CVE-2026-21435 vulnerabilities

Vulnerabilities for packages: ipfs-cluster-fips, spegel-fips, kubo, k3s, rke2-runtime, ipfs-cluster, spegel...

CVE-2026-27199

Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safejoin function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact that...

GHSA-69X3-G4R3-P962 vulnerabilities

Vulnerabilities for packages: step-issuer, step, caddy, step-ca...

GHSA-QQ5R-98HH-RXC9 vulnerabilities

Vulnerabilities for packages: kayenta, nacos, ontop-fips, nacos-docker, ontop, kayenta-fips, thingsboard...

CVE-2025-66614 vulnerabilities

Vulnerabilities for packages: kayenta, nacos, ontop-fips, nacos-docker, ontop, kayenta-fips, thingsboard...

CVE-2026-24688 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-9MVC-8737-8J8H vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-RRXV-PMQ9-X67R vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2026-26996 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, ts-patch, node-gyp, renovate, prism, lerna, tileserver-gl, npm, eslint, serve, opensearch-dashboards, langfuse, kubeflow-pipelines, rancher-api-ui, sqlpad, pnpm-stage0, argo-workflows, kubeflow-centraldashboard, vitess, pulumi, py3-jupyterlab,...

CVE-2026-27017 vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-9C88-49P5-5GGF vulnerabilities

Vulnerabilities for packages: kibana, gemini-cli...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: prism, vitess, kubeflow-katib, pulumi, py3-jupyterlab, opensearch-dashboards, code-server, saf, node-gyp, kubeflow-pipelines, pnpm-stage0, renovate, lerna, sqlpad, tileserver-gl, npm...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: saf, prism, langfuse-fips, kubeflow-pipelines, kibana, langfuse, renovate, dbgate, tileserver-gl-fips, jitsucom-jitsu, dbgate-fips, librechat, tileserver-gl...

CVE-2025-33042 vulnerabilities

Vulnerabilities for packages: akhq, druid, kafbat-ui, logstash, pinot, spark, kafbat-ui-fips, celeborn, apache-hop, hadoop-fips, apache-hop-fips, apache-pulsar, spark-fips, wavefront-proxy...

GHSA-RP46-R563-JRC7 vulnerabilities

Vulnerabilities for packages: akhq, druid, kafbat-ui, logstash, pinot, spark, kafbat-ui-fips, celeborn, apache-hop, hadoop-fips, apache-hop-fips, apache-pulsar, spark-fips, wavefront-proxy...

GHSA-27JP-WM6Q-GP25 vulnerabilities

Vulnerabilities for packages: superset, airflow, airflow-core...

CVE-2026-2327 vulnerabilities

Vulnerabilities for packages: renovate, vitess...

CVE-2026-2661

A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be...

CVE-2026-23216

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount In iscsitdecconnusagecount, the function calls complete while holding the conn-connusagelock. As soon as complete is invoked, the waiter such as...

CVE-2026-23212

In the Linux kernel, the following vulnerability has been resolved: bonding: annotate data-races around slave-lastrx slave-lastrx and slave-targetlastarprx... can be read and written locklessly. Add READONCE and WRITEONCE annotations. syzbot reported: BUG: KCSAN: data-race in bondrcvvalidate /...