SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:23984-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23984-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. -...

AlmaLinux 9 : gimp (ALSA-2026:75575)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75575 advisory. gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file CVE-2026-90947 gimp: gimp: heap-based buffer overflow in ICO loader vi...

Linux Distros Unpatched Vulnerability : CVE-2026-104036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but...

PT-2026-106790

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-form-builder versions prior to 3.90.0 @payloadcms/plugin-form-builder versions prior to 4.0.0-canary.34 Description An issue exists where the plugin mishandles crafted form submission payloads, allowing an unauthenticated...

PT-2026-107297

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 3.3.1 Backstage versions prior to 3.4.1 Backstage versions prior to 4.0.3 Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains improper task state validation within...

abilian-sbe (>=1.1.0, <=1.1.12), acfx (>=0.3.1, <=0.3.7.dev2) +766 more potentially affected by CVE-2026-102598 via werkzeug (>=3.0.0, <=3.1.8)

werkzeug PYPI version =3.0.0, =1.1.0, =0.3.1, =4.11.0, =2.9.0, =1.0.0, =0.1.3, =0.2.4.1, =0.0.1, =1.3.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-102598 Source advisory: OSV:GHSA-G6X2-HCCM-HH4M...

NPM: simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

NPM: simple-git: unsafe-operations plugin bypass via git long-option abbreviation --receive-p/--exe - command execution residual of CVE-2026-28291 vulnerability discovered by ? in WordPress Npm simple-git versions = 3.36.0...

NPM: Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)

NPM: Seroval: fromJSON Promise thenable assimilation invokes plugin-produced callables bypass of GHSA-mv8w-475r-vwqw vulnerability discovered by ? in WordPress Npm seroval versions = 0.12.0, = 1.6.0...

GHSA-P6VX-979V-RG4C Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)

A fulfilled Promise node deserialized by fromJSON can trigger unintended invocation of a plugin-produced callable through native ECMAScript thenable assimilation. This bypasses the type-confusion fix in [email protected] GHSA-mv8w-475r-vwqw / CVE-2026-59940 and affects every plugin-capable release fr...

Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)

A fulfilled Promise node deserialized by fromJSON can trigger unintended invocation of a plugin-produced callable through native ECMAScript thenable assimilation. This bypasses the type-confusion fix in [email protected] GHSA-mv8w-475r-vwqw / CVE-2026-59940 and affects every plugin-capable release fr...

GHSA-W3VV-58GJ-GW77 Nx daemon and plugin worker sockets are accessible to other local users

Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory with default permissions, so any other user on the same machine can connect to them. The daemon accepts a PROCESSINBACKGROUND request that names a module to load and invokes its defaul...

com.codbex.atlas:codbex-atlas-application (>=2.77.0, <=2.79.0), com.codbex.gaia:codbex-gaia-application (>=2.68.0, <=2.70.0) +19 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.26.1)

net.snowflake:snowflake-jdbc MAVEN version 3.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.77.0, =2.68.0, =2.60.0, =2.65.0, =2.59.0, =2.61.0, =3.21....

com.snowflake:snowflake-maven-plugin (0.1.0), org.liquibase:liquibase-cdi (>=4.19.1, <=4.20.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.27)

net.snowflake:snowflake-jdbc MAVEN version 3.13.27 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowflake-maven-plugin 0.1.0 - org.liquibase:liquibase-cdi =4.19.1, =4.20.0 Source cves...

enterprise-integrated-channels (0.1.30), omnata-cli (>=0.1.3, <=0.2.0) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.7.0)

snowflake-connector-python PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - enterprise-integrated-channels 0.1.30 - omnata-cli =0.1.3, =0.3.30, =2.0.0rc1, =2.1.2 Source cves:...

omnata-cli (>=0.1.8, <=0.1.12), omnata-plugin-devkit (>=0.1.2, <=0.1.95) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.2.0)

snowflake-connector-python PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.8, =0.1.2, =0.0.16, =0.0.1a2, =1.1.1, =1.2.5 Source cves: CVE-2026-86597 Source advisory:...

inthub-cli (>=0.1.4, <=0.1.26), omnata-plugin-devkit (>=0.5.3, <=0.11.0) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.0)

snowflake-connector-python PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - inthub-cli =0.1.4, =0.5.3, =0.5.0a112, =0.11.9 - snowflake-cli-labs 3.0.0rc0 Source cves: CVE-2026-86597...

io.kestra.plugin:plugin-jdbc-snowflake (>=0.16.0, <=0.16.1), io.squashql:squashql-snowflake (>=1.17.1, <=1.18.2) +2 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.15.1)

net.snowflake:snowflake-jdbc MAVEN version 3.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake =0.16.0, =1.17.1, =445, =446 Source cves: CVE-2026-86597 Source...

io.kestra.plugin:plugin-jdbc-snowflake (0.15.0), io.squashql:squashql-snowflake (>=1.15.0, <=1.17.0) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.15.0)

net.snowflake:snowflake-jdbc MAVEN version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake 0.15.0 - io.squashql:squashql-snowflake =1.15.0, =440, =444...

org.liquibase:liquibase-cdi (>=4.13.0, <=4.14.0), org.liquibase:liquibase-maven-plugin (4.13.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.20)

net.snowflake:snowflake-jdbc MAVEN version 3.13.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.liquibase:liquibase-cdi =4.13.0, =4.14.0 - org.liquibase:liquibase-maven-plugin 4.13.0 Source cve...

com.snowflake:snowpark (1.9.0), io.github.stewartbryson.snowflake:io.github.stewartbryson.snowflake.gradle.plugin (>=2.1.5, <=2.1.11) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.1)

net.snowflake:snowflake-jdbc MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowpark 1.9.0 -...