PT-2026-76685

Name of the Vulnerable Software and Affected Versions New API versions prior to 1.0.0-rc.11 Description Unauthenticated payment webhook endpoints read and log full request bodies before performing signature validation. This occurs in router/api-router.go and the payment controllers. An...

CVE-2025-27770: Improper Neutralization of Special Elements in Output Used by a Downstream Component

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...

CVE-2025-27772: Improper Neutralization of Special Elements in Output Used by a Downstream Component

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /newrun endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able ...

PT-2026-76687

Name of the Vulnerable Software and Affected Versions UpTrain versions prior to 0.7.2 Description An issue exists in the /new run endpoint that allows remote code execution. Authenticated users can execute arbitrary code on the host system, typically within the Docker container, by manipulating t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100560 advisory. In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6tnl.net in vti6changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add...

ogre:script_fuzz: Container-overflow in Ogre::TextureUnitState::_unload

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=5934574946025472 Project: ogre Fuzzing Engine: libFuzzer Fuzz Target: scriptfuzz Job Type: libfuzzerasanogre Platform Id: linux Crash Type: Container-overflow WRITE 8 Crash Address: 0x7bf5bfde0930 Cra...

Exploit for CVE-2026-73519

CVE-2026-73519 — WolfStack Hardcoded Cluster Secret → Unauthen...

GHSA-HQVF-45JJ-MCCQ vulnerabilities

Vulnerabilities for packages: localstack...

GHSA-76P8-FHRM-VPC7 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-redshift-fips, crossplane-provider-aws-cur-fips, flagger-fips, opa-fips, helm-mapkubeapis, crossplane-provider-aws-cloudsearch, image-factory-fips, crossplane-provider-aws-datasync-fips, crossplane-provider-aws-sfn-fips,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, prometheus-operator, kyverno-notation-aws, crane, helm-mapkubeapis, dapr, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, eksctl, ollama, renovate, external-dns, yunikorn-web,...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: spegel, azure-service-operator, grafana-rollout-operator, prometheus-operator, kyverno-notation-aws, crane, helm-mapkubeapis, dapr, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, eksctl, ollama, renovate, external-dns, mariadb-operator,...

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76446

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11520-1 kubevirt1.9-container-disk-1.9.0-1.1 on GA media

These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-QV9R-C865-CP47 vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-hop-fips, flink-kubernetes-operator-fips, nacos, sonarqube, trino, wazuh-indexer, spark, elasticsearch-fips, ranger, conductor-fips, flink, flink-kubernetes-operator, apache-activemq-fips, spdx-tools-java, kafbat-ui-fips, kafka-bridge-fips,...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: flagger-fips, helm-mapkubeapis, image-factory-fips, flux-kustomize-controller-fips, vault-env, crossplane-provider-azure-resources, k8sgateway-fips, kubevirt-cdi-operator, nrdot-collector, crossplane-provider-aws-kafkaconnect, crossplane-provider-aws-ds-fips,...

GO-2026-6089 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-redshift-fips, crossplane-provider-aws-cur-fips, oauth2-proxy, flagger-fips, opa-fips, image-factory-fips, crossplane-provider-aws-cloudsearch, crossplane-provider-aws-datasync-fips, crossplane-provider-aws-sfn-fips,...

CVE-2026-54526 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

CVE-2026-56864 vulnerabilities

Vulnerabilities for packages: snyk-cli, kyverno, spire-server, k3s, aactl, zot, helm, nerdctl, renovate, falco-no-driver, containerd, cert-manager, cilium, k3d, kots, trino, k8s-device-plugin...

CVE-2026-56865 vulnerabilities

Vulnerabilities for packages: snyk-cli, kyverno, spire-server, k3s, aactl, zot, helm, nerdctl, renovate, falco-no-driver, containerd, cert-manager, cilium, k3d, kots, trino, k8s-device-plugin...