CVE-2026-42502 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-42502 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-39821 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-4

CVE-2026-39821 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-4. A patched version of the package is available...

CVE-2026-39821 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39821 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-41401 affecting package libyang for versions less than 2.1.148-3

CVE-2026-41401 affecting package libyang for versions less than 2.1.148-3. A patched version of the package is available...

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6

CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...

CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-39827 affecting package packer for versions less than 1.9.5-14

CVE-2026-39827 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-8

CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...

CVE-2026-42502 affecting package influxdb for versions less than 2.7.5-17

CVE-2026-42502 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...

CVE-2026-39821 affecting package azcopy for versions less than 10.25.1-5

CVE-2026-39821 affecting package azcopy for versions less than 10.25.1-5. A patched version of the package is available...

CVE-2026-39832 affecting package telegraf for versions less than 1.31.0-21

CVE-2026-39832 affecting package telegraf for versions less than 1.31.0-21. A patched version of the package is available...

CVE-2026-42506 affecting package telegraf for versions less than 1.31.0-21

CVE-2026-42506 affecting package telegraf for versions less than 1.31.0-21. A patched version of the package is available...

CVE-2026-39834 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-39834 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-46597 affecting package cf-cli for versions less than 8.7.11-6

CVE-2026-46597 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...

CVE-2026-42506 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-42506 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

CVE-2026-39830 affecting package cf-cli for versions less than 8.7.11-6

CVE-2026-39830 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...

CVE-2026-39832 affecting package docker-compose for versions less than 2.27.0-11

CVE-2026-39832 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...

CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13

CVE-2026-27136 affecting package docker-buildx for versions less than 0.14.0-13. A patched version of the package is available...

GHSA-WWX6-X28X-8259 russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

Summary When SSH compression is enabled, russh accepted compressed packets whose on-wire size passed the normal transport packet-length checks but whose decompressed size was much larger. This allowed a remote peer to send oversized post-decompression packets that should have been rejected. In...

CVE-2026-45151 NanoMQ: NULL Pointer Dereference

NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. In 0.24.8 and earlier, quicstreamrecv can dereference a null substream pointer when a substream is in reopen state. The code finishes the AIO with error but does not return before locking c-mtx...