GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: gitea, coder-fips, argo-cd-fips, snyk-cli, frankenphp-8.2, nemo, kyverno-fips, gitlab-kas, cilium, kubescape, minio-fips, tekton-pipelines, fscrypt, kubescape-server-fips, flux-source-controller, knative-eventing-fips, prometheus-elasticsearch-exporter, traefik-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, minio, cert-manager, aactl, gitea, helm, mattermost, fscrypt, osv-scanner, cilium, kubernetes, kubernetes-dashboard, loki, k9s, cilium-cli, istio, containerd, spire-server, zarf, rancher, kine, kots, gitlab-kas, kyverno, kaf,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, witness, apko, scorecard, ko, osv-scanner, kubernetes, pulumi-kubernetes-operator, rancher-machine, istio, age, terraform-provider-azurerm, buildkitd, grype, flux-kustomize-controller, step-issuer, ksops, kubescape, docker, glab, cosign,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, minio, cert-manager, aactl, mattermost, helm, buildah, fscrypt, docker-cli-buildx, cilium, kubernetes, kubernetes-dashboard, loki, cilium-cli, istio, containerd, spire-server, rancher, kine, kots, podman, gitlab-kas, kyverno, kaf,...

ROOT-APP-NPM-SNYK-JS-AXIOS-6144788 SNYK-JS-AXIOS-6144788 in @rootio/axios - Patched by Root

Root has patched SNYK-JS-AXIOS-6144788 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-SNYK-JS-AXIOS-9403194 SNYK-JS-AXIOS-9403194 in @rootio/axios - Patched by Root

Root has patched SNYK-JS-AXIOS-9403194 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-SNYK-JS-AXIOS-6124857 SNYK-JS-AXIOS-6124857 in @rootio/axios - Patched by Root

Root has patched SNYK-JS-AXIOS-6124857 in the @rootio/axios package for Root:npm. Multiple fixed versions available...

0xpay-cc-sdk (>=0.0.8 <=0.1.0), 0xtrails (>=0.0.0-20251106131028 <=0.16.2) +7274 more potentially affected by CVE-2026-44496 via axios (>=1.0.0 <=1.15.2)

axios NPM version =1.0.0, =0.0.8, =0.0.0-20251106131028, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0, =0.0.2-beta.0, =8.0.5, =6.1.0, =0.0.0-canary-847463221a9a1bee28641d8c0ecfaca98ee142f6, =0.0.1-alpha.3, =0.0.1-alpha.4 and more Source cves: CVE-2026-44496 Source advisory: SNYK:JS-AXIOS-17172532...

arches (=8.0.0a1), avaintegration-metapackage (>=6.0.4.3 <=6.0.5.32) +47 more potentially affected by CVE-2026-35193 via django (>=6.0.0 <=6.0.5)

django PYPI version =6.0.0, =6.0.4.3, =2.0.0, =1.1.0, =0.1.0, =0.4.5 - django-ndr-core =0.70.2 - django-sb-simple-migrations =0.9.0 and more Source cves: CVE-2026-35193 Source advisory: SNYK:PYTHON-DJANGO-17151780...

11x-wagtail-blog (>=0.0.0 <=0.2.0), aldryn-django (>=5.0.2.0 <=5.1.5.0) +419 more potentially affected by CVE-2026-8404 via django (>=5.0.0 <=5.2.14)

django PYPI version =5.0.0, =0.0.0, =5.0.2.0, =0.0.15, =0.42.1, =1.0.0, =1.14.3, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.51 and more Source cves: CVE-2026-8404 Source advisory: SNYK:PYTHON-DJANGO-17151726...

