GHSA-5WFC-HJRC-GQ87 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker...

GHSA-5WFC-HJRC-GQ87 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker...

GHSA-RQ48-56F4-2WW7 vulnerabilities

Vulnerabilities for packages: chromium...

SUSE SLED15 / SLES15 Security Update : libsndfile (SUSE-SU-2026:1968-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1968-1 advisory. This update for libsndfile fixes the following issues - CVE-2025-52194: buffer overflow in the ircamreadheader...

Server-side Request Forgery (SSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the isSSRFSafeURL process. An attacker can access internal network resources or sensitive information by exploiting DNS rebindi...

CVE-2026-44294 vulnerabilities

Vulnerabilities for packages: homepage, pulumi, librechat, nemo, opentelemetry-auto-instrumentations-node, renovate, cadence-web, vitess, kibana, gemini-cli, kubeflow-centraldashboard...

GHSA-V87V-83H2-53W7 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, kubeflow-pipelines-visualization-server...

CVE-2026-44578 vulnerabilities

Vulnerabilities for packages: keep...

GHSA-4C54-JJ6J-3J34 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-vmware, linux-aws, linux-azure...

CVE-2025-63706

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

GHSA-2XX6-QF7X-GRQH next-npm-version is vulnerable to Command injection

NPM package next-npm-version1.0.1 is vulnerable to Command injection...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the downloadFrom and webhook processes. An attacker can access internal network resources and potentially exfiltrate sensitive information or interact with internal-only services by supplying special...

PT-2026-38453

Name of the Vulnerable Software and Affected Versions query-parser-string version 1.0.0 Description The software is subject to Prototype Pollution, a condition where an attacker can manipulate the prototype of an object to alter the behavior of the application. This occurs because the package fai...

CVE-2025-63706

The CVE-2025-63706 entry concerns the NPM package next-npm-version1.0.1 , reported as vulnerable to command injection . Multiple connected records corroborate the issue across NVD/CVE and related feeds. The vulnerability is described as critical with a CVSS 3.1 base score of 9.8 (vectors: AV:N/AC...

GHSA-75XQ-5H9V-W6PX vulnerabilities

Vulnerabilities for packages: logstash, kube-logging-operator, ruby4.0-rails, ruby3.3-net-imap, kube-fluentd-operator, ruby3.2-net-imap, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails, ruby3.4-net-imap, ruby4.0-net-imap...

GHSA-WPQR-6V78-JR5G vulnerabilities

Vulnerabilities for packages: gemini-cli...

RHEL 9 : sudo (RHSA-2026:13889)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:13889 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

AlmaLinux 9 : python-tornado (ALSA-2026:13670)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:13670 advisory. tornado-python: Tornado: Denial of Service via large multipart bodies CVE-2026-31958 tornado: Tornado: Cookie attribute injection due to improper handlin...

Fedora 43 : insight (2026-e0f5e87dd6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0f5e87dd6 advisory. Fix CVE-2026-6846. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

MiracleLinux 9 : grafana-pcp-5.1.1-14.el9_7 (AXSA:2026-539:06)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-539:06 advisory. golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root CVE-2026-32282 crypto/tls: golang: Go crypto/tls: Denial of Service via...