CLEANSTART-2026-IP24162 Security fixes in helm 4.0.5-r5

Package helm version 4.0.5-r5 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-DV46415 Security fixes in apache-hive 4.0.1-r5

Package apache-hive version 4.0.1-r5 fixes 11 vulnerabilities: CVE-2025-41242, CVE-2025-48924, CVE-2026-22745, CVE-2026-40563, CVE-2026-41603...

CLEANSTART-2026-JA07066 Security fixes in helm-fips 4.0.5-r0

Package helm-fips version 4.0.5-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-RJ61585 Security fixes in git-sync 4.5.1-r1

Package git-sync version 4.5.1-r1 fixes 10 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-61726, CVE-2025-61728, CVE-2025-68119...

CLEANSTART-2026-NL91750 Security fixes in argo-workflows 4.0.3-r0

Package argo-workflows version 4.0.3-r0 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-IU37943 Security fixes in cloud-config-server 4.3.2-r3

Package cloud-config-server version 4.3.2-r3 fixes 38 vulnerabilities: CVE-2026-33870, CVE-2026-33871, CVE-2026-42583, CVE-2026-42584, CVE-2026-42587...

CLEANSTART-2026-TN70963 Security fixes in metacontroller 4.14.0-r1

Package metacontroller version 4.14.0-r1 fixes 11 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...

CLEANSTART-2026-VP54958 Security fixes in kubernetes-csi-external-attacher-fips 4.10.0-r0

Package kubernetes-csi-external-attacher-fips version 4.10.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

CLEANSTART-2026-YS49357 Security fixes in cloud-config-server 4.3.2-r2

Package cloud-config-server version 4.3.2-r2 fixes 15 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...

CLEANSTART-2026-DE38896 Security fixes in argo-workflows 4.0.0-r0

Package argo-workflows version 4.0.0-r0 fixes 1 vulnerabilities: CVE-2026-24051...

CLEANSTART-2026-NF04664 Security fixes in helm-fips 4.0.1-r0

Package helm-fips version 4.0.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-EV74091 Security fixes in kafka-fips 4.0.1-r3

Package kafka-fips version 4.0.1-r3 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

SUSE-SU-2026:22995-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. -...

EUVD-2026-50957

A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...

CVE-2025-65340

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php...

CVE-2026-54735

Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain bidder adapters in Prebid Server interpolate user-supplied parameters into outbound request URLs without properly validating host and subdomain values, allowing crafte...

CVE-2026-54735 prebid-server's request forgery vulnerability allows for possible host environment data extraction

Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain bidder adapters in Prebid Server interpolate user-supplied parameters into outbound request URLs without properly validating host and subdomain values, allowing crafte...

CVE-2026-64298

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is affected by affected by multiple vulnerabilities (CVE-2026-50645, CVE-2026-9322, CVE-2026-9171)

Summary IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is affected by uncontrolled resource consumption and denial of service. Vulnerability Details CVEID:CVE-2026-50645 DESCRIPTION: There is no restriction on the amount of attachment headers that a...

CVE-2026-12939 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute

The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the postthumbnail and newsletterspostthumbnail shortcodes in versions up to and including 4.15. This is due to insufficient input sanitization and output escaping in the postthumbnai...