Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854. Spring Framework is used as part of our microservices. These vulnerabilities have been addressed. Please read the detai...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: prometheus-operator, grafana-rollout-operator, falco-no-driver, grype, grafana-alloy, metrics-server, step-issuer, aactl, elvish, flux, renovate, external-dns, kustomize, flux-notification-controller, kyverno, timoni, cloudnative-pg, bento, cerbos,...

EUVD-2022-7087

Malicious code in bioql PyPI...

CVE-2022-39272

Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interv...

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2

CVE-2024-43806 affecting package flux for versions less than 0.194.5-2. A patched version of the package is available...

AZL-48327 CVE-2024-43806 affecting package flux for versions less than 0.194.5-4

Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using rustix::fs::Dir using the linuxraw backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in rustix::fs::Dir::readmore, this can cause quick and...