CVE-2026-50528 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-57108 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-5XVQ-CP9X-6P6R vulnerabilities

Vulnerabilities for packages: yazi...

GHSA-MQ2J-7VQ4-77M8 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59846 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59843 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59848 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59849 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59851 vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-WP74-JGXH-GV4Q vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-57108 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-50524 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-74JP-VM22-8Q8X vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

DEBIAN-CVE-2026-73415

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in packages/imageviewer/src/widget.ts, JupyterLab's ImageViewer uses URL.createObjectURL for a specially crafted SVG image and revokes the blo...

CVE-2026-19503

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

CVE-2026-19503 Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

EUVD-2026-57551

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

CVE-2026-19503

CVE-2026-19503 affects MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver. The issue arises from insufficient validation of the scheme for authorization and token endpoints returned in an OIDC issuer’s discovery document, allowing a user connected to an uncontrolled MongoDB deployment using...

CVE-2026-73268

A flaw was found in the cluster-curator-controller component of multicluster engine MCE. A tenant with create or update permissions on ClusterCurator resources can inject an arbitrary Job specification. This is possible because the CreateJob function does not validate user-controlled input when...

CVE-2026-72508

A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management RHACM. This vulnerability allows a namespace-admin tenant to perform a confused-deputy attack by creating Subscription Custom Resources CRs that leverage a highly privileged ServiceAccount S...