CVE-2026-42033 vulnerabilities

Vulnerabilities for packages: langfuse, gitlab-rails-ce, langfuse-fips, lerna, redisinsight, kubeflow-centraldashboard, wazuh-dashboard, jitsucom-jitsu, prism, kibana, awx, nextcloud-server, wazuh-dashboard-fips, kubeflow-katib, opensearch-dashboards, opensearch-dashboards-fips, saf,...

CVE-2026-42043 vulnerabilities

Vulnerabilities for packages: langfuse, gitlab-rails-ce, langfuse-fips, lerna, redisinsight, kubeflow-centraldashboard, wazuh-dashboard, jitsucom-jitsu, prism, kibana, awx, nextcloud-server, wazuh-dashboard-fips, kubeflow-katib, opensearch-dashboards, opensearch-dashboards-fips, saf,...

GHSA-Q8QP-CVCW-X6JJ vulnerabilities

Vulnerabilities for packages: lerna, nextcloud-server, saf, gitlab-rails-ce-fips, langfuse, langfuse-fips, jitsucom-jitsu, wazuh-dashboard-fips, librechat, redisinsight, wazuh-dashboard, prism, awx, opensearch-dashboards, gitlab-rails-ce, kubeflow-centraldashboard, kibana, kubeflow-katib,...

CVE-2026-42040 vulnerabilities

Vulnerabilities for packages: langfuse, gitlab-rails-ce, langfuse-fips, lerna, redisinsight, kubeflow-centraldashboard, wazuh-dashboard, jitsucom-jitsu, prism, kibana, awx, nextcloud-server, wazuh-dashboard-fips, kubeflow-katib, opensearch-dashboards, opensearch-dashboards-fips, saf,...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS

Improper use of the static-eval npm package in the open source solution qnabot-on-aws versions 7.2.4 and earlier may allow an authenticated administrator to execute arbitrary code within the fulfillment Lambda execution context by injecting a crafted conditional chaining expression via the Conten...

CVE-2026-41139 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, opensearch-dashboards-fips, librechat...

CVE-2026-41139 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-35554 vulnerabilities

Vulnerabilities for packages: apache-nifi, debezium-connector-ibmi, strimzi-kafka-operator, wildfly, thingsboard, debezium-connector-db2, druid, logstash, opensearch, debezium-connector-spanner, debezium-connector-informix, debezium-connector-vitess, debezium...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: apache-nifi, debezium-connector-ibmi, strimzi-kafka-operator, wildfly, thingsboard, debezium-connector-db2, druid, logstash, opensearch, debezium-connector-spanner, debezium-connector-informix, debezium-connector-vitess, debezium...

GHSA-5QCV-4RPC-JP93 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, druid, knative-kafka-broker-fips, debezium-connector-spanner, logstash, apache-nifi, debezium-connector-informix, seata, thingsboard, debezium, opensearch, strimzi-kafka-operator-fips, debezium-connector-ibmi, opensearch-fips, wildfly,...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, opensearch-dashboards-fips, librechat...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard, opensearch-dashboards, opensearch-dashboards-fips...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard, opensearch-dashboards, opensearch-dashboards-fips...

CLEANSTART-2026-CB01846 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.6.1-r0, 2.6.1-r1, 2.6.1-r7

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YG73853 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.5.1-r0, 2.5.1-r1, 2.5.1-r2

Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...