EUVD-2026-84813

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...

CVE-2026-63104 Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...

CVE-2026-63104 Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...

CVE-2026-63104

Kaneo versions 2.3.12 before 2.12.2 are vulnerable to a missing authorization flaw in the bulk task endpoint . While the system verifies workspace membership, it fails to invoke the role-based permission checks required for other task endpoints. Authenticated workspace members with viewer or memb...

CVE-2026-63104 Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...

CVE-2026-95666

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-95666 Unbounded post ID array in the bulk reactions endpoint allows denial of service

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

EUVD-2026-84378

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-95666 Unbounded post ID array in the bulk reactions endpoint allows denial of service

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-95666 Unbounded post ID array in the bulk reactions endpoint allows denial of service

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-95666: Allocation of Resources Without Limits or Throttling

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...

CVE-2026-63104: Missing Authorization

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omits workspace permission checks...

PT-2026-97020

Name of the Vulnerable Software and Affected Versions Kaneo versions 2.3.12 through 2.12.1 Description Authenticated workspace members with viewer or member roles can delete and modify tasks beyond their assigned permissions. This occurs because the 'PATCH /api/task/bulk' endpoint verifies...

PT-2026-96724

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.7.0 through 11.7.10 Mattermost versions 11.8.0 through 11.8.5 Mattermost versions 11.9.0 through 11.9.1 Mattermost versions 11.10.0 through 11.10.1 Description An authenticated user can cause excessive database load by...

PT-2026-96665

Name of the Vulnerable Software and Affected Versions WP Table Builder – Drag & Drop Table Builder versions prior to 2.2.2 Description Incorrect Authorization exists due to an operator precedence bug in the post-type guard within the trash table bulk and restore table bulk functions, which preven...

Malicious Package

Overview bulk-add-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in bulk-add-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b131d84c624f7eb89d720ed0ec1435eef5f5f9ff800d1cef88b20c18c7374023 Package declares scripts.install: "node extract.js thd-orangepay", causing extract.js to run automatically on npm install. The script collects...

MAL-2026-16325 Malicious code in bulk-add-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b131d84c624f7eb89d720ed0ec1435eef5f5f9ff800d1cef88b20c18c7374023 Package declares scripts.install: "node extract.js thd-orangepay", causing extract.js to run automatically on npm install. The script collects...

