CVE-2026-112899 vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

CVE-2026-112896 vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

GHSA-PCHR-8J38-3X4P vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

GHSA-65QM-JVMH-6PQG vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

CVE-2026-112403 vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

GHSA-8G5G-8VMR-9782 vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

CVE-2026-112897 vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

GHSA-P4WG-P73J-C528 vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

GHSA-462X-PGG6-55FP vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

GHSA-C6HW-5GRF-FF96 vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

GHSA-VX6W-VV9F-6GVG vulnerabilities

Vulnerabilities for packages: gftools, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1, openstack-horizon-2026.1-fips, apache-beam-python-3.14-sdk, superset, kubeflow-pipelines-visualization-server, superset-fips, nemo-gym, py3-pillow, tensorflow-cpu-jupyter, mlflow,...

CVE-2026-71195

A flaw was found in OpenStack Manila. When a file share is configured with public visibility, the service fails to verify project ownership before authorizing management operations. An authenticated user in a separate project can exploit this issue by submitting modification requests for public...

DEBIAN-CVE-2026-93856

In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...

CVE-2026-93856

In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...

DEBIAN-CVE-2026-71195

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual...

CVE-2026-71195

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual...

CVE-2026-71195

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual...

UBUNTU-CVE-2026-71195

In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual...

UBUNTU-CVE-2026-93856

In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...

CVE-2026-93856

In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making the Block Storage API v3.3 "List messages" call finds the non-expired user messages for other projects included in the...