CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse, opensearch-dashboards, sqlpad, npm, lerna, code-server, prism, pulumi, renovate...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse, opensearch-dashboards, sqlpad, npm, lerna, code-server, prism, pulumi, renovate...

GHSA-GF76-8FVR-H9HJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse, opensearch-dashboards, sqlpad, npm, lerna, code-server, prism, pulumi, renovate...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse, opensearch-dashboards, sqlpad, npm, lerna, code-server, prism, pulumi, renovate...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse, opensearch-dashboards, sqlpad, npm, lerna, code-server, prism, pulumi, renovate...

GHSA-VFC9-3HPJ-PH62 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W9VW-56MM-F3QR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J542-7G8V-JFG9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W9VW-56MM-F3QR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FFM3-9WPH-XPFX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7M8X-RGJH-8GVW vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CMF5-J3M2-RGGM vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-66885

Cross-Site Request Forgery CSRF vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity. When Livebook is configured to use Livebook Teams for identity, Livebook.ZTA.LivebookTeams.handlerequest/4 in...

CVE-2026-55522

PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vulnerable to code execution. Workflow.executeinclude implicitly imports and runs an included recipe's tools.py via a raw...

[SECURITY] [DLA 4719-1] p7zip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4719-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 05, 2026 https://wiki.debian.org/LTS -...

CVE-2026-66885 Livebook Teams identity callback lacks state binding, allowing login CSRF

Cross-Site Request Forgery CSRF vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity. When Livebook is configured to use Livebook Teams for identity, Livebook.ZTA.LivebookTeams.handlerequest/4 in...

CVE-2026-71261

A flaw was found in drlibs. An integer overflow vulnerability exists in the W64 CUE chunk metadata parsing within the drwav.h component. A remote attacker could exploit this by providing a specially crafted W64 WAV file. This could lead to a heap buffer overflow, potentially allowing for arbitrar...

CVE-2026-9201

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary code due to a cryptographic weakness in the custom component validation mechanism. When the optional hardening mode that restricts execution to trusted component templates is enabled, the application...

CVE-2026-9196

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backend during validation prior to user...