GHSA-RGJ7-G3M4-5G8C vulnerabilities

Vulnerabilities for packages: homepage, peerdb-ui, tileserver-gl, tileserver-gl-fips, langfuse-fips, librechat...

GHSA-RMFH-4236-C3GJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-84X7-XF96-M92Q vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3G93-JFGC-W65C vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WMM4-886H-RF4Q vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5P85-F63J-HQJ9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XQQH-3W52-Q8P7 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, ruby4.0-rails, ruby3.2-rails...

FreeBSD : jenkins -- multiple vulnerabilities (102bc631-a6da-11f1-ba21-00e0edd85c6a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 102bc631-a6da-11f1-ba21-00e0edd85c6a advisory. Jenkins Security Advisory 2026-09-02: Tenable has extracted the preceding description block...

GHSA-GHVC-7HP8-2G2V vulnerabilities

Vulnerabilities for packages: apache-tika...

Important: python

Issue Overview: CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data. CVE-2026-15308 When...

GHSA-JGCH-4H46-4Q53 vulnerabilities

Vulnerabilities for packages: chromium...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.2 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Fedora 42 : composer (2026-d91f313a63)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d91f313a63 advisory. Version 2.9.7 - 2026-04-14 Fixes regression calling custom script command aliases that are called a substring of a composer command 12802 ---- Versi...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.4 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

flowflops (>=0.0.1.post2211140919, <=0.0.1.post2211151211) potentially affected by CVE-2025-65890 via oneflow (0.9.0)

oneflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on oneflow and may be impacted: - flowflops =0.0.1.post2211140919, =0.0.1.post2211151211 Source cves: CVE-2025-65890 Source advisory: SNYK:PYTHON-ONEFLOW-15162578...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-179444

Malicious code in cybernetics-duplex-wolf-json npm...

Fedora 42 : rust-crypto-auditing-agent / rust-crypto-auditing-client / etc (2025-eb42f0a2fb)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-eb42f0a2fb advisory. Rebuild with tracing-subscriber v0.3.20 for CVE-2025-58160. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora: Security Advisory (FEDORA-2025-10d6b88be2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...