GHSA-X744-4WPC-V9H2 vulnerabilities

Vulnerabilities for packages: zot, cluster-api, pulumi, traefik, nerdctl, grafana, kots, nuclei, aws-otel-collector, rancher, splunk-otel-collector, opentelemetry-collector-contrib, docker-credential-gcr, trivy-operator, apko, openfga, envoy-gateway, neuvector-scanner, teleport, portieris,...

GHSA-C2C7-RCM5-VVQJ vulnerabilities

Vulnerabilities for packages: saf, vitess, pulumi, tileserver-gl, renovate, opensearch-dashboards, rancher-api-ui, ts-patch, kubeflow-katib, kubeflow-pipelines, lerna, sqlpad, npm, prism, vite, code-server, argo-workflows, nextcloud-server, node-gyp...

GHSA-3V7F-55P6-F55P vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, ts-patch, vitess, actions-runner, kibana, langfuse, kubeflow-pipelines, tileserver-gl-fips, wazuh-dashboard, nextcloud-server, code-server, emscripten, sqlpad, gemini-cli, vite, renovate, rancher-api-ui, pulumi, argo-workflows, kubeflow-katib,...

GHSA-2QVQ-RJWJ-GVW9 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, tensorflow-cpu-jupyter, gitlab-rails-ce, ts-patch, kibana, pelias-api, tileserver-gl, prism, wazuh-dashboard-fips, lerna, tileserver-gl-fips, wazuh-dashboard, nextcloud-server, rancher-api-ui, py3-jupyterlab,...

[SECURITY] Fedora 44 Update: rust-reqsign-aws-v4-3.0.0-1.fc44

AWS SigV4 signing implementation for reqsign...

[SECURITY] Fedora 44 Update: mongo-c-driver-1.30.7-2.fc44

mongo-c-driver is a client library written in C for MongoDB...

GHSA-R7WW-HWQF-CQR6 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-HXPV-3X38-H8V5 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-4726 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-9979-85JW-XP9M vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-J5QX-HH9G-J6WJ vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-C3HV-RW36-5MGQ vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-4698 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-2QJW-H8G8-R86F vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-J97Q-98F4-5WQ3 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-PQFX-CWF8-965Q vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-4711 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-X6GF-MPR2-68H6 vulnerabilities

Vulnerabilities for packages: gotrue-fips, src, argo-workflows-fips, kots, harbor, flyte, grafana-alloy, splunk-otel-collector, bento, teleport-operator-fips, grafana-alloy-fips, ory-kratos, vault-fips, hydra, hydra-fips, argo-workflows, trillian, telegraf, trillian-fips,...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, elasticsearch, apache-pulsar, apicurio-registry, wavefront-proxy, commercial-elasticsearch, elasticsearch-fips, spark, knative-kafka-broker-fips, zipkin, kserve-modelmesh, management-api-for-apache-cassandra-4.0, grpc-java-fips, keycloak,...

CVE-2026-27856

Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port,...