CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-route53recoveryreadiness-fips, crossplane-provider-aws-route53recoveryreadiness, crossplane-provider-aws-macie2, crossplane-provider-aws-kms, crossplane-provider-aws-dax, crossplane-provider-aws-fsx, crossplane-provider-aws-glacier,...

GHSA-X5MV-8WGW-29HG vulnerabilities

Vulnerabilities for packages: ascan...

CVE-2026-55093 vulnerabilities

Vulnerabilities for packages: ascan...

GHSA-52CP-R559-CP3M vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, eslint, sqlpad, prism, code-server, vitess, opensearch-dashboards, lerna, ts-patch, pulumi...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, eslint, sqlpad, prism, code-server, vitess, opensearch-dashboards, lerna, ts-patch, pulumi...

GHSA-5GVW-P9QM-JGWH vulnerabilities

Vulnerabilities for packages: tez, jenkins-plugin-manager, apache-nifi-registry, confluent-kafka, cassandra, wavefront-proxy, apache-nifi, keycloak-config-cli, zookeeper, ruby3.3-jrjackson, spark, akhq, thingsboard, sonarqube, logstash, infinispan, druid, gradle, ruby3.2-jrjackson, scala,...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: tez, jenkins-plugin-manager, confluent-kafka, cassandra, wavefront-proxy, keycloak-config-cli, zookeeper, ruby3.3-jrjackson, spark, akhq, thingsboard, sonarqube, logstash, infinispan, druid, gradle, ruby3.2-jrjackson, flyway, apache-tika, opensearch...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: vale, crossplane-provider-keycloak, crossplane-provider-aws-sns, crossplane-provider-aws-cloudwatchlogs, glow, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudformation, crossplane-provider-aws-memorydb, crossplane-provider-azure-storage, mattermost,...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: vale, crossplane-provider-keycloak, crossplane-provider-aws-sns, crossplane-provider-aws-cloudwatchlogs, glow, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudformation, crossplane-provider-aws-memorydb, crossplane-provider-azure-storage, mattermost,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: smokescreen, k6, prometheus-alertmanager, grafana-mimir, crossplane-provider-keycloak, crossplane-provider-aws-sns, envconsul, tkn, op-geth, spire-server, crossplane-provider-aws-cloudwatchlogs, glow, falco-no-driver, argo-cd, nats, crossplane-provider-aws-ec2,...

CVE-2026-56852 vulnerabilities

Vulnerabilities for packages: smokescreen, k6, prometheus-alertmanager, grafana-mimir, crossplane-provider-keycloak, crossplane-provider-aws-sns, envconsul, tkn, op-geth, spire-server, crossplane-provider-aws-cloudwatchlogs, glow, falco-no-driver, argo-cd, nats, crossplane-provider-aws-ec2,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: hugo: hugo-0.164.0-0.1.2.hum1 aarch64, x8664 hugo-0.164.0-0.1.2.hum1.src src Security Fixes: hugo: CVE-2026-56852...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: capstone: capstone-5.0.8-0.1.hum1 aarch64, x8664 capstone-devel-5.0.8-0.1.hum1 aarch64, x8664 capstone-java-5.0.8-0.1.hum1 noarch capstone-static-5.0.8-0.1.hum1 aarch64, x8664...

OPENSUSE-SU-2026:21425-1 Security update for PackageKit

This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...

SUSE-SU-2026:22860-1 Security update for PackageKit

This update for PackageKit fixes the following issues: Security issue fixed: - CVE-2026-10294: manipulation of the argument frontend-socket can lead to improper authorization bsc1267250. Non security issue fixed: - KDE Discover ignores package locks bsc1263252...

MAL-2026-10993 Malicious code in torch-musa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc7f99306afb7d31dab4c2ca32f2feb984bcdc505cf1dc6c3ee736cd21f9bcc9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Moderate: Red Hat Security Advisory: libpng12 security update

An update for libpng12 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.10: opentofu1.10-1.10.10-0.3.hum1 aarch64, x8664 opentofu1.10-1.10.10-0.3.hum1.src src Security Fixes: opentofu1.10: CVE-2026-56852...

Malicious code in kijai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86481ee3f08109eeaec60a41afb7c2e8d03efd680cc5bf846bdc342ec4205205 The package advertises itself as a high-throughput bulk-mail tool and ships every one of its 50 JS files cli.js, denv.js, helpers.js, all commands/.j...

MAL-2026-11014 Malicious code in kijai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86481ee3f08109eeaec60a41afb7c2e8d03efd680cc5bf846bdc342ec4205205 The package advertises itself as a high-throughput bulk-mail tool and ships every one of its 50 JS files cli.js, denv.js, helpers.js, all commands/.j...