137173 matches found
CVE-2026-54183
Apache Airflow contains a vulnerability where the secrets masker fails to hide sensitive values in the Variables UI when those values are nested within lists, tuples, or sets beyond a specific recursion-depth limit. This is an incomplete-fix follow-up to CVE-2026-42358 . While the exposure is lim...
CVE-2026-54183 Apache Airflow: Airflow Variables were not masked in the UI for authenticated users
Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, tuple, or set beyond that limit, so an Airflow Variable holding such a deeply-nested value was show...
CVE-2026-54183
Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, tuple, or set beyond that limit, so an Airflow Variable holding such a deeply-nested value was show...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.16.68 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.71 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
CLSA-2026-1786546010 TuxCare security update for guzzlehttp/guzzle (2 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 2 CVEs. Fixed in 7.10.0-p3+tuxcare...
CVE-2026-47234
Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, Session::setCookie logs full cookie values and Session::start logs the current session ID. In a real Admidio deployment this includes both the active session cookie and the persistent...
CVE-2026-47233
CVE-2026-47233 details an incomplete fix in Admidio where field_delete in modules/inventory.php validates only a CSRF token and does not enforce isAdministratorInventory(), allowing any logged-in user to delete non-system inventory fields. The related ItemField::delete() path lacks an admin check...
MINI-H4G7-647R-G76C
Bulletin has no description...
CLSA-2026-1786540745 TuxCare security update for org.apache.avro (1 CVE)
TuxCare rebuilt 24 org.apache.avro packages to address 1 CVE. Fixed in 1.11.0-tuxcare.3...
CVE-2026-47226 Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges
Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload rights on any one folder can permanently delete files from folders where they have only view access. The authorization check at the top of modules/documents-files.php evaluates...
EUVD-2026-57211
Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload rights on any one folder can permanently delete files from folders where they have only view access. The authorization check at the top of modules/documents-files.php evaluates...
CLSA-2026-1786537061 TuxCare security update for org.apache.httpcomponents.client5 (1 CVE)
TuxCare rebuilt 5 org.apache.httpcomponents.client5 packages to address 1 CVE. Fixed in 5.5.2-tuxcare.1...
Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update
An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.4.1 is now available. See the documentation for bug fix information:...
RHSA-2026:54178 Red Hat Security Advisory: grafana security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:53845 Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:53844 Red Hat Security Advisory: iscsi-initiator-utils security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:53452 Red Hat Security Advisory: gstreamer1-plugins-good security update
Bulletin has no description...