsu, gitlab-rails-ce, kubeflow-centraldashboard, redisinsight, wazuh-dashboard, opensearch-dashboards-fips, opensearch-dashboards,...

CVE-2026-42042 vulnerabilities

Vulnerabilities for packages: awx, lerna, wazuh-dashboard-fips, gitlab-rails-ce-fips, kibana, prism, langfuse-fips, kubeflow-katib, nextcloud-server, jitsucom-jitsu, gitlab-rails-ce, kubeflow-centraldashboard, redisinsight, wazuh-dashboard, opensearch-dashboards-fips, opensearch-dashboards,...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-41139 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips...

CVE-2026-41139 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-35554 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, logstash, opensearch, debezium-connector-vitess, strimzi-kafka-operator, apache-nifi, thingsboard, debezium-connector-db2, debezium-connector-spanner, wildfly, druid, debezium, debezium-connector-ibmi...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, logstash, opensearch, debezium-connector-vitess, strimzi-kafka-operator, apache-nifi, thingsboard, debezium-connector-db2, debezium-connector-spanner, wildfly, druid, debezium, debezium-connector-ibmi...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: debezium, logstash, opensearch, debezium-connector-db2, knative-kafka-broker-fips, debezium-connector-informix, debezium-connector-vitess, druid, hono, thingsboard, debezium-connector-spanner, strimzi-kafka-operator-fips, debezium-connector-ibmi, knative-kafka-broker...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, kibana, opensearch-dashboards-fips...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, kibana, opensearch-dashboards-fips...

CLEANSTART-2026-CB01846 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.6.1-r0, 2.6.1-r1, 2.6.1-r7

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YG73853 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.5.1-r0, 2.5.1-r1, 2.5.1-r2

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JK84667 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.7.0-r7, 2.7.0-r8

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

alation-ai-agent-mcp (>=0.7.0, <=0.12.0), carton-mcp (>=0.1.80, <=0.1.83) +11 more potentially affected by CVE-2026-27124 via fastmcp (2.9.0)

fastmcp PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alation-ai-agent-mcp =0.7.0, =0.1.80, =0.1.0, =1.0.17, =0.1.24, =0.1.2, =1.7.1, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2026-27124 Source advisory...