CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: nuxeo, geoserver, kafka-fips, keycloak-config-cli, kafbat-ui-fips, apache-hop, spark-fips, s3proxy-fips, apache-pulsar, opensearch-fips, ruby3.3-jrjackson, kayenta-fips, apache-activemq-fips, management-api-for-apache-cassandra-4.0, kayenta, dependency-track-apiserve...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-pipelines, py3-pipenv, reflex, ggshield, kubeflow-pipelines-visualization-server, kubeflow-katib, confluent-docker-utils, jwt-tool, open-webui, pypy-3.10, mlflow, kubeflow-volumes-web-app, superset, kserve, py3-cassandra-medusa,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-pipelines, py3-pipenv, reflex, ggshield, kubeflow-pipelines-visualization-server, kubeflow-katib, confluent-docker-utils, jwt-tool, open-webui, pypy-3.10, mlflow, kubeflow-volumes-web-app, superset, kserve, py3-cassandra-medusa,...

CVE-2026-45409 vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, datadog-agent-fips, py3-opentelemetry-exporter-otlp, openstack-kolla-toolbox-2026.1, pgadmin4, httpie, pypy-3.11, mlflow-fips, tritonserver-backend-vllm-cuda-13.0, openstack-kolla-toolbox-2025.2, py3-pip, dbt-bigquery, jwt-tool,...

GHSA-65PC-FJ4G-8RJX vulnerabilities

Vulnerabilities for packages: dask-kubernetes-fips, datadog-agent-fips, py3-opentelemetry-exporter-otlp, openstack-kolla-toolbox-2026.1, pgadmin4, httpie, pypy-3.11, mlflow-fips, tritonserver-backend-vllm-cuda-13.0, openstack-kolla-toolbox-2025.2, py3-pip, dbt-bigquery, jwt-tool,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vault-k8s, octo-sts, vexctl, terraform-provider-time, vault-benchmark, rancher-machine, pvc-autoresizer, dagdotdev, checksec, custom-pod-autoscaler-operator, sftpgo-plugin-pubsub, gitsign, hivemind, docker-credential-ecr-login, mongodb-kubernetes-operator,...

Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

MAL-2024-9963 Malicious code in confluent-docker-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. ---...

GHSA-34JH-P97F-MPXF vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-pipelines, py3-pipenv, reflex, ggshield, az, kubeflow-pipelines-visualization-server, checkov, kubeflow-katib, confluent-docker-utils, dask-gateway, jwt-tool, py3-urllib3, mlflow, kubeflow-volumes-web-app, superset,...

CVE-2024-37891 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-pipelines, py3-pipenv, reflex, ggshield, az, kubeflow-pipelines-visualization-server, checkov, kubeflow-katib, confluent-docker-utils, dask-gateway, jwt-tool, py3-urllib3, mlflow, kubeflow-volumes-web-app, superset,...