CLEANSTART-2026-HP74468 Security fix for GHSA-j5w8-q4qc-rx2x applied in: argo-cd 3.1.9-r4, argo-cd-fips 2.14.20-r1, argo-cd-fips 3.0.20-r2, argo-cd-fips 3.1.9-r4, argo-workflows-fips 3.4.18-r0, atlantis 0.37.1-r1, atlantis-fips 0.37.1-r0, boring-registry 0.16.6-r0, calico-fips 3.28.5-r2, cert-manager-fips 1.18.2-r0, certificate-transparency-trillian-ctserver 1.3.2-r0, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cfssl 1.5.0-r1, cloud-provider-aws-1.34 1.34.1-r1, cloudprober-fips 0.14.1-r0, consul-fips 1.21.5-r0, cortex-fips 1.20.1-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, crossplane-provider-sql 0.13.0-r0, crossplane-provider-sql-fips 0.13.0-r0, dcgm-exporter 4.5.1-r0, descheduler 0.34.0-r0, dex-fips 2.41.1-r3, dex-fips 2.42.1-r3, dex-fips 2.43.1-r3, distribution 3.0.0-r0, dynamic-localpv-provisioner 4.4.0-r0, eck-operator 3.2.0-r0, eck-operator-fips 3.2.0-r0, eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, elastic-beats-fips 9.0.8-r1, elastic-beats-fips 9.2.0-r2, external-dns 0.18.0-r0, external-dns-fips 0.20.0-r2, external-secrets-fips 0.17.0-r0, external-secrets-fips 0.20.4-r1, falcoctl 0.11.0-r0, flux-notification-controller-fips 1.5.0-r0, forecastle 1.0.159-r2, fulcio 1.8.2-r0, fulcio-fips 1.8.2-r0, git-lfs-fips 3.7.0-r2, gitlab-shell 14.45.5-r0, gitlab-shell-fips 14.45.5-r0, gitness 3.3.0-r1, go-fips-1.25 1.25.6-r0, go1.24 1.24.11-r0, go1.26 1.25.5-r0, gomplate-fips 4.3.3-r3, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, gptscript 0.9.7-r1, gpu-operator 25.10.0-r1, gpu-operator-fips 25.10.0-r1, harbor 2.13.4-r0, harbor 2.14.2-r0, harbor-fips 2.14.2-r0, harbor-registry 3.0.0.1-r2, helm-fips 3.19.0-r1, helm-fips 3.19.0-r2, jitsucom-bulker 2.11.913-r0, k8ssandra-client-fips 0.7.0-r2, k8ssandra-client-fips 0.7.0-r4, k8ssandra-client-fips 0.8.4-r0, kapp-controller 0.59.0-r0, kapp-controller-fips 0.59.0-r0, kube-fluentd-operator 1.18.2-r0, kube-rbac-proxy-fips 0.19.1-r1, kube-state-metrics-fips 2.17.0-r1, kubernetes 1.33.11-r0, kubernetes 1.34.7-r0, kubernetes-csi-external-snapshotter 8.4.0-r0, kubernetes-csi-external-snapshotter-fips 8.4.0-r0, kubernetes-dashboard-api 1.14.0-r0, kubernetes-dashboard-api-fips 1.14.0-r0, kubernetes-dashboard-auth 1.4.0-r0, kubernetes-dashboard-auth-fips 1.4.0-r0, kubernetes-dashboard-web 1.7.0-r0, kubernetes-dashboard-web-fips 1.7.0-r0, litestream 0.5.2-r1, local-static-provisioner 2.8.0-r0, minio-operator 7.1.1-r3, minio-operator-fips 5.0.18-r7, minio-operator-fips 6.0.4-r7, minio-operator-fips 7.0.1-r7, minio-operator-fips 7.1.1-r7, modelmesh-runtime-adapter 0.12.0-r0, modelmesh-runtime-adapter 0.12.0-r1, node-problem-detector 0.8.22-r0, openbao 2.4.3-r0, percona-server-mongodb-operator 1.22.0-r1, percona-xtradb-cluster-operator 1.18.0-r0, percona-xtradb-cluster-operator-fips 1.18.0-r0, postgres-operator 1.12.2-r2, prom-mysqld-exporter-fips 0.18.0-r0, prometheus-blackbox-exporter 0.27.0-r0, prometheus-mongodb-exporter 0.47.2-r0, prometheus-mongodb-exporter-fips 0.47.2-r0, prometheus-mysqld-exporter 0.18.0-r0, prometheus-mysqld-exporter-fips 0.18.0-r0, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r1, prometheus-node-exporter-fips 1.10.2-r3, prometheus-node-exporter-fips 1.7.0-r2, prometheus-node-exporter-fips 1.8.2-r2, prometheus-node-exporter-fips 1.9.1-r1, prometheus-operator-fips 0.85.0-r2, prometheus-operator-fips 0.86.2-r1, prometheus-operator-fips 0.87.0-r1, prometheus-statsd-exporter 0.28.0-r0, prometheus-statsd-exporter-fips 0.28.0-r0, promxy 0.0.93-r0, rabbitmq-messaging-topology-operator 1.15.0-r1, rekor-backfill-index 1.4.3-r0, rekor-fips 1.4.3-r0, secrets-store-csi-driver-fips 1.5.4-r0, skaffold 2.16.1-r1, step-issuer-fips 0.9.9-r1, tekton-chains 0.26.0-r0, tekton-chains-fips 0.26.0-r0, tekton-pipelines 1.5.0-r0, tekton-pipelines-fips 1.5.0-r0, tempo 2.9.0-r0, tempo-fips 2.7.2-r0, tempo-fips 2.8.3-r0, tempo-fips 2.9.1-r0, trivy-fips 0.67.2-r0, velero-fips 1.14.1-r1, velero-fips 1.16.2, velero-fips 1.16.2-r2, wavefront-collector-for-kubernetes 1.13.0-r0, weaviate 1.35.2-r0

