8415 matches found
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: gitlab-cng, opal, openstack-horizon-2025.2, superset, gitlab-cng-fips, azureml-inference-server-http, crossplane-function-pythonic, lmcache-cuda-12.8, openstack-tempest-2025.1, vllm-openai-cuda-13.0, kserve, dask-kubernetes, ggshield, datadog-agent-fips,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: gitlab-cng, opal, openstack-horizon-2025.2, superset, gitlab-cng-fips, azureml-inference-server-http, crossplane-function-pythonic, lmcache-cuda-12.8, openstack-tempest-2025.1, vllm-openai-cuda-13.0, kserve, dask-kubernetes, ggshield, datadog-agent-fips,...
[SECURITY] Fedora 43 Update: restic-0.19.1-1.fc43
Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...
[SECURITY] Fedora 44 Update: restic-0.19.1-1.fc44
Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...
GHSA-J5G9-F88F-GFJ3 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.2, openstack-keystone-2025.1-fips, openstack-horizon-2026.1-fips, authentik-fips, kubeflow-pipelines-visualization-server, openstack-glance-2025.2, apache-beam-python-3.11-sdk, openstack-glance-2025.2-fips, openstack-placement-2025.2,...
CVE-2026-59939 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.2, openstack-keystone-2025.1-fips, openstack-horizon-2026.1-fips, authentik-fips, kubeflow-pipelines-visualization-server, openstack-glance-2025.2, apache-beam-python-3.11-sdk, openstack-glance-2025.2-fips, openstack-placement-2025.2,...
Linux Distros Unpatched Vulnerability : CVE-2026-54422
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic- python-agent, may be able to extract the credentials...
Linux Distros Unpatched Vulnerability : CVE-2026-66139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known. CVE-2026-66139 Note that Nessus relies on the presenc...
CVE-2026-54422
A flaw was found in OpenStack ironic-python-agent's bootc container deployment support. During bootc image deployment, the OCI registry pull secret was exposed to tenant-controlled container code running with host PID namespace visibility. A malicious bootc container image could read the operator...
CVE-2026-66138
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...
CVE-2026-66139
OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...
DEBIAN-CVE-2026-66139
OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...
CVE-2026-54422
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...
DEBIAN-CVE-2026-54422
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...
CVE-2026-54422
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...
UBUNTU-CVE-2026-66138
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...
UBUNTU-CVE-2026-66139
OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...
UBUNTU-CVE-2026-54422
In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, may be able to extract the credentials used to download it...
