GHSA-3P68-RC4W-QGX5 vulnerabilities

Vulnerabilities for packages: prism, langfuse, kubeflow-centraldashboard, lerna, kubeflow-pipelines, jitsucom-jitsu, opensearch-dashboards, saf, kubeflow-katib, nextcloud-server...

GHSA-XRW6-GWF8-VVR9

creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ...

CVE-2026-40077

creationtimestamp| type| source ---|---|--- 2026-04-09 17:40:19+00:00| published-proof-of-concept| https://github.com/henrygd/beszel/security/advisories/GHSA-5f5r-95pg-xrpm...

CVE-2026-35040

creationtimestamp| type| source ---|---|--- 2026-04-09 12:50:48+00:00| published-proof-of-concept| https://github.com/nearform/fast-jwt/security/advisories/GHSA-3j8v-cgw4-2g6q...

Wasmtime with Winch compiler backend may allow a sandbox-escaping memory access

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xx5w-cvp6-jv83 For more information see the GitHub-hosted security advisory...

Panic when lifting `flags` component value

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m758-wjhj-p3jq For more information see the GitHub-hosted security advisory...

CVE-2026-40152

creationtimestamp| type| source ---|---|--- 2026-04-09 10:01:49+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7j2f-xc8p-fjmq...

GHSA-53MR-6C8Q-9789 vulnerabilities

Vulnerabilities for packages: litellm, airflow...

CVE-2026-34166

creationtimestamp| type| source ---|---|--- 2026-04-08 13:25:28+00:00| published-proof-of-concept| https://github.com/harttle/liquidjs/security/advisories/GHSA-mmg9-6m6j-jqqx...

GHSA-736H-475M-XHJC vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception via the eventstream decoder process. An attacker can cause the host process to terminate unexpectedly by sending a crafted EventStream response frame containing a header value type byte outside the valid range...

CVE-2026-39373

creationtimestamp| type| source ---|---|--- 2026-04-08 00:16:14+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-fjrm-76x2-c4q4...

GHSA-X8RX-789C-2PXQ

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

GHSA-66FC-V5XJ-X859

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks...

GHSA-VPWC-V33Q-MQ89

creationtimestamp| type| source ---|---|--- 2026-04-07 19:33:43+00:00| seen| Telegram/7stdzVfIjMVb7tvEQLoql-CFRLg5JIYu0eUqsXCfmQ30DI4...

GHSA-CJ63-JHHR-WCXV vulnerabilities

Vulnerabilities for packages: wazuh-dashboard...

GHSA-C427-H43C-VF67 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, open-webui, kserve, kubeflow-pipelines-visualization-server, airflow, dask-kubernetes, checkov...

GHSA-2WVG-62QM-GJ33

creationtimestamp| type| source ---|---|--- 2026-04-06 21:21:26+00:00| published-proof-of-concept| Telegram/xKxKUYX0BRejEqYlrURXsjCQY9BctYcoeewNmSMWqY7riM...

GHSA-RRVG-CXH4-QHRV vulnerabilities

Vulnerabilities for packages: py3-oauthenticator...

GHSA-QV7J-4883-HWH7 vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.4-rails, gitlab-cng, gitlab-rails-ce-fips, kube-fluentd-operator, pact-broker-docker, ruby3.2-rack, gitlab-rails-ce, pact-broker-docker-fips, ruby3.2-rails, ruby4.0-rack, logstash, ruby3.3-rack...