CVE-2026-21218 vulnerabilities

Vulnerabilities for packages: dotnet...

CVE-2026-21435 vulnerabilities

Vulnerabilities for packages: k3s, rke2-runtime, spegel, spegel-fips, ipfs-cluster-fips, kubo, ipfs-cluster...

CVE-2026-27199

Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safejoin function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact that...

GHSA-69X3-G4R3-P962 vulnerabilities

Vulnerabilities for packages: step, caddy, step-issuer, step-ca...

CVE-2025-66614 vulnerabilities

Vulnerabilities for packages: kayenta, thingsboard, nacos, ontop, ontop-fips, nacos-docker, kayenta-fips...

GHSA-QQ5R-98HH-RXC9 vulnerabilities

Vulnerabilities for packages: kayenta, thingsboard, nacos, ontop, ontop-fips, nacos-docker, kayenta-fips...

CVE-2026-24688 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-9MVC-8737-8J8H vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-RRXV-PMQ9-X67R vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2026-26996 vulnerabilities

Vulnerabilities for packages: langfuse, tileserver-gl, npm, jupyter-base-notebook, node-gyp, serve, kubeflow-katib, opensearch-dashboards, pnpm-stage0, py3-jupyterlab, code-server, pulumi, kubeflow-pipelines, vitess, saf, ts-patch, kubeflow-centraldashboard, argo-workflows, lerna, renovate, eslin...

CVE-2026-27017 vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-9C88-49P5-5GGF vulnerabilities

Vulnerabilities for packages: kibana, gemini-cli...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: pulumi, sqlpad, tileserver-gl, kubeflow-pipelines, vitess, npm, jupyter-base-notebook, node-gyp, saf, prism, kubeflow-katib, opensearch-dashboards, pnpm-stage0, py3-jupyterlab, code-server, lerna, renovate...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: langfuse, prism, saf, jitsucom-jitsu, librechat, kubeflow-pipelines, dbgate-fips, renovate, kibana, tileserver-gl, dbgate, langfuse-fips, tileserver-gl-fips...

GHSA-RP46-R563-JRC7 vulnerabilities

Vulnerabilities for packages: logstash, apache-hop, kafbat-ui, hadoop-fips, druid, apache-hop-fips, spark-fips, celeborn, wavefront-proxy, kafbat-ui-fips, pinot, spark, akhq...

CVE-2025-33042 vulnerabilities

Vulnerabilities for packages: logstash, apache-hop, kafbat-ui, hadoop-fips, druid, apache-hop-fips, spark-fips, celeborn, wavefront-proxy, kafbat-ui-fips, pinot, spark, akhq...

GHSA-27JP-WM6Q-GP25 vulnerabilities

Vulnerabilities for packages: superset, airflow-core, airflow...

CVE-2026-2327 vulnerabilities

Vulnerabilities for packages: vitess, renovate...

CVE-2026-2661

A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be...

CVE-2026-23216

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount In iscsitdecconnusagecount, the function calls complete while holding the conn-connusagelock. As soon as complete is invoked, the waiter such as...