CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...

CVE-2026-82397 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy...

GHSA-8423-8FGW-73VQ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy...

GHSA-WWV5-G3V4-889X vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-rails, ruby3.2-rails, ruby3.4-rails, ruby3.3-rails...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-rails, ruby3.2-rails, ruby3.4-rails, ruby3.3-rails...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-rails, ruby3.2-rails, ruby3.4-rails, ruby3.3-rails...

CVE-2026-82659 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-H3HJ-CMCX-XC66 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: sqlpad, code-server, tileserver-gl, renovate, json-server, argo-workflows, prism, kubeflow-centraldashboard, opensearch-dashboards, langfuse...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: sqlpad, code-server, tileserver-gl, renovate, json-server, argo-workflows, prism, kubeflow-centraldashboard, opensearch-dashboards, langfuse...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: sqlpad, code-server, tileserver-gl, renovate, json-server, argo-workflows, prism, kubeflow-centraldashboard, opensearch-dashboards, langfuse...

CVE-2026-82562 vulnerabilities

Vulnerabilities for packages: sqlpad, code-server, tileserver-gl, renovate, json-server, argo-workflows, prism, kubeflow-centraldashboard, opensearch-dashboards, langfuse...

CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

CVE-2026-85396

rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entryextract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can craft archive entries with names like ../uploadbackup/owned.sh to write files outside the...

CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

SUSE CVE-2026-13608

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

SUSE CVE-2026-80229

When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

SUSE CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...