GHSA-6V7Q-WJVX-W8WG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, code-server, langfuse, opensearch-dashboards-fips, kibana, wazuh-dashboard, langfuse-fips...

CVE-2026-40175 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, awx, gitlab-rails-ce-fips, gitlab-rails-ce, redisinsight, kubeflow-centraldashboard, langfuse, nextcloud-server, opensearch-dashboards-fips, jitsucom-jitsu, lerna, prism, saf, kibana, wazuh-dashboard, langfuse-fips, kubeflow-katib...

GHSA-FVCV-3M26-PCQX vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, awx, gitlab-rails-ce-fips, gitlab-rails-ce, redisinsight, kubeflow-centraldashboard, langfuse, nextcloud-server, opensearch-dashboards-fips, jitsucom-jitsu, lerna, prism, saf, kibana, wazuh-dashboard, langfuse-fips, kubeflow-katib...

EUVD-2026-22096

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...

CVE-2026-26460

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...

CVE-2026-26460

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...

CVE-2026-26460

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...

PT-2026-32521

Name of the Vulnerable Software and Affected Versions Vtiger CRM version 8.4.0 Description An HTML Injection issue exists in the Dashboard module. The application fails to properly neutralize user-supplied input in the tabid parameter of the 'DashBoardTab' view 'getTabContents' action, allowing a...

CVE-2026-26460

A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...

CVE-2026-26460

CVE-2026-26460 describes an HTML Injection vulnerability in the Dashboard module of Vtiger CRM 8.4.0 . The issue arises because user input in the tabid parameter of the DashBoardTab view (getTabContents action) is not properly neutralized, allowing an attacker to inject arbitrary HTML that gets r...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: go, prometheus-operator, cilium, flux, kots, coredns, kubernetes, datadog-agent, gitaly, kyverno, redka, k8s-device-plugin, nerdctl, aws-flb-firehose, cert-manager, istio, external-dns, mattermost, prometheus, runc, telegraf, aws-flb-kinesis, dask-gateway, zot,...

GHSA-XJ38-JXC5-RPPX vulnerabilities

Vulnerabilities for packages: go, prometheus-operator, cilium, flux, kots, coredns, kubernetes, datadog-agent, gitaly, kyverno, redka, k8s-device-plugin, nerdctl, aws-flb-firehose, cert-manager, istio, external-dns, mattermost, prometheus, runc, telegraf, aws-flb-kinesis, dask-gateway, zot,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: prometheus-operator, aws-s3-controller, github-mcp-server, istio, hcloud, cosign, lvm-driver, rancher-telemetry, terraform, kubernetes-dashboard, docker-credential-gcr, flux-notification-controller, timescaledb-parallel-copy, incert, vault-benchmark,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, prometheus-operator, kubernetes-dashboard-web, terraform-provider-sendgrid, k8ssandra-client, prometheus-pushgateway, crossplane, istio, runc, telegraf, helm-mapkubeapis, cosign, lvm-driver, aws-flb-kinesis, dask-gateway,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, prometheus-operator, kubernetes-dashboard-web, terraform-provider-sendgrid, k8ssandra-client, prometheus-pushgateway, crossplane, istio, runc, telegraf, helm-mapkubeapis, cosign, lvm-driver, aws-flb-kinesis, dask-gateway,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: prometheus-operator, aws-s3-controller, github-mcp-server, istio, hcloud, cosign, lvm-driver, rancher-telemetry, terraform, kubernetes-dashboard, docker-credential-gcr, flux-notification-controller, timescaledb-parallel-copy, incert, vault-benchmark,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, nova, dgraph, atlas, external-secrets-operator, kube-logging-logging-operator, volume-modifier-for-k8s, ingress-nginx-controller-fips, aws-privateca-issuer, aws-network-policy-agent, smarter-device-manager, supercronic, go, nemo,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, nova, dgraph, atlas, external-secrets-operator, kube-logging-logging-operator, volume-modifier-for-k8s, ingress-nginx-controller-fips, aws-privateca-issuer, aws-network-policy-agent, smarter-device-manager, supercronic, go, nemo,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: mattermost, aws-fsx-csi-driver, kubevirt-cdi-uploadserver, beats-fips, kubernetes-dashboard-api, dgraph, opa-fips-envoy, terraform-provider-random-fips, contour-fips, aws-flb-cloudwatch-fips, external-secrets-operator, backup-restore-operator-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: mattermost, aws-fsx-csi-driver, kubevirt-cdi-uploadserver, beats-fips, kubernetes-dashboard-api, dgraph, opa-fips-envoy, terraform-provider-random-fips, contour-fips, aws-flb-cloudwatch-fips, external-secrets-operator, backup-restore-operator-fips,...