GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: cortex-fips, azure-workload-identity-webhook, kapp-controller, gitlab-operator, cloud-provider-aws, envoy-gateway, descheduler-fips, tekton-chains, zarf, coredns-fips, kube-metrics-adapter-fips, teleport-operator-fips, blob-csi-fips, cloud-provider-aws-fips,...

PT-2026-21862

The SPIP interface traduction objets plugin versions prior to 4.3.3 contain an authenticated SQL injection vulnerability in interface traduction objets pipelines.php. When handling translation requests, the plugin reads the id parent parameter from user-supplied input and concatenates it directly...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: code-server, tileserver-gl, py3-jupyterlab, opensearch-dashboards, vitess, lerna, pulumi, saf, kubeflow-pipelines, pnpm-stage0, kubeflow-katib, prism, sqlpad, npm, node-gyp, renovate...

CVE-2026-26960 vulnerabilities

Vulnerabilities for packages: code-server, tileserver-gl, py3-jupyterlab, opensearch-dashboards, vitess, lerna, pulumi, saf, kubeflow-pipelines, pnpm-stage0, kubeflow-katib, prism, sqlpad, npm, node-gyp, renovate...

GHSA-JMR7-XGP7-CMFJ vulnerabilities

Vulnerabilities for packages: tileserver-gl, saf, kubeflow-pipelines, jitsucom-jitsu, prism, renovate...

CVE-2025-69873 vulnerabilities

Vulnerabilities for packages: tileserver-gl, py3-jupyterlab, serve, opensearch-dashboards, vitess, saf, kubeflow-pipelines, eslint, langfuse, kubeflow-katib, kubeflow-centraldashboard, prism, sqlpad, argo-workflows, renovate...

GHSA-2G4F-4PWH-QVX6 vulnerabilities

Vulnerabilities for packages: tileserver-gl, py3-jupyterlab, serve, opensearch-dashboards, vitess, saf, kubeflow-pipelines, eslint, langfuse, kubeflow-katib, kubeflow-centraldashboard, prism, sqlpad, argo-workflows, renovate...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: tileserver-gl, saf, kubeflow-pipelines, jitsucom-jitsu, prism, renovate...

CVE-2026-1440

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

GHSA-2G4F-4PWH-QVX6 vulnerabilities

Vulnerabilities for packages: renovate, serve, eslint, gemini-cli, langfuse, drupal, gitlab-rails-ce-fips, arangodb, opensearch-dashboards-fips, gitlab-rails-ce, kibana, saf, authentik, py3-jupyterlab, opensearch-dashboards, tileserver-gl-fips, tensorflow-cpu-jupyter, vitess, tileserver-gl,...

CVE-2026-26960 vulnerabilities

Vulnerabilities for packages: renovate, lerna, drupal, gitlab-rails-ce-fips, npm, opensearch-dashboards-fips, pnpm-stage0, actions-runner, gitlab-rails-ce, kibana, saf, py3-jupyterlab, graalvm, opensearch-dashboards, tileserver-gl-fips, tensorflow-cpu-jupyter, vitess, tileserver-gl,...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: langfuse-fips, tileserver-gl-fips, dbgate, renovate, jitsucom-jitsu, tileserver-gl, langfuse, kibana, librechat, prism, saf, dbgate-fips, kubeflow-pipelines...

CVE-2025-69873 vulnerabilities

Vulnerabilities for packages: renovate, serve, eslint, gemini-cli, langfuse, drupal, gitlab-rails-ce-fips, arangodb, opensearch-dashboards-fips, gitlab-rails-ce, kibana, saf, authentik, py3-jupyterlab, opensearch-dashboards, tileserver-gl-fips, tensorflow-cpu-jupyter, vitess, tileserver-gl,...

GHSA-JMR7-XGP7-CMFJ vulnerabilities

Vulnerabilities for packages: langfuse-fips, tileserver-gl-fips, dbgate, renovate, jitsucom-jitsu, tileserver-gl, langfuse, kibana, librechat, prism, saf, dbgate-fips, kubeflow-pipelines...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: renovate, lerna, drupal, gitlab-rails-ce-fips, npm, opensearch-dashboards-fips, pnpm-stage0, actions-runner, gitlab-rails-ce, kibana, saf, py3-jupyterlab, graalvm, opensearch-dashboards, tileserver-gl-fips, tensorflow-cpu-jupyter, vitess, tileserver-gl,...

CVE-2026-1440

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

CVE-2026-1440

The CVE-2026-1440 entry concerns the Graylog Web Interface console (version 2.2.3) with a Reflected XSS flaw caused by insufficient sanitization/escaping of HTML output. Several endpoints include URL segments directly in responses without proper encoding, enabling an attacker to inject and execut...

CVE-2026-1440 Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

CVE-2026-1440 Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

CVE-2026-1440 Reflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...