scorecard

OpenSSF Scorecard...

CVE-2020-15227

CVE-2020-15227 ¡DESCARGO DE RESPONSABILIDAD! No me hago responsable de su uso en entornos de producción, así que por favor NO lo hagas. Este artilugio es solo para demostración y para que los administradores de sistemas hagan pruebas. Esta herramienta prueba la vulnerabilidad en nette/application...

react-CVE-2025-55182-fixer

React Server Components 安全 PR 自动化 此仓库提供了一个脚本，用于自动升级并创建拉取请求 PR ，以修复受 CVE-2025-55182 影响的仓库。该漏洞影响易受攻击版本的 react-server-dom- 及相关的 React 包。 这个工具有什么用？ 扫描仓库 package.json 中受影响的 react-server-dom-、react、react-dom 和 next 版本。 如有必要，将其升级到安全的修复版本。 在目标仓库中创建一个包含更新依赖项的 PR。 支持直接仓库和 fork。 为什么需要这个？ React Server...

ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root

Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...

openSUSE 16 Security Update : waylyrics (openSUSE-SU-2026:21815-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21815-1 advisory. Changes in waylyrics: - Update to version 0.4.0 CVE-2026-25541 bsc1274106 Added plugin architecture and SakuraLLM translation plugin Added OpenCC suppor...

CVE-2026-88884 Renovate before 44.3.1 Authentication Bypass via Digest Updates

Renovate is a dependency update automation tool. In versions before 44.3.1 and Mend Renovate CE/EE images before 15.4.0, mend-renovate-ce Helm chart before 15.4.0, mend-renovate-enterprise-edition Helm chart before 10.4.0, digest updates are not subject to the internal minimumReleaseAge stability...

CVE-2026-88881

Renovate versions before 44.11.3 are vulnerable to credential exfiltration when following pagination links in the HTTP Link header. The root cause is that the pagination URL returned by a GitHub server is not validated against the originally contacted host, allowing a malicious or compromised ser...

CVE-2026-87056

A flaw was found in operator-sdk-builder. The repository lacks automated dependency-update configurations for its git submodules, Containerfile base image, and Tekton bundle references. This absence prevents the automatic flagging of stale or vulnerable dependencies. Consequently, this could lead...

Security update for cadvisor (important)

openSUSE security update: security update for cadvisor ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21786-1 Rating: important References: bsc1266645 bsc1276727 Cross-References: CVE-2026-39821 CVE-2026-41178 CVSS scores: CVE-2026-39821 SUSE : 7.4...

nodejs:24 security update

nodejs 1:24.18.0-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 1:24.18.0-3 - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822...

OPENSUSE-SU-2026:21786-1 Security update for cadvisor

This update for cadvisor fixes the following issues: Changes in cadvisor: - update vendor: go.opentelemetry.io/[email protected] bsc1276727, CVE-2026-41178 - update to 0.60.5 bsc1266645, CVE-2026-39821: build: discover bootstrap image tag instead of pinning it lib/manager: allow disabling container...

CLEANSTART-2026-UX51846 Security fixes in renovate 44.31.0-r2

Package renovate version 44.31.0-r2 fixes 21 vulnerabilities: CVE-2026-59873, CVE-2026-59871, CVE-2026-59875, CVE-2026-59874, ghsa-r292-9mhp-454m...

CLEANSTART-2026-XT48985 Security fixes in rancher-agent 2.12.11-r1

Package rancher-agent version 2.12.11-r1 fixes 18 vulnerabilities: CVE-2026-50195, CVE-2026-53492, CVE-2026-53489, CVE-2026-46680, CVE-2026-53488...

CLEANSTART-2026-DD38104 Security fixes in renovate 43.250.0-r1

Package renovate version 43.250.0-r1 fixes 1 vulnerabilities: CVE-2026-59873...

CLEANSTART-2026-PY30601 Security fixes in langfuse-worker 3.214.0-r1

Package langfuse-worker version 3.214.0-r1 fixes 28 vulnerabilities: ghsa-frvp-7c67-39w9, ghsa-p63j-vcc4-9vmv, ghsa-55q2-fjhq-7xh7, ghsa-c2j3-45gr-mqc4, CVE-2026-69192...

openSUSE 16: sequoia-sq / sequoia-sq-bash-completion / etc (openSUSE-RU-2026:21658-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- RU-2026:21658-1 advisory. Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only LICENSE.txt confirms it Correct Legal-Review-Notice usa...

OPENSUSE-SU-2026:21670-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.8.2 Update vendor archive to fix github.com/go-chi/chi/v5 boo1276196, CVE-2026-72815, CVE-2026-72816, CVE-2026-72817 Add OpenRC support Migrate config renovate.json Fix bugs...

SUSE SLED15 / SLES15 Security Update : runc (SUSE-SU-2026:3787-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3787-1 advisory. This update for runc rebuilds it against the current go security release. Tenable has extracted the preceding descripti...

OPENSUSE-SU-2026:21663-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: - Update to version 2.98.0: chore: fix extra whitespace Default Codespaces port forwarding to loopback Bump gh-aw-actions to v0.87.1 and recompile workflows Fix issue triage action compatibility choredeps: bump golang.org/x/crypto from...

OPENSUSE-RU-2026:21658-1 Recommended update for sequoia-sq

This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only LICENSE.txt confirms it Correct Legal-Review-Notice usage - Update dependencies due to security issues CVE-2026-25541 bsc1274437 - Switch crypto...