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FZ89792 Security fix for CVE-2026-33814 applied in: apache-nifi 2.10.0-r4, apko 1.2.2-r1, argo-cd-fips 3.0.23-r1, argo-cd-fips 3.1.14-r1, argo-workflows 4.0.5-r0, authservice 1.1.5-r1, authservice 1.1.6-r1, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-load-balancer-controller 3.2.0-r0, aws-network-policy-agent 1.3.2-r1, aws-network-policy-agent-fips 1.3.2-r0, aws-privateca-issuer 1.7.0-r0, aws-privateca-issuer-fips 1.7.0-r1, azuredisk-csi-fips 1.33.9-r1, cadvisor 0.55.1-r1, cadvisor-fips 0.55.1-r0, calico 3.30.7-r1, cass-operator-fips 1.30.0-r1, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, cert-manager 1.20.2-r0, cert-manager-cmctl-fips 2.4.0-r3, cert-manager-webhook-pdns-fips 2.5.5-r1, cert-manager-webhook-pdns-fips 3.2.3-r2, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cfssl 1.5.0-r1, cilium 1.17.15-r0, cilium 1.18.9-r0, cilium 1.19.3-r0, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.26.3-r3, cluster-autoscaler 1.35.2-r1, configmap-reload 0.15.0-r0, confluent-cp-docker-utils 1.0.8-r1, confluent-kafka 8.2.0-r2, consul 2.0.1-r0, cortex 1.21.0-r2, cosign 3.0.6-r1, dex 2.44.0-r2, dex 2.45.1-r2, dex-fips 2.43.1-r5, druid-exporter-fips 0.10-r5, druid-exporter-fips 0.11-r6, druid-exporter-fips 0.9-r4, eks-distro-kube-scheduler 1.35.2-r0, elastic-beats 8.19.15-r2, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, external-dns 0.21.0-r0, external-secrets 2.2.0-r0, external-secrets-fips 0.17.0-r2, external-secrets-fips 2.2.0-r0, fluent-operator-fips 3.4.0-r9, fluent-operator-fips 3.6.0-r5, fluent-operator-fips 3.7.0-r3, flux-notification-controller-fips 1.5.0-r0, forecastle 1.0.159-r1, go-discover 0_git20250325-r0, gostatsd 28.3.0-r2, gptscript 0.9.9-r2, grafana-org-operator 1.13.0-r0, haproxy-ingress 0.14.12-r1, helm 4.0.5-r2, helm 4.1.3-r0, helm-fips 4.1.3-r0, helm-operator 1.42.1-r0, helm-operator 1.42.2-r0, helm-operator-fips 1.41.1-r2, ip-masq-agent 2.12.0-r1, istio 1.28.5-r3, istio 1.29.2-r1, istio-fips 1.26.8-r3, istio-fips 1.27.9-r1, istio-fips 1.28.6-r0, istio-pilot-discovery-fips 1.28.3-r1, k8ssandra-client-fips 0.5.0-r11, k8ssandra-client-fips 0.6.4-r9, k8ssandra-client-fips 0.7.0-r7, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.29.0-r1, karpenter 1.9.0-r2, karpenter-fips 1.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r4, kor 0.3.8-r1, kor 0.5.9-r1, kor 0.6.7-r0, kserve 0.16.0-r2, kserve-modelmesh-serving 0.12.0-r2, kserve-rest-proxy 0.12.0-r3, kube-bench 0.15.0-r1, kube-logging-operator 6.4.0-r1, kube-rbac-proxy 0.20.2-r1, kube-rbac-proxy 0.21.2-r0, kube-rbac-proxy-fips 0.20.2-r1, kube-state-metrics 2.10.1-r1, kube-state-metrics 2.15.0-r1, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r0, kuberay-operator 1.3.2-r3, kuberay-operator 1.4.2-r3, kuberay-operator 1.5.2-r3, kuberay-operator 1.6.2-r1, kubernetes 1.33.11-r0, kubernetes 1.34.1-r5, kubernetes 1.34.7-r0, kubernetes-csi-driver-nfs-fips 4.13.0-r3, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r4, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r1, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-external-snapshotter-fips 8.4.0-r4, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.15.0-r4, kubernetes-csi-node-driver-registrar-fips 2.16.0-r3, kubernetes-dashboard 7.14.0-r1, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r2, kubernetes-dashboard-fips 7.14.0-r0, kubernetes-dashboard-metrics-scraper 1.2.2-r2, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r1, kubernetes-dashboard-web 1.7.0-r0, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kubernetes-fips 1.35.4-r0, kured 1.20.0-r0, kustomize-fips 5.8.1-r0, kyverno-fips 1.16.4-r1, kyverno-fips 1.17.2-r1, kyverno-policy-reporter-fips 3.4.2-r6, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r11, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r9, linkerd2 25.12.3-r1, linkerd2 26.1.4-r1, linkerd2 26.4.3-r0, local-path-provisioner 0.0.36-r1, local-path-provisioner-fips 0.0.36-r1, local-static-provisioner 2.8.0-r2, mailpit 1.29.7-r0, metacontroller 4.12.13-r1, metacontroller 