CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: trivy-operator, dagger, docker-cli-buildx, kubevela, steampipe, buildkitd, cluster-api-helm-controller, fuse-overlayfs-snapshotter, scorecard, xeol, chartmuseum, eksctl, neuvector-scanner, syft, helm, kubescape-operator, docker, tigera-operator, nerdctl, spegel,...

@absolutejs/absolute (0.12.4), @bitblit/ngx-acute-common (>=5.1.121, <=6.1.180-alpha) +36 more potentially affected by CVE-2026-88057 via @angular/compiler (>=20.0.0, <=20.3.21)

@angular/compiler NPM version =20.0.0, =5.1.121, =5.1.121, =261.20.1, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =7.3.49-4369, =4.2.16-4435, =8.9.1, =8.9.1, =0.0.57, =0.0.60 - @saritasa/renewaire-frontend-sdk 0.1.0-dev.101 and more Source cves: CVE-2026-88057 Source advisory:...

CLSA-2026-1789069337 TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 5.0.2-tuxcare.1...

CVE-2026-88892 OpenPanel through 2.3.0 SSRF via Unguarded Importer File URL Fetch

In OpenPanel through 2.3.0, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts, parseRemoteFile calls fetch on config.fileUrl, which is validated only by...

CLSA-2026-1789031241 TuxCare security update for 9 packages (1 CVE)

TuxCare rebuilt 9 packages to address 1 CVE. Fixed in 5.18.1-tuxcare.6...

CVE-2026-53113 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-aws...

GHSA-4C74-G9CQ-VHC5 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-75596 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, seata, akhq, celeborn, kayenta-fips, floci-az, logstash, kafka, cassandra-fips, zookeeper, tez, hadoop-fips, apache-nifi, cruise-control, drain-cleaner, elasticsearch, spark-fips, keycloak, pinot, apache-hop, flyway,...

sherlock v0.16.2

Hunt down social media accounts by username across 400+ social networks Installation • Usage • Contributing Installation !WARNING Packages for ParrotOS and Ubuntu 24.04, maintained by a third party, appear to be broken. Users of these systems should defer to uv/pipx/pip or Docker. Method| Notes...

CVE-2026-84375 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, lerna, eslint, prism, pulumi, argo-workflows, sqlpad, ts-patch, opensearch-dashboards, code-server, kubeflow-katib, vitess, renovate...

RHEL 9 : RHEL AI 3.6 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:66381)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66381 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

RockyLinux 10 : osbuild-composer (RLSA-2026:65895)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65895 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 net/mail: golang: net/mai...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse-fips, azurite, jitsucom-jitsu, librechat, opensearch-dashboards-fips, langfuse, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard-fips, kubeflow-centraldashboard, lerna, gitlab-rails-ce, wazuh-dashboard, semaphore, prism,...

GHSA-7JX3-JQCP-HHGC vulnerabilities

Vulnerabilities for packages: checkov, awx, mlflow, opal...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse-fips, azurite, jitsucom-jitsu, librechat, opensearch-dashboards-fips, langfuse, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard-fips, kubeflow-centraldashboard, lerna, gitlab-rails-ce, wazuh-dashboard, semaphore, prism,...

GHSA-6R2R-WW24-7H52 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, awx, opal, checkov, mlflow, datahub-ingestion-fips...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: lerna, jitsucom-jitsu, prism, nextcloud-server, opensearch-dashboards, langfuse, kubeflow-centraldashboard...

GO-2026-6302 Signature verification TOCTOU allows installing unverified package content in github.com/crossplane/crossplane-runtime/v2

Signature verification TOCTOU allows installing unverified package content in github.com/crossplane/crossplane-runtime/v2...

CLSA-2026-1788970606 TuxCare security update for 8 packages (1 CVE)

TuxCare rebuilt 8 packages to address 1 CVE. Fixed in 3.6.5-tuxcare.6...

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...