GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: keycloak-fips, knative-kafka-broker, celeborn, pinot, knative-kafka-broker-fips, neo4j, thingsboard, apache-hop-fips, apache-activemq-artemis, management-api-for-apache-cassandra-5.0, apicurio-registry, request-9047-keycloak-fips, pinot-fips, apache-hop, zipkin...

CVE-2026-48022 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-54057

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 color-control query reply reflects attacker-controlled bytes, including newlines, into the shell's input without sanitization. Version 0.47.3 fixes the issue...

CVE-2026-9638

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...

CVE-2026-48006

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the RedisArrayAggregator handler permanently leaks pooled direct-memory buffers when a Redis pipeline connection closes before a RESP array aggregate...

CVE-2026-46340

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.putstreamId, Unpooled.wrappedBufferfrag, byteBuf, wrapping t...

CVE-2026-45416

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first record, eagerly allocates...

GHSA-5375-PQ7M-F5R2 vulnerabilities

Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, cadence-web, langfuse, jitsucom-jitsu, langfuse-fips, kibana...

GHSA-CXH2-4639-VMC5 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

GHSA-6MR8-WMR4-CH9V vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-282G-W5FH-9Q49 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11660 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11639 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X6Q3-GW4H-79F9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QV8P-84PR-826V vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GPXH-M862-V6VQ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CQM4-2V9F-324R vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11669 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WFFW-9J7C-5PWF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-VQ94-CC3Q-GVJ8 vulnerabilities

Vulnerabilities for packages: chromium...