CLEANSTART-2026-YG91374 Security fixes in hubble-ui-fips 0.13.3-r1

Package hubble-ui-fips version 0.13.3-r1 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, CVE-2025-58190...

CLEANSTART-2026-KA71089 Security fixes in airflow-3 3.1.8-r2

Package airflow-3 version 3.1.8-r2 fixes 5 vulnerabilities: ghsa-r95x-qfjj-fjj2, CVE-2026-44681, CVE-2026-48710, ghsa-29h4-r29x-hchv, CVE-2026-8838...

CLEANSTART-2026-WE49959 Security fixes in ollama 0.30.10-r0

Package ollama version 0.30.10-r0 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39821, CVE-2026-25680, CVE-2026-33813...

CLEANSTART-2026-SJ52706 Security fixes in npm 11.11.0-r0

Package npm version 11.11.0-r0 fixes 2 vulnerabilities: CVE-2026-27903, CVE-2026-27904...

CLEANSTART-2026-QC46400 Security fixes in $pkgname-${pkgver%%.*} 3.8.9-r2

Package $pkgname-$pkgver%%. version 3.8.9-r2 fixes 2 vulnerabilities: ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-AD15516 Security fixes in prometheus-redis-exporter-fips 1.77.0-r0

Package prometheus-redis-exporter-fips version 1.77.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-ZR84349 Security fixes in configmap-reload 0.15.0-r1

Package configmap-reload version 0.15.0-r1 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-EZ64773 Security fixes in python3 3.12.12-r0

Package python3 version 3.12.12-r0 fixes 3 vulnerabilities: CVE-2026-1703, CVE-2025-24049, CVE-2025-59375...

CLEANSTART-2026-QN25000 Security fixes in configmap-reload 0.15.0-r0

Package configmap-reload version 0.15.0-r0 fixes 23 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2026-25679...

CLEANSTART-2026-WH63397 Security fixes in k8ssandra-client-fips 0.6.4-r5

Package k8ssandra-client-fips version 0.6.4-r5 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...

CLEANSTART-2026-SM87479 Security fixes in cert-manager-cmctl-fips 2.4.0-r2

Package cert-manager-cmctl-fips version 2.4.0-r2 fixes 6 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2024-36537, CVE-2026-25518...

CLEANSTART-2026-WA93687 Security fixes in syft 1.39.0-r0

Package syft version 1.39.0-r0 fixes 5 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2026-25934...

Security update for perl-DBI

This update for perl-DBI fixes the following issues CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a process...

MAL-2026-11193 Malicious code in litespeed-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8 This npm package a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module ships a preinstall script and a top-level...

Malicious code in litespeed-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8 This npm package a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module ships a preinstall script and a top-level...

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed into at least 18 packages carrying more than...

RockyLinux 10 : nodejs-nodemon (RLSA-2026:48032)

The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:48032 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 Tenable has extracted the preceding description block...

helm-4.2.3-4.1 on GA media (moderate)

helm-4.2.3-4.1 on GA media Announcement ID: openSUSE-SU-2026:11386-1 Rating: moderate Cross-References: CVE-2026-63308 CVSS scores: CVE-2026-63308 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

PT-2026-66602

Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 17.6.0 Description An issue exists where the API endpoints 'GET /api/v3/time entries' and 'GET /api/v3/cost entries' render links.workPackage.title and links.workPackage.href via the associated resource in the fil...

Linux Distros Unpatched Vulnerability : CVE-2026-17789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation...