CVE-2026-64273

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforceprocesspacket handles a status report packet id 0x02 by taking a force-feedback effect index straight from the device wire and using it to address the...

CVE-2026-64644 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-P63J-VCC4-9VMV vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-64642 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-W62V-XXXG-MG59 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-64250

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

CVE-2026-50289 vulnerabilities

Vulnerabilities for packages: homepage, opentelemetry-auto-instrumentations-node...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, wavefront-proxy, spark, druid, infinispan, zipkin, thingsboard, kserve-modelmesh, apache-activemq-artemis, neo4j, management-api-for-apache-cassandra-5.0, apicurio-registry, apache-pulsar, flyway, opensearch, akhq, logstash, apache-nifi, tez,...

GHSA-35RM-7J9C-2F7M vulnerabilities

Vulnerabilities for packages: zed...

GHSA-P9J2-GV94-2WF4 vulnerabilities

Vulnerabilities for packages: keep-fips, langfuse-fips, peerdb-ui, homepage, jitsucom-jitsu, keep, langfuse...

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: keep-fips, langfuse-fips, peerdb-ui, homepage, jitsucom-jitsu, keep, langfuse...

SUSE CVE-2026-56684

unknown...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow, datahub-ingestion-fips, opal, checkov, awx...

CVE-2026-16221 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, gemini-cli, kibana, keep-fips, tileserver-gl, yaml-language-server, wazuh-dashboard-fips, vitess, langfuse, nextcloud-server, arangodb, renovate, keep, tileserver-gl-fips, librechat, langfuse-fips, prism, unleash,...

GHSA-2F96-G7MH-G2HX vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

SUSE CVE-2026-59898

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...

GHSA-5GVW-P9QM-JGWH vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, ruby3.3-jrjackson, wavefront-proxy, apache-tika, zookeeper, druid, infinispan, ruby3.2-jrjackson, apache-nifi-registry, thingsboard, gradle, cassandra, confluent-kafka, apicurio-registry, opensearch, scala, keycloak-config-cli, akhq, tez,...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: mods, crossplane-provider-aws-eks, crossplane-provider-aws-route53, dagger, crossplane-provider-family-aws, crossplane-provider-aws-kms, crossplane-provider-keycloak, crossplane-provider-aws-dynamodb, gptscript, crossplane-provider-aws-lambda,...

CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: open-webui, superset, tensorflow-gpu-jupyter, lmcache-cuda-12.8, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, mlflow, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2025.2, label-studio, superset-fips, openstack-horizon-2026.1-fips,...