4.13.1-r1, metacontroller 4.14.0-r1, metacontroller 4.15.0-r1, minio 0.20260330.001845-r0, minio-client 0.20250721.052808-r1, minio-operator 7.1.1-r4, minio-operator-fips 5.0.19-r3, minio-operator-fips 6.0.4-r11, minio-operator-fips 7.1.1-r10, modelmesh-runtime-adapter 0.10.0-r0, modelmesh-runtime-adapter 0.11.2-r0, modelmesh-runtime-adapter 0.9.0-r0, mongodb 7.0.32-r0, mongodb 8.0.20-r1, mongodb 8.0.21-r0, mongodb 8.2.6-r1, mongodb 8.3.2-r0, mountpoint-s3-csi-driver 2.3.0-r1, newrelic-infrastructure-agent 1.73.1-r0, newrelic-nri-kube-events 2.16.4-r2, newrelic-prometheus-configurator 2.9.0-r0, nginx-prometheus-exporter 1.5.1-r2, nginx-prometheus-exporter-fips 1.5.1-r1, nri-kubernetes 4.0.0-r0, nvidia-container-toolkit 1.19.0-r0, ollama 0.20.3-r1, ollama 0.31.2-r2, ollama 0.32.11-r2, ollama-fips 0.18.3-r0, ollama-fips 0.21.0-r1, ollama-fips 0.32.11-r2, openbao-fips 2.1.1-r11, openbao-fips 2.2.2-r9, openbao-fips 2.3.3-r8, openbao-fips 2.4.4-r8, openbao-fips 2.5.3-r0, opensearch-k8s-operator-fips 2.5.1-r4, opensearch-k8s-operator-fips 2.6.1-r9, opentofu-fips 1.11.6-r1, opentofu-fips 1.7.10-r6, opentofu-fips 1.8.11-r6, opentofu-fips 1.9.4-r6, paranoia 0.5.0-r1, percona-server-mongodb-operator 1.22.0-r1, percona-xtradb-cluster-operator 1.19.1-r1, pmm 3.5.0-r0, policy-controller 0.15.1-r0, postgres-operator 1.15.1-r1, prometheus 2.47.2-r1, prometheus 3.11.2-r0, prometheus 3.5.2-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r1, prometheus-node-exporter 1.11.0-r0, prometheus-node-exporter 1.6.1-r1, prometheus-node-exporter-fips 1.11.0-r0, prometheus-operator 0.69.1-r1, prometheus-operator 0.87.1-r3, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, prometheus-redis-exporter-fips 1.78.0-r5, prometheus-redis-exporter-fips 1.79.0-r5, prometheus-redis-exporter-fips 1.81.0-r2, prometheus-redis-exporter-fips 1.82.0-r2, promxy-fips 0.0.93-r1, pulumi-kubernetes-operator 2.7.0-r0, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rabbitmq-messaging-topology-operator 1.19.1-r1, rancher-fleet-agent 0.12.17-r1, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, rclone 1.69.0-r2, restic 0.18.0-r0, restic-fips 0.18.1-r5, runc 1.4.2-r0, rundeck 6.0.0-r0, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.36.6-r0, secrets-store-csi-driver-provider-gcp 1.15.0-r1, smarter-device-manager 1.1.2-r0, smarter-device-manager-fips 1.20.11-r1, spark-operator 2.1.1-r7, spark-operator 2.2.1-r4, spark-operator 2.3.0-r4, spark-operator 2.4.0-r4, spark-operator 2.5.0-r1, spire-server 1.13.5-r1, spire-server 1.14.5-r1, spire-server-fips 1.14.5-r1, stakater-reloader 1.1.0-r1, stakater-reloader 1.2.1-r0, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, tekton-pipelines 1.10.2-r1, tekton-pipelines 1.11.0-r1, tekton-pipelines 1.7.0-r1, tekton-pipelines 1.9.2-r1, tekton-pipelines-fips 1.10.2-r1, tekton-pipelines-fips 1.9.2-r1, tempo 2.10.4-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, temporal-ui-server-fips 2.51.1-r1, terraform 1.14.8-r2, terraform 1.15.1-r1, terragrunt-fips 0.95.1-r5, terragrunt-fips 0.96.1-r5, terragrunt-fips 0.97.2-r7, terragrunt-fips 0.98.0-r7, tigera-operator 1.41.1-r0, tigera-operator 1.42.0-r0, tigera-operator-fips 1.37.2-r4, timoni 0.25.2-r0, tkn 0.42.2-r1, tkn 0.43.2-r1, trust-manager-fips 0.20.3-r2, trust-manager-fips 0.21.1-r2, vault 1.20.4-r4, vault 1.21.4-r4, vault 2.0.0-r1, vault-csi-provider 1.7.0-r0, vault-k8s 1.7.4-r0, velero 1.17.2-r2, velero-fips 1.18.0-r3, velero-plugin-for-aws-fips 1.13.2-r1, velero-plugin-for-gcp-fips 1.14.0-r2, velero-plugin-for-microsoft-azure-fips 1.14.0-r2, victoriametrics-operator 0.69.0-r1, victoriametrics-vmauth 1.138.0-r0, wave 0.11.0-r1, wave-fips 0.9.0-r3, weaviate 1.35.17-r1, weaviate 1.36.11-r1, weaviate 1.37.4-r1, weaviate 1.37.6-r1, weaviate-fips 1.35.17-r1, weaviate-fips 1.36.11-r0, weaviate-fips 1.36.17-r0, weaviate-fips 1.37.0-r0, weaviate-fips 1.37.9-r0, whereabouts 0.9.2-r2, yunikorn-k8shim 1.7.0-r2, yunikorn-k8shim-fips 1.7.0-r1, yunikorn-web 1.7.0-r0, yunikorn-web-fips 1.7.0-r0, zot 2.1.13-r2

CVE-2026-33814 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...