Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (October 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the October 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workfl...

delete-branches (1.2.14), delete-workflow-runs (1.2.32) +6 more potentially affected by CVE-2026-113716 via virtualenv (20.35.3)

virtualenv PYPI version 20.35.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.14 - delete-workflow-runs 1.2.32 - ironoc-pytest-conor-heffron =2.1.7, =2.2.0 - pkg-15903 0.1.100 - pkg-26548 1.3.32 -...

delete-workflow-runs (>=1.0.0, <=1.1.6), edx-repo-tools (3.1.0) +2 more potentially affected by CVE-2026-113716 via virtualenv (20.33.1)

virtualenv PYPI version 20.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-workflow-runs =1.0.0, =1.1.0, =1.3.0 - setup-badge 1.0.11 Source cves: CVE-2026-113716 Source advisory: OSV:GHSA-CW65-GX24-RC82...

delete-workflow-runs (>=1.0.0, <=1.1.6), edx-repo-tools (3.1.0) +2 more potentially affected by CVE-2026-113724 via virtualenv (20.33.1)

virtualenv PYPI version 20.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-workflow-runs =1.0.0, =1.1.0, =1.3.0 - setup-badge 1.0.11 Source cves: CVE-2026-113724 Source advisory: OSV:GHSA-43MP-35Q3-X3FQ...

delete-workflow-runs (>=1.0.0, <=1.1.6), edx-repo-tools (3.1.0) +2 more potentially affected by CVE-2026-113722 via virtualenv (20.33.1)

virtualenv PYPI version 20.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-workflow-runs =1.0.0, =1.1.0, =1.3.0 - setup-badge 1.0.11 Source cves: CVE-2026-113722 Source advisory: OSV:GHSA-C978-59M8-C77V...

delete-branches (1.2.14), delete-workflow-runs (1.2.32) +6 more potentially affected by CVE-2026-113722 via virtualenv (20.35.3)

virtualenv PYPI version 20.35.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.14 - delete-workflow-runs 1.2.32 - ironoc-pytest-conor-heffron =2.1.7, =2.2.0 - pkg-15903 0.1.100 - pkg-26548 1.3.32 -...

aamutils (0.0.11), adversarial-workflow (>=0.4.0, <=0.9.8) +175 more potentially affected by CVE-2026-112902 via pillow (12.1.1)

pillow PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils 0.0.11 - adversarial-workflow =0.4.0, =1.1.0, =1.3.0, =0.1.0, =0.6.0, =26.3.14, =0.5.2b3, =0.1.3, =0.2.2, =3.1.0, =3.7.4 and more Source...

aamutils (0.0.11), adversarial-workflow (>=0.4.0, <=0.9.8) +175 more potentially affected by CVE-2026-112901 via pillow (12.1.1)

pillow PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils 0.0.11 - adversarial-workflow =0.4.0, =1.1.0, =1.3.0, =0.1.0, =0.6.0, =26.3.14, =0.5.2b3, =0.1.3, =0.2.2, =3.1.0, =3.7.4 and more Source...

aamutils (0.0.11), adversarial-workflow (>=0.4.0, <=0.9.8) +175 more potentially affected by CVE-2026-112394 via pillow (12.1.1)

pillow PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils 0.0.11 - adversarial-workflow =0.4.0, =1.1.0, =1.3.0, =0.1.0, =0.6.0, =26.3.14, =0.5.2b3, =0.1.3, =0.2.2, =3.1.0, =3.7.4 and more Source...

delete-workflow-runs (>=1.0.0, <=1.1.6), edx-repo-tools (3.1.0) +2 more potentially affected by CVE-2026-113725 via virtualenv (20.33.1)

virtualenv PYPI version 20.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-workflow-runs =1.0.0, =1.1.0, =1.3.0 - setup-badge 1.0.11 Source cves: CVE-2026-113725 Source advisory: OSV:GHSA-VXJ4-Q4G9-CRJ7...

delete-workflow-runs (>=1.0.0, <=1.1.6), edx-repo-tools (3.1.0) +2 more potentially affected by CVE-2026-113726 via virtualenv (20.33.1)

virtualenv PYPI version 20.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-workflow-runs =1.0.0, =1.1.0, =1.3.0 - setup-badge 1.0.11 Source cves: CVE-2026-113726 Source advisory: OSV:GHSA-5VJQ-RRRF-7H2Q...

delete-branches (1.2.14), delete-workflow-runs (1.2.32) +6 more potentially affected by CVE-2026-113726 via virtualenv (20.35.3)

virtualenv PYPI version 20.35.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.14 - delete-workflow-runs 1.2.32 - ironoc-pytest-conor-heffron =2.1.7, =2.2.0 - pkg-15903 0.1.100 - pkg-26548 1.3.32 -...

delete-branches (1.2.15), delete-workflow-runs (1.2.33) +12 more potentially affected by CVE-2026-113726 via virtualenv (20.35.4)

virtualenv PYPI version 20.35.4 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.15 - delete-workflow-runs 1.2.33 - elroy =0.0.62, =0.0.1b1, =0.6.0, =2.2.1, =6.0.0, =1.2.3, =0.6.2, =0.7.0 Source cves...

delete-workflow-runs (>=1.0.0, <=1.1.6), edx-repo-tools (3.1.0) +2 more potentially affected by CVE-2026-113732 via virtualenv (20.33.1)

virtualenv PYPI version 20.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-workflow-runs =1.0.0, =1.1.0, =1.3.0 - setup-badge 1.0.11 Source cves: CVE-2026-113732 Source advisory: OSV:GHSA-C947-3PG5-GM8Q...

KNIME Business Hub information disclosure vulnerability

Versions of KNIME Business Hub prior to 1.18.5 contain an information disclosure vulnerability. This vulnerability stems from excessive error message content within the catalog functionality, which may allow authenticated remote attackers to view workflow names even when they know the workflow ID...

KNIME Business Hub resource management error vulnerability

Versions prior to KNIME Business Hub 1.19.0 contain a resource management error vulnerability. This vulnerability stems from an excessive resource allocation issue in the remote workflow editing functionality. Authenticated attackers can exploit this flaw to exhaust server-side resources, resulti...

CloudPirates.io helm-charts software supply chain issue vulnerability

Versions of CloudPirates.io Helm Charts prior to 271d415 contain a software supply chain vulnerability. This vulnerability arises because the pullrequesttarget workflow utilizes github.event.pullrequest.head.sha or head.ref to retrieve forked code, allowing code controlled by attackers to access...

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service bsc1281909...

EUVD-2026-106749

Vulnerability in the Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Workflow. Successful...

EUVD-2026-106741

Vulnerability in the Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Workflow. Successful...