GHSA-9G5Q-2W5X-HMXF vulnerabilities

Vulnerabilities for packages: cosmo-router, karma-fips, cosmo-router-fips, telegraf, zitadel...

GHSA-3FXJ-6JH8-HVHX vulnerabilities

Vulnerabilities for packages: cosmo-router, karma-fips, cosmo-router-fips, telegraf, zitadel...

GHSA-RJR7-JGGH-PGCP vulnerabilities

Vulnerabilities for packages: cosmo-router, karma-fips, cosmo-router-fips, telegraf, zitadel...

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, keda, jaeger, mc, tempo, metrics-server, loki, prometheus-pushgateway, opentelemetry-collector, mcp-grafana, minio-object-browser, k8sgpt, telegraf, aws-otel-collector, istio, certificate-transparency, amazon-cloudwatch-agent-operator,...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: keda, jaeger, mc, tempo, prometheus-pushgateway, loki, mcp-grafana, minio-object-browser, telegraf, aws-otel-collector, istio, grafana-pyroscope, certificate-transparency, splunk-otel-collector, minio, minio-operator, cloud-sql-proxy, karma, trillian, datadog-agent...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: keda, jaeger, mc, tempo, prometheus-pushgateway, loki, mcp-grafana, minio-object-browser, telegraf, aws-otel-collector, istio, grafana-pyroscope, certificate-transparency, splunk-otel-collector, minio, minio-operator, cloud-sql-proxy, karma, trillian, datadog-agent...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: grafana-operator, karpenter, nodetaint-fips, flux-image-reflector-controller, volume-modifier-for-k8s, mariadb-operator-fips, sealed-secrets-fips, nova-fips, github-mcp-server, flux-notification-controller, rabbitmq-messaging-topology-operator-fips,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: grafana-operator, karpenter, nodetaint-fips, flux-image-reflector-controller, volume-modifier-for-k8s, mariadb-operator-fips, sealed-secrets-fips, nova-fips, github-mcp-server, flux-notification-controller, rabbitmq-messaging-topology-operator-fips,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: incert, tkn-fips, nerdctl, aws-flb-kinesis-fips, cert-exporter-fips, nri-couchbase-fips, mongodb-kubernetes-operator-fips, promxy-fips, yunikorn-k8shim-fips, kor, cert-manager-fips, spqr, prometheus-nats-exporter-fips, secrets-store-csi-driver-provider-azure,...

CLEANSTART-2026-OH74241 Security fixes for GHSA-MQQF-5WVP-8FH8 applied in versions: 0.122-r0

Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

UBUNTU-CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

EUVD-2026-5199

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

CVE-2026-25236 affects the PEAR PHP framework. The vulnerability is a SQL injection risk in karma queries caused by unsafe literal substitution for an IN (...) list. Root cause: unsafe literal handling in Karma DAMBLAN-related queries prior to version 1.33.0. Impact: potential SQL injection. Miti...

CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236 PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

CVE-2026-25236

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...