CVE-2026-13914 vulnerabilities

Vulnerabilities for packages: chromium...

@datastream/validate (>=0.1.4, <=0.7.0), @lukoweb/apitogo (>=0.1.0, <=0.2.21) +8 more potentially affected by CVE-2026-15195 via @apidevtools/json-schema-ref-parser (>=15.1.1, <=15.3.5)

@apidevtools/json-schema-ref-parser NPM version =15.1.1, =0.1.4, =0.1.0, =0.1.26, =0.12.0, =0.8.2, =1.0.4, =2.12.0, =3.1.1-alpha-1765531917303-eb0309c.0, =1.5.15, =0.0.0-chore-migrate-to-snippetz.zccff2a2a, =0.82.4 Source cves: CVE-2026-15195 Source advisory:...

CVE-2026-13942 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-13949 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-54GW-X8GH-F524 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HP82-6QCX-X2XC vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: dapr, sqlexporter, addon-resizer, opensearch-k8s-operator, policy-controller, spicedb, step-ca, lazydocker, bom, aws-s3-controller, azurefile-csi, nri-nginx, falco-exporter, manifest-tool, amazon-cloudwatch-agent-operator, kubernetes-csi-external-provisioner,...

Updated ack packages fix security vulnerabilities

This update fixes several security vulnerabilities...

MGASA-2026-0239 Updated ack packages fix security vulnerabilities

This update fixes several security vulnerabilities...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssh: openssh-10.4p1-1.hum1 aarch64, x8664 openssh-askpass-10.4p1-1.hum1 aarch64, x8664 openssh-clients-10.4p1-1.hum1 aarch64, x8664 openssh-keycat-10.4p1-1.hum1 aarch64, x8664...

Malicious Package

Overview chain-api-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview qlkube is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

RHSA-2026:26989 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.55 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

CVE-2026-47828

During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS without verifying the server certificate, even though a CA certificate for that endpoint is available in the installation manifest. A network...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.55 security and extras update

Red Hat OpenShift Container Platform release 4.17.55 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-47828

During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS without verifying the server certificate, even though a CA certificate for that endpoint is available in the installation manifest. A network...

CVE-2026-53136 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-azure, linux-qemu...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kubernetes-dashboard, nerdctl, pinact, buildah, k3s, buildkitd, grafana-alloy, docker-cli-buildx, kots, kyverno, dask-gateway, grafana-operator, telegraf, falco-no-driver, docker, pulumi, traefik, containerd, istio, pulumi-language-dotnet,...

Linux Distros Unpatched Vulnerability : CVE-2026-50811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in...