CLEANSTART-2026-DV38059 Security fixes in k8ssandra-client-fips 0.6.4-r6

Package k8ssandra-client-fips version 0.6.4-r6 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QN25000 Security fixes in configmap-reload 0.15.0-r0

Package configmap-reload version 0.15.0-r0 fixes 23 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2026-25679...

CLEANSTART-2026-SJ52706 Security fixes in npm 11.11.0-r0

Package npm version 11.11.0-r0 fixes 2 vulnerabilities: CVE-2026-27903, CVE-2026-27904...

CLEANSTART-2026-YG91374 Security fixes in hubble-ui-fips 0.13.3-r1

Package hubble-ui-fips version 0.13.3-r1 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, CVE-2025-58190...

CLEANSTART-2026-JG22599 Security fixes in $pkgname-${pkgver%%.*} 3.9.14-r1

Package $pkgname-$pkgver%%. version 3.9.14-r1 fixes 1 vulnerabilities: CVE-2025-67030...

CLEANSTART-2026-QC46400 Security fixes in $pkgname-${pkgver%%.*} 3.8.9-r2

Package $pkgname-$pkgver%%. version 3.8.9-r2 fixes 2 vulnerabilities: ghsa-6fmv-xxpf-w3cw, CVE-2025-67030...

CLEANSTART-2026-WH63397 Security fixes in k8ssandra-client-fips 0.6.4-r5

Package k8ssandra-client-fips version 0.6.4-r5 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61730, CVE-2025-61728, CVE-2025-68119, CVE-2025-61731...

CLEANSTART-2026-ZR84349 Security fixes in configmap-reload 0.15.0-r1

Package configmap-reload version 0.15.0-r1 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-AR53211 Security fixes in kubernetes-dns-node-cache 1.24.1-r0

Package kubernetes-dns-node-cache version 1.24.1-r0 fixes 2 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-EZ64773 Security fixes in python3 3.12.12-r0

Package python3 version 3.12.12-r0 fixes 3 vulnerabilities: CVE-2026-1703, CVE-2025-24049, CVE-2025-59375...

CLEANSTART-2026-WE49959 Security fixes in ollama 0.30.10-r0

Package ollama version 0.30.10-r0 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39821, CVE-2026-25680, CVE-2026-33813...

CLEANSTART-2026-WA93687 Security fixes in syft 1.39.0-r0

Package syft version 1.39.0-r0 fixes 5 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2026-25934...

CLEANSTART-2026-OW39793 Security fixes in mongodb 8.2.1-r1

Package mongodb version 8.2.1-r1 fixes 3 vulnerabilities: CVE-2025-61727, CVE-2025-58181, CVE-2025-14847...

CLEANSTART-2026-KA71089 Security fixes in airflow-3 3.1.8-r2

Package airflow-3 version 3.1.8-r2 fixes 5 vulnerabilities: ghsa-r95x-qfjj-fjj2, CVE-2026-44681, CVE-2026-48710, ghsa-29h4-r29x-hchv, CVE-2026-8838...

Security update for perl-DBI

This update for perl-DBI fixes the following issues CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a process...

MAL-2026-11193 Malicious code in litespeed-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8 This npm package a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module ships a preinstall script and a top-level...

Malicious code in litespeed-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3af61c30e0a85b26bb59e521eb02a26c0b7071446d99d03cdf6b07f790b1f8 This npm package a name resemblance to the WordPress LiteSpeed Cache plugin, which is not an npm module ships a preinstall script and a top-level...

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed into at least 18 packages carrying more than...

Linux Distros Unpatched Vulnerability : CVE-2026-17663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer...

Linux Distros Unpatched Vulnerability : CVE-2026-17984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Browser in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML...