PT-2026-117174

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-117179

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-117182

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-103005 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103005 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937061...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.1), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.1) +3 more potentially affected by CVE-2026-103006 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.1)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.1 Source cves: CVE-2026-103006 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937065...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-103008 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103008 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937077...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-103007 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103007 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937074...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102409 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102409 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937078...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102404 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102404 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937080...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.3) +4 more potentially affected by CVE-2026-102407 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.3)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-102407 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937083...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102408 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102408 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937150...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-102411 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-102411 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937400...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-103009 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103009 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-21243632...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.1), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.1) +3 more potentially affected by CVE-2026-103006 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.1)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.1 Source cves: CVE-2026-103006 Source advisory: MEND:CVE-2026-103006...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-102411 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-102411 Source advisory: MEND:CVE-2026-102411...

HPESBHF05153 rev.2 - HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution

Potential Security Impact: Remote: Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to 1.77.30 HPE Compute Scale-up Server 3250 - Prior to 1.03.38 HPE Superdome Flex Server - Prior to 4.17.03 HPE Superdome Flex 28...

HPESBHF05154 rev.1 - HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification

Potential Security Impact: Local: Arbitrary File Modification; Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to 1.77.30 HPE Compute Scale-up Server 3250 - Prior to 1.03.38 HPE Superdome Flex Server - Prio...

CVE-2026-97422

A flaw was found in the Linux kernel. The AMD Kernel Fusion Driver amdkfd subsystem fails to enforce proper permission checks when dispatching System Management Interface SMI event notifications. A local user with access to the GPU compute device can exploit this flaw to receive event notificatio...

SQL Injection

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to SQL Injection in the Teradata compute-cluster example DAG, where user-settable Params are not properly constrained, allowing an...

CVE-2026-86843

The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...