CVE-2026-9678 vulnerabilities

Vulnerabilities for packages: gemini-cli, langfuse-fips, langfuse, py3-captum, vitess, pelias-api, code-server, renovate, kibana...

CVE-2026-9697 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, py3-captum, vitess, pelias-api, code-server, renovate, kibana...

GHSA-VMH5-MC38-953G vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, py3-captum, vitess, pelias-api, code-server, renovate, kibana...

GHSA-HM92-R4W5-C3MJ vulnerabilities

Vulnerabilities for packages: py3-captum, vitess, pelias-api, code-server, renovate, kibana...

CVE-2026-6734 vulnerabilities

Vulnerabilities for packages: py3-captum, vitess, pelias-api, code-server, renovate, kibana...

GHSA-PR7R-676H-XCF6 vulnerabilities

Vulnerabilities for packages: gemini-cli, langfuse-fips, langfuse, py3-captum, vitess, pelias-api, code-server, renovate, kibana...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, teleport, chartmuseum, neuvector-scanner-fips, kubevela, envoy-gateway, helm-exporter-fips, helm-mapkubeapis, docker-cli-buildx-fips, fuse-overlayfs-snapshotter, kaniko-fips, helm-push, eksctl, trivy-operator, ctop, dagger, docker-compose-fips,...

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: haraka, prism, saf, gemini-cli, actions-runner, py3-captum, pelias-api, code-server, vitess, node-gyp, npm, renovate, kibana...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: haraka, prism, saf, gemini-cli, actions-runner, py3-captum, pelias-api, code-server, vitess, node-gyp, npm, renovate, kibana...

CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: haraka, prism, saf, gemini-cli, actions-runner, py3-captum, pelias-api, code-server, vitess, node-gyp, npm, renovate, kibana...

GHSA-35P6-XMWP-9G52 vulnerabilities

Vulnerabilities for packages: haraka, prism, saf, gemini-cli, actions-runner, py3-captum, pelias-api, code-server, vitess, node-gyp, npm, renovate, kibana...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: haraka, prism, saf, gemini-cli, actions-runner, py3-captum, pelias-api, code-server, vitess, node-gyp, npm, renovate, kibana...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: haraka, prism, saf, gemini-cli, actions-runner, py3-captum, pelias-api, code-server, vitess, node-gyp, npm, renovate, kibana...

GHSA-G8M3-5G58-FQ7M vulnerabilities

Vulnerabilities for packages: haraka, prism, saf, gemini-cli, actions-runner, py3-captum, pelias-api, code-server, vitess, node-gyp, npm, renovate, kibana...

K000161850: urllib3 vulnerability CVE-2025-66471

Security Advisory Description urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the...

Ubuntu 20.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8462-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8462-1 advisory. It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A...

PT-2026-51576

Name of the Vulnerable Software and Affected Versions immich versions 4ffa26c9 through 4eb1003 Description A reflected cross-site scripting XSS issue exists on the '/auth/login' page. The continue query parameter is processed by SvelteKit's redirect function without proper scheme or origin...

PT-2026-51585

Name of the Vulnerable Software and Affected Versions Event-Driven Ansible affected versions not specified Description A missing authorization issue exists in the websocket API. The '/api/eda/ws/ansible-rulebook' endpoint fails to verify user permissions when processing Worker messages. This allo...

CVE-2026-48746

vLLM is an inference and serving engine for large language models LLMs. From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing t...

PYSEC-2026-226

vLLM is an inference and serving engine for large language models LLMs. From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing t...