GHSA-7Q8Q-RJ6J-MHJQ vulnerabilities

Vulnerabilities for packages: langfuse-fips, librechat, nextcloud-server, opensearch-dashboards, azurite, wazuh-dashboard, semaphore, wazuh-dashboard-fips, kibana, langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards-fips, redisinsight, prism, jitsucom-jitsu, awx...

GHSA-GCFJ-64VW-6MP9 vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

GHSA-JQH4-M9W3-8HP9 vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

GHSA-42H9-826W-CGV3 vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

GHSA-F4GW-2P7V-4548 vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

GHSA-HCPX-6FM6-WX23 vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

GHSA-PMV8-RQ9R-6J72 vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

GHSA-MWF2-3PR3-8698 vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

GHSA-7Q8Q-RJ6J-MHJQ vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

GHSA-MMX7-HFXF-JPPX vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, opensearch-dashboards, langfuse, prism, kubeflow-centraldashboard, nextcloud-server...

AlmaLinux 9 : acl (ALSA-2026:42736)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42736 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370 Tenable...

PT-2026-71917

Name of the Vulnerable Software and Affected Versions jupyterlab versions 4.5.0 through 4.5.9 jupyterlab versions 4.6.0 through 4.6.1 Description The PyPI extension manager in JupyterLab fails to properly enforce blocked extensions uris because it uses a custom normalization process that is weake...

Photon OS 5.0: Go PHSA-2026-5.0-0855

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid328957...

Slackware Linux 15.0 / current libssh Multiple Vulnerabilities (SSA:2026-202-01)

The version of libssh installed on the remote host is prior to 0.11.5 / 0.12.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-202-01 advisory. New libssh packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

OPENSUSE-SU-2026:11332-1 grafana-12.4.5-3.1 on GA media

These are all security issues fixed in the grafana-12.4.5-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11337-1 java-26-openjdk-26.0.2.0-1.1 on GA media

These are all security issues fixed in the java-26-openjdk-26.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-63348

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

Photon OS 5.0: Libsoup PHSA-2026-5.0-0851

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0851. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

OPENSUSE-SU-2026:11333-1 helm-4.2.3-3.1 on GA media

These are all security issues fixed in the helm-4.2.3-3.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 10 : git-lfs (ELSA-2026-30855)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30855 advisory. - Fix CVE-2026-39821 in vendored golang.org/x/net idna package Tenable has extracted the preceding description block directly from the Oracle Linux security...