CVE-2026-69097 vulnerabilities

Vulnerabilities for packages: mlflow, datahub-ingestion-fips, mlflow-fips, jupyter-all-spark-notebook, opal, datahub-ingestion, awx...

GHSA-9XX9-HW38-H2W9 vulnerabilities

Vulnerabilities for packages: mlflow, datahub-ingestion-fips, mlflow-fips, jupyter-all-spark-notebook, opal, datahub-ingestion, awx...

CVE-2026-106450 vulnerabilities

Vulnerabilities for packages: hadoop-fips, solr-fips, cruise-control-fips, knative-kafka-broker-fips, automq, kafka-fips, thingsboard, kafka, apache-pulsar-fips, datahub-frontend, kayenta-fips, datahub-gms, spark-fips, apache-hop-fips, cassandra, apache-polaris-fips, elasticsearch-fips, pinot,...

GHSA-GM45-99XC-R7WV vulnerabilities

Vulnerabilities for packages: hadoop-fips, solr-fips, cruise-control-fips, knative-kafka-broker-fips, automq, kafka-fips, thingsboard, kafka, apache-pulsar-fips, datahub-frontend, kayenta-fips, datahub-gms, spark-fips, apache-hop-fips, cassandra, apache-polaris-fips, elasticsearch-fips, pinot,...

GHSA-343H-94H5-C4WR vulnerabilities

Vulnerabilities for packages: hadoop-fips, solr-fips, cruise-control-fips, knative-kafka-broker-fips, automq, kafka-fips, thingsboard, kafka, apache-pulsar-fips, datahub-frontend, kayenta-fips, datahub-gms, spark-fips, apache-hop-fips, cassandra, apache-polaris-fips, elasticsearch-fips, pinot,...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102267 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102270 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

GHSA-9J54-FG26-WV3R vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2-fips, kserve-huggingfaceserver-cuda-13.3, mcp-atlassian, openstack-horizon-2026.1-fips, open-webui, openstack-nova-2025.1, openstack-placement-2025.1-fips, metaflow-service-fips, datadog-agent-fips, openstack-manila-2025.2,...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2-fips, kserve-huggingfaceserver-cuda-13.3, mcp-atlassian, openstack-horizon-2026.1-fips, open-webui, openstack-nova-2025.1, openstack-placement-2025.1-fips, metaflow-service-fips, datadog-agent-fips, openstack-manila-2025.2,...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2-fips, kserve-huggingfaceserver-cuda-13.3, mcp-atlassian, openstack-horizon-2026.1-fips, open-webui, openstack-nova-2025.1, openstack-placement-2025.1-fips, metaflow-service-fips, datadog-agent-fips, openstack-manila-2025.2,...

CVE-2026-102268 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2-fips, kserve-huggingfaceserver-cuda-13.3, mcp-atlassian, openstack-horizon-2026.1-fips, open-webui, openstack-nova-2025.1, openstack-placement-2025.1-fips, metaflow-service-fips, datadog-agent-fips, openstack-manila-2025.2,...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2-fips, kserve-huggingfaceserver-cuda-13.3, mcp-atlassian, openstack-horizon-2026.1-fips, open-webui, openstack-nova-2025.1, openstack-placement-2025.1-fips, metaflow-service-fips, datadog-agent-fips, openstack-manila-2025.2,...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2-fips, kserve-huggingfaceserver-cuda-13.3, mcp-atlassian, openstack-horizon-2026.1-fips, open-webui, openstack-nova-2025.1, openstack-placement-2025.1-fips, metaflow-service-fips, datadog-agent-fips, openstack-manila-2025.2,...

GHSA-FFC3-869F-JXW9 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2-fips, kserve-huggingfaceserver-cuda-13.3, mcp-atlassian, openstack-horizon-2026.1-fips, open-webui, openstack-nova-2025.1, openstack-placement-2025.1-fips, metaflow-service-fips, datadog-agent-fips, openstack-manila-2025.2,...

GHSA-P4G4-X82P-Q773 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2-fips, kserve-huggingfaceserver-cuda-13.3, mcp-atlassian, openstack-horizon-2026.1-fips, open-webui, openstack-nova-2025.1, openstack-placement-2025.1-fips, metaflow-service-fips, datadog-agent-fips, openstack-manila-2025.2,...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102270 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102269 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +679 more potentially affected by CVE-2026-102267 via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

acryl-datahub-airflow-plugin (>=0.10.5.2rc3, <=0.11.0), airflow-clickhouse-plugin (>=0.11.0, <=1.0.0.post0) potentially affected by CVE-2026-82355 via apache-airflow (2.6.3)

apache-airflow PYPI version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.10.5.2rc3, =0.11.0, =1.0.0.post0 Source cves: CVE-2026-82355 Source advisory: OSV:PYSEC-2026-3989...

acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), airflow-add-ons (0.2.9b2) +8 more potentially affected by CVE-2026-75158 via apache-airflow (2.2.5)

apache-airflow PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.8.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.5.2, =0.8.3a1, =0.2.35, =0.2.37 Source cves:...