CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: nextcloud-server, jitsucom-jitsu, lerna, kubeflow-centraldashboard, opensearch-dashboards, prism, langfuse...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: lerna, kubeflow-pipelines, pulumi, opensearch-dashboards, saf, code-server, prism, sqlpad, npm, renovate, langfuse...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: lerna, kubeflow-pipelines, pulumi, opensearch-dashboards, saf, code-server, prism, sqlpad, npm, renovate, langfuse...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: lerna, kubeflow-pipelines, pulumi, opensearch-dashboards, saf, code-server, prism, sqlpad, npm, renovate, langfuse...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: lerna, kubeflow-pipelines, pulumi, opensearch-dashboards, saf, code-server, prism, sqlpad, npm, renovate, langfuse...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: lerna, kubeflow-pipelines, pulumi, opensearch-dashboards, saf, code-server, prism, sqlpad, npm, renovate, langfuse...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: lerna, kubeflow-pipelines, pulumi, opensearch-dashboards, saf, code-server, prism, sqlpad, npm, renovate, langfuse...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-12802 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.11)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-12802 Source advisory: MEND:CVE-2026-12802...

org.apache.camel.springboot:camel-opensearch-starter (4.12.0), org.apache.camel:camel-opensearch (4.12.0) +11 more potentially affected by CVE-2026-59638 via org.bouncycastle:bctls-fips (2.0.19)

org.bouncycastle:bctls-fips MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bctls-fips and may be impacted: - org.apache.camel.springboot:camel-opensearch-starter 4.12.0 - org.apache.camel:camel-opensearch 4.12.0 -...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-59647 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.11)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-59647 Source advisory: MEND:CVE-2026-59647...

SUSE CVE-2026-11769

We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templating...

CVE-2026-23981 Apache Superset: Improper Authorization in Chart Update allowing Dashboard Modification

An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user with permissions to update charts to modify dashboards they do not own. When updating a chart's properties via the REST API, a user can provide a list of dashboard IDs dashboards to associate the char...

CLEANSTART-2026-ED19767 Security fixes in opensearch-dashboards-fips 3.6.0-r4

Package opensearch-dashboards-fips version 3.6.0-r4 fixes 7 vulnerabilities: ghsa-cmwh-pvxp-8882, CVE-2026-12143, CVE-2026-46625, CVE-2026-53550, CVE-2026-53655...

CLEANSTART-2026-QN62418 Security fixes in opensearch-dashboards-fips 3.5.0-r0

Package opensearch-dashboards-fips version 3.5.0-r0 fixes 30 vulnerabilities: ghsa-jg4p-7fhp-p32p, ghsa-2w6w-674q-4c4q, ghsa-9cx6-37pm-9jff, ghsa-r5fr-rjxr-66jc, ghsa-3v7f-55p6-f55p...

PT-2026-86004

Package opensearch-dashboards-fips version 3.5.0-r0 fixes 30 vulnerabilities: ghsa-jg4p-7fhp-p32p, ghsa-2w6w-674q-4c4q, ghsa-9cx6-37pm-9jff, ghsa-r5fr-rjxr-66jc, ghsa-3v7f-55p6-f55p...

PTC ThingWorx - Panel Detection

PTC ThingWorx is an Industrial IoT IIoT platform for building and deploying connected industrial applications, machine monitoring, and remote service solutions. Exposed instances may provide unauthenticated access to IIoT dashboards and connected device management interfaces. !/usr/bin/env python...

Malcolm v26.07.1

Malcolm Malcolm is a powerful network traffic analysis tool suite designed with the following goals in mind: Easy to use – Malcolm accepts network traffic data in the form of full packet capture PCAP files, Zeek logs, and Suricata alerts. These artifacts can be uploaded via a simple browser-based...

CVE-2026-65903 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, langfuse, wazuh-dashboard-fips, gitlab-rails-ce-fips, langfuse-fips, opensearch-dashboards, kibana, librechat...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, nextcloud-server, wazuh-dashboard, langfuse, wazuh-dashboard-fips, gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, kibana, opensearch-dashboards, librechat...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: nextcloud-server, wazuh-dashboard, langfuse, wazuh-dashboard-fips, gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, kibana, opensearch-dashboards, librechat...