GHSA-WWV5-G3V4-889X vulnerabilities

Vulnerabilities for packages: mitmproxy, kubeflow-pipelines-visualization-server, dask-kubernetes...

GHSA-8423-8FGW-73VQ vulnerabilities

Vulnerabilities for packages: mitmproxy, kubeflow-pipelines-visualization-server, dask-kubernetes...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby4.0-rails, ruby3.2-rails, ruby3.3-rails, ruby3.4-rails...

SUSE CVE-2026-13608

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

SUSE CVE-2026-71223

unknown...

SUSE CVE-2026-80229

When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

SUSE CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

GHSA-8WV5-X4W7-5GWW vulnerabilities

Vulnerabilities for packages: beats-fips, wavefront-proxy, beats, apm-server, dapr-fips, agentbeat-fips, cadence-fips, amazon-cloudwatch-agent, grafana-geomys-fips, jitsucom-bulker, minio, nri-jmx, tempo-fips, zipkin, bento, commercial-grafana, temporal-fips, jaeger, jaeger-fips, tempo, cadence,...

CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63379 affecting package mysql for versions less than 8.0.46-2

CVE-2026-63379 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...

CVE-2026-63382 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63382 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63387 affecting package mysql for versions less than 8.0.46-2

CVE-2026-63387 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...

CVE-2026-63379 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63379 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63379 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63379 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63385 affecting package mysql for versions less than 8.0.46-2

CVE-2026-63385 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...

CVE-2026-15806 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: kibana, gitlab-rails-ce, langfuse-fips, wazuh-dashboard-fips, prism, redisinsight, jitsucom-jitsu, nextcloud-server, opensearch-dashboards, awx, wazuh-dashboard, librechat, opensearch-dashboards-fips, gitlab-rails-ce-fips, lerna, langfuse, kubeflow-centraldashboard,...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard-fips, azurite, prism, librechat, gitlab-rails-ce-fips, langfuse, kubeflow-centraldashboard, langfuse-fips, redisinsight, jitsucom-jitsu, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips, lerna, kibana,...

GHSA-9WX3-P993-35VP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard-fips, azurite, prism, librechat, gitlab-rails-ce-fips, langfuse, kubeflow-centraldashboard, langfuse-fips, redisinsight, jitsucom-jitsu, opensearch-dashboards, wazuh-dashboard, opensearch-dashboards-fips, arangodb, lerna, kibana,...