MGASA-2026-0287 Updated tig package fixes a security vulnerability

The updated package fixes a security vulnerability: editor command injection vulnerability...

Updated tig package fixes a security vulnerability

The updated package fixes a security vulnerability: editor command injection vulnerability...

GHSA-VJ7Q-GJH5-988W vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, semgrep, litellm, lmcache-cuda-12.8...

GHSA-HVRP-RF83-W775 vulnerabilities

Vulnerabilities for packages: semgrep, litellm...

CVE-2026-13149 vulnerabilities

Vulnerabilities for packages: graalvm, pulumi, rancher-api-ui, azurite, kibana, langfuse, nextcloud-server, thingsboard, thingsboard-fips, unleash-fips, serve, authentik, jupyter-base-notebook, langfuse-fips, wazuh-dashboard, prism, opensearch-dashboards, pelias-api, saf, unleash, foxx-cli,...

GHSA-3JXR-9VMJ-R5CP vulnerabilities

Vulnerabilities for packages: graalvm, pulumi, rancher-api-ui, azurite, kibana, langfuse, nextcloud-server, thingsboard, thingsboard-fips, unleash-fips, serve, authentik, jupyter-base-notebook, langfuse-fips, wazuh-dashboard, prism, opensearch-dashboards, pelias-api, saf, unleash, foxx-cli,...

CVE-2026-39244 vulnerabilities

Vulnerabilities for packages: sqlpad, saf, kibana, redisinsight...

GHSA-W8WR-V893-VJVP vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kibana, gitlab-rails-ce, sqlpad, graalvm, lerna, saf, homepage, code-server, actions-runner, kubeflow-centraldashboard, pulumi, opensearch-dashboards-fips, npm, gitlab-rails-ce-fips, wazuh-dashboard, wazuh-dashboard-fips, prism...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kibana, gitlab-rails-ce, sqlpad, graalvm, lerna, saf, homepage, code-server, actions-runner, kubeflow-centraldashboard, pulumi, opensearch-dashboards-fips, npm, gitlab-rails-ce-fips, wazuh-dashboard, wazuh-dashboard-fips, prism...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kibana, gitlab-rails-ce, sqlpad, graalvm, lerna, saf, homepage, code-server, actions-runner, kubeflow-centraldashboard, pulumi, opensearch-dashboards-fips, npm, gitlab-rails-ce-fips, wazuh-dashboard, wazuh-dashboard-fips, prism...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, kibana, gitlab-rails-ce, sqlpad, graalvm, lerna, saf, code-server, actions-runner, kubeflow-centraldashboard, pulumi, opensearch-dashboards-fips, npm, gitlab-rails-ce-fips, wazuh-dashboard, wazuh-dashboard-fips, prism...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: saf, lerna, code-server, sqlpad, prism, kubeflow-centraldashboard, pulumi, npm...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: saf, lerna, code-server, sqlpad, prism, kubeflow-centraldashboard, pulumi, npm...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: saf, lerna, code-server, sqlpad, prism, kubeflow-centraldashboard, pulumi, npm...

Malicious code in react-tabulix-virtual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...

MAL-2026-10989 Malicious code in react-tabulix-virtual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90c8fc6aca32e28a4faed28ca3f7879cb22e84139b7b09a2a83c5df74259a14 package.json declares scripts.preinstall as node./dist/index.d.js, which runs automatically on npm install. dist/index.d.js contains a base64-encoded...

@openinc/parse-server-opendash (>=4.0.0, <=4.1.1) potentially affected by CVE-2026-64627 via parse-server (>=9.6.0-alpha.37, <=9.9.1-alpha.13)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.1.1 Source cves: CVE-2026-64627 Source advisory: SNYK:JS-PARSESERVER-18306801...

Security update for ffmpeg

This update for ffmpeg fixes the following issue CVE-2025-10256: NULL pointer dereference in Firequalizer filter bsc1249431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2023-2976 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-10237 CVE-2018-10237 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2018-10237 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...