GHSA-G68W-W4H2-FR59 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...

GHSA-VF33-88PF-HWP3 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-35539

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment...

GHSA-8HFC-FQ58-R658 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-8HFC-FQ58-R658 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, camunda, apache-nifi-registry...

GHSA-MGVC-8Q2H-5PGC vulnerabilities

Vulnerabilities for packages: camunda-zeebe, camunda, apache-nifi-registry...

GHSA-M959-CC7F-WV43 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, datadog-agent, jupyter-base-notebook, ggshield, kserve, mycli, in-toto, dask-kubernetes, py3-cassandra-medusa, semgrep, k8s-sidecar, kubeflow-volumes-web-app, airflow, mitmproxy...

GHSA-PQ2Q-RCW4-3HR6 vulnerabilities

Vulnerabilities for packages: k3s, rke2-runtime-fips, milvus...

GHSA-8R68-GVR4-JH7J vulnerabilities

Vulnerabilities for packages: kine, k3s, nats, nats-top, telegraf...

GHSA-8M2X-3M6Q-6W8J vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, rke2-runtime, nats-top-fips, nats-fips, k3s, nats-top, prometheus-nats-exporter, nats, kine, rke2-runtime-fips, telegraf, milvus...

GHSA-8R68-GVR4-JH7J vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, rke2-runtime, nats-top-fips, nats-fips, k3s, nats-top, prometheus-nats-exporter, nats, kine, rke2-runtime-fips, telegraf, milvus...

CVE-2026-23393

In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: Fix race condition in peermep deletion When a peer MEP is being deleted, canceldelayedworksync is called on ccmrxdwork before freeing. However, brcfmframerx runs in softirq context under rcureadlock without RTNL and...

CVE-2026-4727

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: rustls-ffi, sccache, ntpd-rs, oranda, fnm, linkerd2-proxy, atuin, pgcat, sdp-k8s-injector, linkerd-network-validator, linkerd2-cni-plugin, cargo-audit, samply, linkerd-extension-init, rye, shadowsocks-rust, zellij, qdrant, mise, garage, buck2, berg, lychee, wasm-pack...

CVE-2026-4538

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The projec...

CVE-2026-30836 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, caddy, step-ca-fips, caddy-fips, frankenphp-8.5, frankenphp-8.3, frankenphp-8.2, frankenphp-8.4...

GHSA-6457-6JRX-69CR vulnerabilities

Vulnerabilities for packages: sqlpad...

ROS-20260320-73-0006

Vulnerability in jenkins related to lack of protection for proprietary data. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: tekton-chains, cloud-provider-vsphere, kserve, argo-rollouts, headlamp, multus-cni, slsa-verifier, gcp-compute-persistent-disk-csi-driver, mcp-grafana, op-geth, certificate-transparency, kubernetes-csi-external-snapshotter, kine, kubeflow-katib, helm,...

CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1

CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...