133786 matches found
MGASA-2026-0334 Updated qemu packages fix many security vulnerabilities
This update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from 10.2.4...
CVE-2026-73557
vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safeloadpromptembeds in vllm/renderers/embedutils.py uses torch.sparse.checksparsetensorinvariants, whose process-global save, enable, and restore state can be raced by concurrent promptembeds parts...
CVE-2026-49856 @jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization
@jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version 0.3.1, he network domain has a central SSRF authorization policy that blocks private, loopback, link-local, and reserved targets unless an explicit authorization object allows...
com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser
A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)
Summary The allow-list fix for CVE-2026-31892 GHSA-3wf5-g532-rcrr, and its follow-up coverage of hostNetwork/securityContext/serviceAccountName in GHSA-3775-99mw-8rp4, is incomplete. workflow/util/merge.go ValidateUserOverrides / SanitizeUserWorkflowSpec walk only the top-level fields of...
Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name
Summary A missing end anchor $ in the ClassDefinition UID validation regex allows an authenticated user with the objects permission to create a class with a malicious UID containing SQL. When a data object of that class is later loaded, Block.php concatenates the raw classId directly into a SQL...
CLEANSTART-2026-BB29139 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r2
Package rabbitmq-messaging-topology-operator version 1.16.0-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...
CLEANSTART-2026-EL49045 Security fixes in velero-plugin-for-gcp-fips 1.14.2-r1
Package velero-plugin-for-gcp-fips version 1.14.2-r1 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-QB59108 Security fixes in yunikorn-k8shim-fips 1.8.0-r2
Package yunikorn-k8shim-fips version 1.8.0-r2 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...
CLEANSTART-2026-VR80248 Security fixes in git-sync 4.6.0-r3
Package git-sync version 4.6.0-r3 fixes 1 vulnerabilities: CVE-2026-39824...
CLEANSTART-2026-EI00038 Security fixes in knative-net-istio 1.20.4-r0
Package knative-net-istio version 1.20.4-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
CLEANSTART-2026-OX91928 Security fixes in sqlpad 7.5.7-r5
Package sqlpad version 7.5.7-r5 fixes 1 vulnerabilities: ghsa-r292-9mhp-454m...
CLEANSTART-2026-GA72012 Security fixes in knative-net-istio 1.19.6-r0
Package knative-net-istio version 1.19.6-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
CLEANSTART-2026-EF97953 Security fixes in kubernetes 1.34.10-r2
Package kubernetes version 1.34.10-r2 fixes 2 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc...
CLEANSTART-2026-IQ87161 Security fixes in git-sync 4.4.3-r1
Package git-sync version 4.4.3-r1 fixes 1 vulnerabilities: CVE-2026-39824...
CLEANSTART-2026-OD86690 Security fixes in kubernetes-dns-node-cache-fips 1.25.0-r1
Package kubernetes-dns-node-cache-fips version 1.25.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...
CLEANSTART-2026-DP19562 Security fixes in kaniko 1.24.0-r2
Package kaniko version 1.24.0-r2 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...
CLEANSTART-2026-WU53412 Security fixes in maven 3.8.6-r1
Package maven version 3.8.6-r1 fixes 4 vulnerabilities: CVE-2023-2976, CVE-2020-8908, CVE-2025-48924, CVE-2025-67030...