196374 matches found
CLSA-2026-1788960197 TuxCare security update for 13 packages (1 CVE)
TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 2.18.1-tuxcare.5...
CLSA-2026-1788955035 TuxCare security update for 4 packages (1 CVE)
TuxCare rebuilt 4 packages to address 1 CVE. Fixed in 6.3.0-tuxcare.2...
CVE-2026-84445 vulnerabilities
Vulnerabilities for packages: cerbos-fips, nvidia-container-toolkit, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, newrelic-infrastructure-agent-fips, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips...
BIT-ELK-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation
Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...
ROOT-OS-DEBIAN-12-CVE-2025-71088 CVE-2025-71088 in linux - Patched by Root
Root has patched CVE-2025-71088 in the linux package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-75595 vulnerabilities
Vulnerabilities for packages: knative-kafka-broker, seata, akhq, celeborn, kayenta-fips, floci-az, logstash, kafka, cassandra-fips, zookeeper, tez, hadoop-fips, apache-nifi, cruise-control, drain-cleaner, elasticsearch, spark-fips, keycloak, pinot, apache-hop, flyway,...
@0xshogun/sdk (>=1.0.3, <=1.1.6), @100xsystems/test-suite-typescript (>=0.1.0, <=0.1.2) +1562 more potentially affected by CVE-2026-84373 via vitest (>=2.1.0, <=4.1.10)
vitest NPM version =2.1.0, =1.0.3, =0.1.0, =0.0.1, =0.2.4, =0.0.3, =0.2.0, =0.1.1, =0.1.1, =1.0.0, =1.0.0, =0.1.0, =0.8.0, =0.0.14, =0.6.0, =1.0.1 and more Source cves: CVE-2026-84373 Source advisory: OSV:GHSA-82FW-GWWQ-J7X9...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.15-1.1.hum1 aarch64, x8664 python3.13-debug-3.13.15-1.1.hum1 aarch64, x8664 python3.13-devel-3.13.15-1.1.hum1 aarch64, x8664 python3.13-freethreading-3.13.15-1.1.hum1...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.21-1.1.hum1 aarch64, x8664 python3.10-debug-3.10.21-1.1.hum1 aarch64, x8664 python3.10-devel-3.10.21-1.1.hum1 aarch64, x8664 python3.10-idle-3.10.21-1.1.hum1 aarch64,...
CLSA-2026-1788873744 TuxCare security update for 32 packages (11 CVEs)
TuxCare rebuilt 32 packages to address 11 CVEs. Fixed in 7.0.70-tuxcare.3...
CLSA-2026-1788871245 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.31-tuxcare.14...
CLSA-2026-1788869743 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 2.6.13-tuxcare.7...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.5.hum1 aarch64, x8664 glibc-2.43-8.5.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.5.hum1 aarch64, x8664 glibc-benchtests-2.43-8.5.hum1 aarch64, x8664...
CVE-2026-86993: Missing Authorization
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming...
RHEL 10 : ignition (RHSA-2026:65335)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65335 advisory. Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing...
AlmaLinux 10 : git-lfs (ALSA-2026:64788)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:64788 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-39883 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin iore...
CLSA-2026-1788813738 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 8 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.5...