CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: typescript, commercial-gitlab-workhorse-ee, commercial-gitlab-workhorse-ee-fips, tigera-operator, timescaledb-parallel-copy, ldap2pg-fips, backup-restore-operator, kube-bench-fips, ldap2pg, vault-fips, timescaledb-parallel-copy-fips, wavefront-collector-for-kubernete...

GHSA-GX9W-9QQ8-M485 vulnerabilities

Vulnerabilities for packages: typescript, commercial-gitlab-workhorse-ee, commercial-gitlab-workhorse-ee-fips, tigera-operator, timescaledb-parallel-copy, ldap2pg-fips, backup-restore-operator, kube-bench-fips, ldap2pg, vault-fips, timescaledb-parallel-copy-fips, wavefront-collector-for-kubernete...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: typescript, commercial-gitlab-workhorse-ee, commercial-gitlab-workhorse-ee-fips, tigera-operator, timescaledb-parallel-copy, ldap2pg-fips, backup-restore-operator, kube-bench-fips, ldap2pg, vault-fips, timescaledb-parallel-copy-fips, wavefront-collector-for-kubernete...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: pgwatch, envoy-gateway, seaweedfs, harbor, grafana-alloy-fips, gitlab-cng, cloudprober-fips, grafana-alloy, authentik-fips, sftpgo-plugin-eventsearch, sqlexporter-fips, rke2-cloud-provider-fips, bento, gitaly-fips, kine, cloudnative-pg-fips, envoy-gateway-fips,...

alauda (>=0.2.1, <=0.2.2), catsup (>=0.3.8, <=0.3.11) +5 more potentially affected by CVE-2017-18342 via pyyaml (3.10.0)

pyyaml PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyyaml and may be impacted: - alauda =0.2.1, =0.3.8, =0.0.6, =1.0.0, =1.0.0a1, =1.0.2.0.3, =1.0.3.0.3.post1 - thumpy 0.3.2 Source cves: CVE-2017-18342 Source advisory:...