CVE-2026-103641

A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. Opening a crafted HDR file crashes the application that uses the loader...

GHSA-HRR3-GC8F-F4QJ vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, keep-fips, opensearch-dashboards-fips, verdaccio, opensearch-dashboards, kibana, wazuh-dashboard, gitlab-rails-ce-fips, unleash-proxy, nextcloud-server, tensorflow-gpu-jupyter, jupyter-base-notebook, librechat, wazuh-dashboard-fips, gitlab-rails-c...

CVE-2026-86472 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, keep-fips, opensearch-dashboards-fips, verdaccio, opensearch-dashboards, kibana, wazuh-dashboard, gitlab-rails-ce-fips, unleash-proxy, nextcloud-server, tensorflow-gpu-jupyter, jupyter-base-notebook, librechat, wazuh-dashboard-fips, gitlab-rails-c...

GHSA-G57G-F23G-4646 vulnerabilities

Vulnerabilities for packages: unleash-fips, librechat, langfuse, langfuse-fips, kibana...

GHSA-8VVX-RFF5-P5RQ vulnerabilities

Vulnerabilities for packages: unleash-fips, librechat, langfuse, langfuse-fips, kibana...

GHSA-V53P-9FQP-M79J vulnerabilities

Vulnerabilities for packages: unleash-fips, librechat, langfuse, langfuse-fips, kibana...

GHSA-4P3W-J4W9-5JQW vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, azurite, librechat, arangodb, opensearch-dashboards-fips, nextcloud-server, sqlpad, jupyterhub-k8s-singleuser-sample, py3-jupyterhub, kubeflow-centraldashboard, opensearch-dashboards, kibana...

CVE-2026-17495 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, azurite, librechat, arangodb, opensearch-dashboards-fips, nextcloud-server, sqlpad, jupyterhub-k8s-singleuser-sample, py3-jupyterhub, kubeflow-centraldashboard, opensearch-dashboards, kibana...

GHSA-R53P-7PC4-XJ5R vulnerabilities

Vulnerabilities for packages: code-server, actions-runner, prism, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, npm, lerna, renovate, homepage, kibana...

CVE-2026-18540 vulnerabilities

Vulnerabilities for packages: code-server, actions-runner, prism, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, npm, lerna, renovate, homepage, kibana...

GHSA-Q2HR-2G5M-VWHR vulnerabilities

Vulnerabilities for packages: unleash-fips, tileserver-gl-fips, opensearch-dashboards-fips, verdaccio, lerna, langfuse-fips, lambda-nodejs, opensearch-dashboards, kibana, foxx-cli, commitizen, gitlab-rails-ce-fips, redisinsight, wazuh-dashboard, unleash-proxy, npm, authentik-fips, nextcloud-serve...

GHSA-RFGV-XXQX-MFG5 vulnerabilities

Vulnerabilities for packages: code-server, actions-runner, prism, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, npm, lerna, renovate, homepage, kibana...

CVE-2026-19534 vulnerabilities

Vulnerabilities for packages: code-server, actions-runner, prism, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, npm, lerna, renovate, homepage, kibana...

CVE-2026-102277 vulnerabilities

Vulnerabilities for packages: unleash-fips, tileserver-gl-fips, opensearch-dashboards-fips, verdaccio, lerna, langfuse-fips, lambda-nodejs, opensearch-dashboards, kibana, foxx-cli, commitizen, gitlab-rails-ce-fips, redisinsight, wazuh-dashboard, unleash-proxy, npm, authentik-fips, nextcloud-serve...

CVE-2026-86472 vulnerabilities

Vulnerabilities for packages: yaml-language-server, prism, vitess, jupyter-base-notebook...

GHSA-HRR3-GC8F-F4QJ vulnerabilities

Vulnerabilities for packages: yaml-language-server, prism, vitess, jupyter-base-notebook...

GHSA-6J4F-FJ2G-MC7P vulnerabilities

Vulnerabilities for packages: rancher-api-ui, renovate, opensearch-dashboards, ts-patch, prism, sqlpad, npm, lerna, nextcloud-server, jupyter-base-notebook...

CVE-2026-102276 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, renovate, opensearch-dashboards, ts-patch, prism, sqlpad, npm, lerna, nextcloud-server, jupyter-base-notebook...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, datadog-agent, kubeflow-volumes-web-app, az, kserve, open-webui, ggshield, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines, jupyter-base-notebook, kubeflow-katib...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: dask-kubernetes, datadog-agent, kubeflow-volumes-web-app, az, kserve, open-webui, ggshield, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, k8s-sidecar, kubeflow-pipelines, jupyter-base-notebook, kubeflow-katib...