GHSA-6QM2-MCQ7-53QP vulnerabilities

Vulnerabilities for packages: logstash, confluent-kafka, gradle, jenkins-plugin-manager, celeborn, sonarqube, apache-tika, spdx-tools-java, neo4j, trino, nextflow, druid, wavefront-proxy, apicurio-registry, apache-nifi-registry, cassandra-reaper, cassandra, dependency-track, gradle-stage0, akhq,...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (>=1.5.40, <=1.5.43) +24 more potentially affected by CVE-2026-75975 via fast-uri (>=3.0.1, <=3.1.5)

fast-uri NPM version =3.0.1, =0.3.1, =1.5.40, =1.4.2, =1.2.0, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2026-75975 Source advisory: OSV:GHSA-F65P-4M7J-42XC...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (>=1.5.40, <=1.5.43) +24 more potentially affected by CVE-2026-76172 via fast-uri (>=3.0.1, <=3.1.5)

fast-uri NPM version =3.0.1, =0.3.1, =1.5.40, =1.4.2, =1.2.0, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2026-76172 Source advisory: OSV:GHSA-JQFF-G426-HQXP...

CLSA-2026-1788363279 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 9 CVEs. Fixed in 5.3.37-tuxcare.10...

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +11358 more potentially affected by CVE-2026-83610 via xmldom (>=0.1.2, <=0.5.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.11.3-alpha.1660, =0.12.1-alpha.1671 and more Source cves: CVE-2026-83610 Source advisory: OSV:GHSA-6GMQ-8VP8-GCM6...

@agent-tool-platform/agent-kit (>=0.2.0, <=0.4.0), @agent-tool-platform/ast-summarizer (>=0.1.0, <=0.1.1) +328 more potentially affected by CVE-2026-16732 via fastify (>=5.8.3, <=5.12.0)

fastify NPM version =5.8.3, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0-vBETA-20260417080530, =0.0.1, =1.0.0, =0.0.0, =1.1.4, =4.0.0, =1.0.0-rc.2, =0.6.7, =0.6.7, =0.6.8 and more Source cves: CVE-2026-16732 Source advisory: OSV:GHSA-3M5P-2C4R-XXW2...

RHSA-2026:60449 Red Hat Security Advisory: OpenShift Container Platform 4.21.31 packages and security update

Bulletin has no description...

GHSA-5CC2-282F-JJQ2 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, mlrun, keep-fips, datadog-agent, mlrun-fips, airflow, keep...

CVE-2026-84833: Uncontrolled Resource Consumption

A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/core/src/agent/agent.ts of the component Browser Agent Message Construction. Performing a manipulation results in...

PT-2026-90764

TuxCare rebuilt 25 org.springframework packages to address 25 CVEs. Fixed in 6.0.12-tuxcare.1...

RHEL 9 : osbuild-composer (RHSA-2026:62753)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62753 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +85 more potentially affected by CVE-2026-84370 via svgo (>=2.0.0, <=2.8.0)

svgo NPM version =2.0.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.14971.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by CVE-2026-84370 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84370 Source advisory: SNYK:JS-SVGO-19498539...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +246 more potentially affected by CVE-2026-84369 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84369 Source advisory: SNYK:JS-SVGO-19498536...

1-topshiriq (1.0.0), 3nit-utils (>=0.11.1, <=0.23.0) +4174 more potentially affected by CVE-2026-84367 via joi (>=14.3.1, <=17.13.4)

joi NPM version =14.3.1, =0.11.1, =0.0.1, =2.0.0, =0.1.2, =2.0.11, =0.1.6-alpha.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.9 and more Source cves: CVE-2026-84367 Source advisory: SNYK:JS-JOI-19498547...

GHSA-F2R5-PQH9-R8F8 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, nextcloud-server, langfuse, arangodb, kibana, azurite, lerna, opensearch-dashboards-fips, prism, librechat, gitlab-rails-ce-fips, semaphore, langfuse-fips, wazuh-dashboard-fips, jitsucom-jitsu, redisinsight, wazuh-dashboard, gitlab-rails-ce...

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, nextcloud-server, langfuse, arangodb, kibana, azurite, lerna, opensearch-dashboards-fips, prism, librechat, gitlab-rails-ce-fips, semaphore, langfuse-fips, wazuh-dashboard-fips, jitsucom-jitsu, redisinsight, wazuh-dashboard, gitlab-rails-ce...

CVE-2026-67316 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, prism, lerna, langfuse, nextcloud-server...

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, prism, lerna, langfuse, nextcloud-server...

GHSA-F2R5-PQH9-R8F8 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, prism, lerna, langfuse, nextcloud-server...