GHSA-RX9V-2FJR-MHX5 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

CVE-2026-5051 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-5807 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-RX9V-2FJR-MHX5 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-8R5M-3F66-QPR3 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-5052 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-4525 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2026-3605 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-web, traefik-fips, x509-certificate-exporter, external-secrets-operator, crossplane-provider-azure-solutions, crossplane-provider-azure-storage, crossplane-provider-azure-servicenetworking, crossplane-provider-azure-storagesync,...

GHSA-MPWR-8VM7-H73F vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-storage, cert-manager, crossplane-provider-azure-authorization, crossplane-provider-azure-sql, crossplane-provider-azure-managedidentity, grafana, external-secrets-operator, nfpm, splunk-otel-collector, telegraf,...

ROS-20260624-73-0016

The vulnerability in golang-opentelemetry-otel is related to the use of an unreliable search path. Exploiting this vulnerability can allow an attacker to increase their privileges...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6910 more potentially affected by CVE-2026-54513 via tools.jackson.core:jackson-databind (>=3.0.0 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves:...

Cross-Site Scripting (XSS)

Vitest is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to the otelCarrier query parameter being inserted directly into an inline module script and treated as JavaScript source rather than data, which allows an attacker to craft a malicious browser-runner URL and execute...

MAL-2026-6031 Malicious code in @mastra/otel-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1998b4d1e4f2d960197b14f573628777e4456ff374f007ac39cca273a206aea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @mastra/otel-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1998b4d1e4f2d960197b14f573628777e4456ff374f007ac39cca273a206aea The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @mastra/otel-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a8b6a73558d739f5ae803c6330009938e0a19f5c6a1a7c0f01cf4884fbea9b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-5958 Malicious code in @mastra/otel-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a8b6a73558d739f5ae803c6330009938e0a19f5c6a1a7c0f01cf4884fbea9b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

SUSE-SU-2026:21989-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: Update to version 20260430.00 Update THIRDPARTYLICENSES to be package specific location. 608 Update dependencies and go version to 1.26.2 607 bsc1265762, CVE-2026-33814 Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 604...

Cross-site Scripting (XSS)

Overview @vitest/browser is a Browser running for Vitest Affected versions of this package are vulnerable to Cross-site Scripting XSS via the otelCarrier query parameter being directly inserted into an inline script without sanitization. An attacker can execute arbitrary JavaScript in the context...