CLEANSTART-2026-DF65742 Security fixes in thingsboard-tb-web-ui 4.3.1-r0

Package thingsboard-tb-web-ui version 4.3.1-r0 fixes 4 vulnerabilities: CVE-2026-26960, CVE-2026-29786, CVE-2026-31802, CVE-2026-2391...

CLEANSTART-2026-XH35177 Security fixes in kubernetes-csi-driver-nfs-fips 4.13.2-r0

Package kubernetes-csi-driver-nfs-fips version 4.13.2-r0 fixes 2 vulnerabilities: CVE-2026-29181, ghsa-mh2q-q3fh-2475...

CLEANSTART-2026-WW31009 Security fixes in kafka-ui 1.2.0-r1

Package kafka-ui version 1.2.0-r1 fixes 16 vulnerabilities: ghsa-9pp5-9c7g-4r83, ghsa-8v5q-rhf3-jphm, ghsa-mg83-c7gq-rv5c, ghsa-hh3m-g4qj-4835, ghsa-jmp9-x22r-554x...

CLEANSTART-2026-JS77215 Security fixes in thingsboard-tb-web-ui 4.3.1.1-r0

Package thingsboard-tb-web-ui version 4.3.1.1-r0 fixes 1 vulnerabilities: ghsa-r4q5-vmmm-2653...

CLEANSTART-2026-IW72112 Security fixes in management-api-for-apache-cassandra-5.0 0.1.118-r2

Package management-api-for-apache-cassandra-5.0 version 0.1.118-r2 fixes 26 vulnerabilities: CVE-2026-42583, CVE-2026-42579, CVE-2026-33870, CVE-2026-42584, CVE-2026-42587...

CLEANSTART-2026-JL72717 Security fixes in thingsboard-tb-web-ui 4.2.1.1-r2

Package thingsboard-tb-web-ui version 4.2.1.1-r2 fixes 2 vulnerabilities: ghsa-34x7-hfp2-rc4v, ghsa-r6q2-hw4h-h46w...

CLEANSTART-2026-FW89965 Security fixes in kubernetes-csi-external-resizer 2.0.0-r0

Package kubernetes-csi-external-resizer version 2.0.0-r0 fixes 36 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, CVE-2026-39820, CVE-2026-25679...

Vulnerabilities are handled in GitLab through GitLab Inc.

GitLab Inc. has addressed several vulnerabilities in GitLab, particularly in versions prior to 19.0.5, 19.1.3, and 19.2.1, including those of the GitLab Enterprise Edition EE. These vulnerabilities concern various aspects of GitLab: - Improper access control, allowing authenticated users to acces...

CVE-2026-64510

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI Non-Volatile Memory NVM Firmware Interface Table NFIT core. Improper error handling during the initialization process can leave a dangling pointer. A local attacker could potentially trigger an ACPI Machine Che...

CVE-2026-59328 Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips

Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser SWT Browser with JavaScript enabled. Using untrusted and compromised Initializr endpoints for the Spring Boot starter wizard can result in arbitrary script execution inside the embedded...

CVE-2026-47858

CVE-2026-47858 affects Spring Tools environments when the live information startup mode is enabled in Spring Tools for Eclipse (5.2.0 and earlier) and Spring Tools for VSCode/Cursor/Theia (2.2.0 and earlier). The vulnerability is described as a JMX-based remote code execution risk arising from th...

EUVD-2026-50965

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

CVE-2026-67248 A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

CVE-2026-64471

A flaw was found in the Linux kernel's Bluetooth subsystem btusb. When a Bluetooth controller fails to register, the system may not properly release associated interfaces. This can lead to a use-after-free or double-free memory error when these interfaces are later disconnected, potentially causi...

CVE-2026-18186

CVE-2026-18186 affects the ADM platform’s FTP Backup component. The issue is a stored format-string vulnerability where user-controlled backup configuration data may be written into a task log and later processed via an unsafe format-string operation. Exploitation can lead to memory information d...

DEBIAN-CVE-2026-18003

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18008

Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-18010

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

DEBIAN-CVE-2026-18007

Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18003

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...