CVE-2026-59880 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, nextcloud-server, vitess...

CVE-2026-59879 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, nextcloud-server, vitess...

GHSA-8WHX-365G-H9VV vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, ruby3.4-rails...

GHSA-5QHF-9PHG-95M2 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, ruby3.4-rails...

GHSA-9WJQ-CP2P-HRGF vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, ruby3.4-rails...

GHSA-V56Q-MH7H-F735 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, nextcloud-server, vitess...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: rancher-api-ui, nextcloud-server, vitess...

GHSA-CJ75-F6XR-R4G7 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby4.0-rails, ruby3.4-rails...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: kserve, mitmproxy, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mlflow, superset, kubeflow-pipelines-visualization-server, kubeflow-pipelines, datadog-agent, airflow...

GHSA-J92G-9F8W-J867 vulnerabilities

Vulnerabilities for packages: sonarqube, flyway, druid, debezium, thingsboard, apicurio-registry, dependency-track, keycloak...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: kserve, mitmproxy, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mlflow, superset, kubeflow-pipelines-visualization-server, kubeflow-pipelines, datadog-agent, airflow...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: kserve, mitmproxy, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mlflow, superset, kubeflow-pipelines-visualization-server, kubeflow-pipelines, datadog-agent, airflow...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: superset, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mlflow, httpie, py3-setuptools, airflow, pypy-3.10, datadog-agent, py3-pipenv, kubeflow-katib...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: superset, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mlflow, httpie, py3-setuptools, airflow, pypy-3.10, datadog-agent, py3-pipenv, kubeflow-katib...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: kserve, mitmproxy, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, mlflow, superset, kubeflow-pipelines-visualization-server, kubeflow-pipelines, datadog-agent, airflow...

CVE-2026-54291 vulnerabilities

Vulnerabilities for packages: sonarqube, flyway, druid, debezium, thingsboard, apicurio-registry, dependency-track, keycloak...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, pgpool2exporter, cilium, helm, kubernetes-dashboard, elvish, zarf, kyverno-policy-reporter, syft, kube-rbac-proxy, flux-image-reflector-controller, grafana-alloy, runc, terraform-provider-google, external-dns, opentelemetry-collector,...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, pgpool2exporter, cilium, helm, kubernetes-dashboard, elvish, zarf, kyverno-policy-reporter, syft, kube-rbac-proxy, flux-image-reflector-controller, grafana-alloy, runc, terraform-provider-google, external-dns, opentelemetry-collector,...

CVE-2026-65913

DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USEPROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Array.prototype properties like onclick to true, causing DOMPurify to accept event handlers as...

CVE-2026-65901

DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...