CLEANSTART-2026-ZJ57830 Security fixes in binutils 2.39-r2

Package binutils version 2.39-r2 fixes 1 vulnerabilities: CVE-2022-38533...

CLEANSTART-2026-QC46400 Security fixes in maven 3.8.9-r2

Package maven version 3.8.9-r2 fixes 2 vulnerabilities: ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-OW39793 Security fixes in mongodb 8.2.1-r1

Package mongodb version 8.2.1-r1 fixes 3 vulnerabilities: CVE-2025-61727, CVE-2025-58181, CVE-2025-14847...

CLEANSTART-2026-WH63397 Security fixes in k8ssandra-client-fips 0.6.4-r5

Package k8ssandra-client-fips version 0.6.4-r5 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...

@bedrock/quasar (>=10.0.1, <=11.0.0), @cabloy/front-quasar (>=5.0.82, <=5.0.96) +10 more potentially affected by CVE-2026-73647 via quasar (>=2.0.0-beta.1, <=2.18.6)

quasar NPM version =2.0.0-beta.1, =10.0.1, =5.0.82, =2.0.1, =0.1.1-beta.0, =1.0.25-alpha.11, =1.0.183, =1.0.0, =5.0.97, =5.0.215 Source cves: CVE-2026-73647 Source advisory: OSV:GHSA-3R53-75J5-3G7J...

OPENSUSE-SU-2026:11364-1 libknet-devel-1.33-2.1 on GA media

These are all security issues fixed in the libknet-devel-1.33-2.1 package on the GA media of openSUSE Tumbleweed...

@12-apps/app-shell (>=1.0.0, <=5.13.1), @12-apps/auth (>=1.2.0, <=2.25.0) +271 more potentially affected by CVE-2026-73418 via @auth/core (>=0.1.0, <=0.41.2)

@auth/core NPM version =0.1.0, =1.0.0, =1.2.0, =1.3.0, =3.0.0, =4.11.0, =1.10.0, =0.0.1, =1.0.0, =1.0.1 - @anish-karthik/create-next-app 1.0.1 - @api-buddy/cli 3.0.5 - @api-buddy/plugin-auth-firebase 3.0.3 - @aponia.js/adapter-prisma 0.2.0 and more Source cves: CVE-2026-73418 Source advisory:...

OPENSUSE-SU-2026:11327-1 apache-sshd-2.19.0-2.1 on GA media

These are all security issues fixed in the apache-sshd-2.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64051

These are all security issues fixed in the apache-ivy-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in commonweb-moneymovement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee7c2ba53e2c7adae6a2b54776c21490794ee8f28fde98f5c61778380de1382 Package [email protected] contains 2 files with no a static rule matches and no traced behavioral findings. The version number 99.9.1 an...

PT-2026-61509

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.6...

Malicious code in express-bunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68139b9a62e1d546de6ce2e46d5203782dbf54f1af2edbd2b8f509528eb0f000 [email protected] ships a postinstall script that performs an HTTP GET to a hardcoded bare IP over plain HTTP...

CVE-2014-3608 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

OPENSUSE-SU-2026:11163-1 libxreaderdocument3-4.6.5-1.1 on GA media

These are all security issues fixed in the libxreaderdocument3-4.6.5-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-53333

These are all security issues fixed in the agama-web-ui-22+143.ee15dea20-46.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in dtxto1ols (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926fc822a2a507fafa6d2e1bb02a9b2bada7d89d3042bd3f0cac0ba2fd7c1991 package.json declares a postinstall script that runs automatically on npm install. The script performs filesystem reconnaissance find / -type f...

CVE-2026-48522 vulnerabilities

Vulnerabilities for packages: wazuh-manager-fips, superset-fips, litellm, openstack-glance-2026.1, openstack-glance-2025.1-fips, openstack-glance-2025.2, openstack-horizon-2026.1, airflow-postgres-fips, ggshield, openstack-glance-2025.2-fips, openstack-placement-2026.1, netbox,...

OPENSUSE-SU-2026:11043-1 python313-distributed-2026.6.0-1.1 on GA media

These are all security issues fixed in the python313-distributed-2026.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +609 more potentially affected by CVE-2026-11417 via aws-cdk-lib (>=2.0.0, <=2.245.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-11417 Source advisory: OSV:GHSA-999R-QQ7V-R334...