CVE-2026-56820 vulnerabilities

Vulnerabilities for packages: thingsboard, tez, cassandra, management-api-for-apache-cassandra-5.0...

CVE-2026-56821 vulnerabilities

Vulnerabilities for packages: thingsboard, tez, cassandra, management-api-for-apache-cassandra-5.0...

CVE-2026-56822 vulnerabilities

Vulnerabilities for packages: thingsboard, tez, cassandra, management-api-for-apache-cassandra-5.0...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: flyway, spark, cloudwatch-exporter, infinispan, logstash, celeborn, apache-activemq-artemis, apicurio-registry, opensearch, akhq, keycloak, apache-pulsar, druid, zipkin, tez, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, thingsboard,...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

SUSE CVE-2026-10050

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...

SUSE CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

CVE-2026-53600 vulnerabilities

Vulnerabilities for packages: zed...

GHSA-89XV-2M56-2M9X vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, homepage, langfuse, keep-fips, keep, peerdb-ui, langfuse-fips...

GHSA-R7WM-3CXJ-WFF9 vulnerabilities

Vulnerabilities for packages: flyway, spark, cass-config-builder, scala, apache-nifi-registry, infinispan, logstash, gradle, apicurio-registry, opensearch, spdx-tools-java, akhq, druid, tez, strimzi-kafka-operator, dependency-track, sonarqube, keycloak-config-cli, wildfly, apache-nifi...

GHSA-V56Q-MH7H-F735 vulnerabilities

Vulnerabilities for packages: vitess, rancher-api-ui, nextcloud-server...

GHSA-5QHF-9PHG-95M2 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-59880 vulnerabilities

Vulnerabilities for packages: arangodb, nextcloud-server, vitess, authentik-fips, keep, keep-fips, rancher-api-ui, authentik...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

GHSA-956X-8GVW-WG5V vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-16221 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, argo-workflows, renovate, langfuse, prism, yaml-language-server, tileserver-gl, vitess...

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

SUSE CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

SUSE CVE-2026-59919

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...