@accounter/client (>=0.0.3 <=0.0.11-alpha-20260404002702-9340365def1af08a5cdbbf734a87d1d4839bdaff), @asamanvay/auth-service (>=0.0.2 <=0.0.4) +122 more potentially affected by CVE-2026-34077 via react-router (>=7.0.0 <=7.14.0-pre.0)

react-router NPM version =7.0.0, =0.0.3, =0.0.2, =3.5.2, =1.1.0, =1.0.1-MON-198808-web-js-deps-batch-1.0, =0.0.1, =3.4.9, =0.1.9, =1.27.1, =1.27.1, =0.3.1, =7.13.1-depup.0, =7.13.2-depup.0 and more Source cves: CVE-2026-34077 Source advisory: SNYK:JS-REACTROUTER-17138883...

@arc-laboratories/arclocale-compiler (=0.2.0-alpha.8), @iharkharytanovich/found (>=0.1.1 <=0.1.4) +8 more potentially affected by unknown CVE via ai-sdk-ollama (>=3.0.0 <=3.8.4)

ai-sdk-ollama NPM version =3.0.0, =0.1.1, =0.1.5, =0.4.2-canary-0ba39cdeb6, =0.1.303, =0.1.303, =0.1.303, =0.1.303, =0.4.2, =0.1.5, =1.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-AISDKOLLAMA-17146454...

@byside/llm (>=0.1.0 <=0.1.1), agentic-control (=1.1.0) potentially affected by unknown CVE via ai-sdk-ollama (=1.1.0)

ai-sdk-ollama NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ai-sdk-ollama and may be impacted: - @byside/llm =0.1.0, =0.1.1 - agentic-control =1.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-AISDKOLLAMA-17146454...

@activepieces/piece-vapi (>=0.0.1 <=0.0.2), @keyman500/voice-ai-sdk (>=0.1.0 <=1.1.0) +2 more potentially affected by unknown CVE via @vapi-ai/server-sdk (>=0.10.2 <=0.11.0)

@vapi-ai/server-sdk NPM version =0.10.2, =0.0.1, =0.1.0, =1.0.0, =1.1.0 Source cves: unknown CVE Source advisory: SNYK:JS-VAPIAISERVERSDK-17146457...

autotel-adapters (>=0.1.1 <=0.2.9), autotel-aws (>=0.4.0 <=0.12.9) +8 more potentially affected by unknown CVE via autotel (>=2.10.0 <=2.26.3)

autotel NPM version =2.10.0, =0.1.1, =0.4.0, =2.0.1, =0.0.2, =0.1.1, =0.2.0, =0.4.0, =0.1.1, =1.4.0, =0.2.0, =0.4.9 Source cves: unknown CVE Source advisory: SNYK:JS-AUTOTEL-17146458...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, hydra, minio, traefik, gitea, helm, cilium, kubernetes, kubernetes-dashboard, caddy, istio, ingress-nginx-controller, hubble, kine, kots, kyverno, opentelemetry-collector, zot, prometheus-operator, crossplane-provider-azure-storage,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, hydra, minio, traefik, gitea, helm, cilium, kubernetes, kubernetes-dashboard, caddy, istio, ingress-nginx-controller, hubble, kine, kots, kyverno, opentelemetry-collector, zot, prometheus-operator, crossplane-provider-azure-storage,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, hydra, minio, traefik, gitea, helm, cilium, kubernetes, kubernetes-dashboard, caddy, istio, ingress-nginx-controller, hubble, kine, kots, kyverno, opentelemetry-collector, zot, prometheus-operator, crossplane-provider-azure-storage,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, hydra, minio, traefik, gitea, helm, cilium, kubernetes, kubernetes-dashboard, caddy, istio, ingress-nginx-controller, hubble, kine, kots, kyverno, opentelemetry-collector, zot, prometheus-operator, crossplane-provider-azure-storage,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: vitess, nerdctl, argo-cd, flux, hydra, minio, traefik, gitea, helm, cilium, kubernetes, kubernetes-dashboard, caddy, istio, ingress-nginx-controller, hubble, kine, kots, kyverno, opentelemetry-collector, zot, prometheus-operator, crossplane-provider-azure-storage,...