tools-python

Python library to parse, validate and create SPDX documents CI status Linux, macOS and Windows: Breaking changes v0.7 - v0.8 Please be aware that the upcoming 0.8 release has undergone a significant refactoring in preparation for the upcoming SPDX v3.0 release, leading to breaking changes in the...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

ndaal_public_SBOM_Auditor

ndaal SBOM Auditor A single-binary, offline web application to investigate SBOM Software Bill of Materials files. Upload an SBOM or import a folder of them, analyse each with an ensemble of independent tools, review the normalised findings in one local UI, and export the result in eight formats. ...

bom-view

BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...

CVE-2026-75140 vulnerabilities

Vulnerabilities for packages: opensearch, spdx-tools-java, nextflow, apache-tika...

GHSA-65R4-943X-97JJ vulnerabilities

Vulnerabilities for packages: opensearch, spdx-tools-java, nextflow, apache-tika...

[SECURITY] Fedora 45 Update: ocaml-spdx-licenses-1.5.0-2.fc45

spdxlicenses is an OCaml library aiming to provide an up-to-date and strict SPDX License Expression parser. It implements the format described in https://spdx.github.io/spdx-spec/appendix-IV-SPDX-license-expressions/...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: flyway, apache-tika, logstash, infinispan, scala, spark, apicurio-registry, apache-nifi-registry, trino, cass-config-builder, tez, sonarqube, keycloak, opensearch, wildfly, strimzi-kafka-operator, keycloak-config-cli, apache-nifi, gradle, akhq, spdx-tools-java,...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: flyway, apache-tika, logstash, infinispan, scala, spark, apicurio-registry, apache-nifi-registry, trino, cass-config-builder, tez, sonarqube, keycloak, opensearch, wildfly, strimzi-kafka-operator, keycloak-config-cli, apache-nifi, gradle, akhq, spdx-tools-java,...

CVE-2026-68497 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, flyway, apache-tika, logstash, infinispan, celeborn, scala, solr, apicurio-registry, spark, wavefront-proxy, zipkin, trino, thingsboard, nextflow, apache-pulsar, tez, sonarqube, kserve-modelmesh, ruby4.0-jrjackson, opensearch, wildfly,...

GHSA-WJGM-6HV5-3CVF vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, flyway, apache-tika, logstash, infinispan, celeborn, scala, solr, apicurio-registry, spark, wavefront-proxy, zipkin, trino, thingsboard, nextflow, apache-pulsar, tez, sonarqube, kserve-modelmesh, ruby4.0-jrjackson, opensearch, wildfly,...

GHSA-GX83-3VF8-GH7J vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, flyway, apache-tika, logstash, infinispan, celeborn, scala, solr, apicurio-registry, spark, wavefront-proxy, zipkin, trino, thingsboard, nextflow, apache-pulsar, tez, sonarqube, kserve-modelmesh, ruby4.0-jrjackson, opensearch, wildfly,...

CVE-2026-83557 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-oauth, flyway, apache-tika, logstash, infinispan, celeborn, scala, solr, apicurio-registry, spark, wavefront-proxy, zipkin, trino, thingsboard, nextflow, apache-pulsar, tez, sonarqube, kserve-modelmesh, ruby4.0-jrjackson, opensearch, wildfly,...

openSUSE 16 Security Update : syft (openSUSE-SU-2026:20928-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20928-1 advisory. Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier...

OPENSUSE-SU-2026:20928-1 Security update for syft

This update for syft fixes the following issues: Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier should distinguish between MySQL Cluster ndb and MySQL 3297 4907 @witchcraze - Catalog...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: flyway, apache-tika, logstash, infinispan, celeborn, scala, solr, apicurio-registry, spark, wavefront-proxy, apache-nifi-registry, zipkin, trino, cass-config-builder, thingsboard, nextflow, apache-pulsar, airflow, jenkins, tez, gradle-stage0, sonarqube,...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: nacos, knative-kafka-broker, pinot, logstash, py3-vllm-cuda-12.4, cass-config-builder, commercial-elasticsearch, confluent-kafka, thingsboard, elasticsearch-fips, dependency-track-apiserver, elasticsearch, tez, apache-nifi-registry, opensearch,...

Ubuntu: Security Advisory (USN-7654-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: ghidra, strimzi-kafka-operator, cassandra-reaper, apicurio-registry, kafka, hadoop-client-modules, camunda-zeebe, apache-nifi, jenkins-plugin-manager, druid, confluent-common-docker, celeborn, tez, confluent-kafka-jre-bcfips, opensearch, wildfly, jenkins,...

php:8.2 security update

php 8.2.28-1 - rebase to 8.2.28 8.2.25-1 - rebase to 8.2.25 RHEL-65837 8.2.13-1 - rebase to 8.2.13 RHEL-14699 - add %phpize and %phpconfig macros - move httpd/nginx wants directives to config files in /etc - php-fpm.conf: move include directive after global section following upstream example,...