GHSA-68JP-44VC-2X5H vulnerabilities

Vulnerabilities for packages: awx, kubeflow-centraldashboard, azurite, langfuse, prism, semaphore, gitlab-rails-ce-fips, kibana, jitsucom-jitsu, opensearch-dashboards, wazuh-dashboard, gitlab-rails-ce, lerna, opensearch-dashboards-fips, wazuh-dashboard-fips, librechat, langfuse-fips,...

GHSA-FQJ3-H9PC-443H vulnerabilities

Vulnerabilities for packages: kibana, jitsucom-jitsu, awx, wazuh-dashboard-fips, kubeflow-centraldashboard, librechat, nextcloud-server, opensearch-dashboards, wazuh-dashboard, langfuse, prism, semaphore, gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, redisinsight, lerna,...

CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: kibana, jitsucom-jitsu, awx, wazuh-dashboard-fips, kubeflow-centraldashboard, librechat, nextcloud-server, opensearch-dashboards, wazuh-dashboard, langfuse, prism, semaphore, gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce, redisinsight, lerna,...

CVE-2026-18401 vulnerabilities

Vulnerabilities for packages: apache-tika-fips, cassandra-fips, jenkins-plugin-manager, zookeeper-fips, management-api-for-apache-cassandra-5.0, nuxeo, tez, s3proxy, kayenta, localstack, solr, ruby3.4-jrjackson, celeborn, dependency-track-apiserver, geoserver, apache-activemq-fips, gradle-stage0,...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, nextcloud-server, prism, lerna, langfuse, kubeflow-centraldashboard, jitsucom-jitsu...

GHSA-39J5-W47M-2GMV vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, nextcloud-server, prism, lerna, langfuse, kubeflow-centraldashboard, jitsucom-jitsu...

CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, nextcloud-server, prism, lerna, langfuse, kubeflow-centraldashboard, jitsucom-jitsu...

GHSA-FQJ3-H9PC-443H vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, nextcloud-server, prism, lerna, langfuse, kubeflow-centraldashboard, jitsucom-jitsu...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, nextcloud-server, prism, lerna, langfuse, kubeflow-centraldashboard, jitsucom-jitsu...

GHSA-6QM2-MCQ7-53QP vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, tez, flyway, kafka, apicurio-registry, gradle-stage0, druid, solr, spark, dependency-track, thingsboard, apache-tika, infinispan, trino, spdx-tools-java, cass-config-builder, nextflow, apache-nifi, airflow, scala, akhq, ruby3.3-jrjackson,...

CVE-2026-18401 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, tez, flyway, kafka, apicurio-registry, gradle-stage0, druid, solr, spark, dependency-track, thingsboard, apache-tika, infinispan, trino, spdx-tools-java, cass-config-builder, nextflow, apache-nifi, airflow, scala, akhq, ruby3.3-jrjackson,...

@diviops/mcp-server (1.5.40), @donadiosolutions/lcm (>=1.4.2, <=1.4.3) +17 more potentially affected by CVE-2026-75931 via fast-uri (>=3.1.4, <=3.1.5)

fast-uri NPM version =3.1.4, =1.4.2, =1.2.0, =1.4.18, =0.2.0-alpha.5, =0.1.0, =0.1.6, =0.16.2-cloud-1, =0.1.5, =0.1.3, =3.38.11, =0.1.0, =0.1.0, =0.1.12, =0.1.14 and more Source cves: CVE-2026-75931 Source advisory: OSV:GHSA-5JGF-P345-68V8...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (1.5.40) +24 more potentially affected by CVE-2026-75975 via fast-uri (>=3.0.1, <=3.1.5)

fast-uri NPM version =3.0.1, =0.3.1, =1.4.2, =1.2.0, =1.4.18, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =0.1.6, =0.16.2-cloud-1, =1.25.0, =1.28.1 and more Source cves: CVE-2026-75975 Source advisory: OSV:GHSA-F65P-4M7J-42XC...

@activepieces/piece-ai (>=0.3.1, <=0.3.4), @diviops/mcp-server (1.5.40) +24 more potentially affected by CVE-2026-76172 via fast-uri (>=3.0.1, <=3.1.5)

fast-uri NPM version =3.0.1, =0.3.1, =1.4.2, =1.2.0, =1.4.18, =5.4.3, =0.2.0-alpha.5, =0.1.0, =1.0.0, =1.0.0, =0.1.6, =0.16.2-cloud-1, =1.25.0, =1.28.1 and more Source cves: CVE-2026-76172 Source advisory: OSV:GHSA-JQFF-G426-HQXP...

CLSA-2026-1788363279 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 9 CVEs. Fixed in 5.3.37-tuxcare.10...

RHSA-2026:60449 Red Hat Security Advisory: OpenShift Container Platform 4.21.31 packages and security update

Bulletin has no description...

GHSA-5CC2-282F-JJQ2 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, keep-fips, mlrun, airflow, mlrun-fips, datadog-agent, keep...

RHEL 9 : osbuild-composer (RHSA-2026:62753)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62753 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

5ug-cli (>=1.0.72, <=1.4.0), @343dev/optimizt (6.0.0) +85 more potentially affected by CVE-2026-84370 via svgo (>=2.0.0, <=2.8.0)

svgo NPM version =2.0.0, =1.0.72, =1.1.2, =2.0.0-fix-trigger-remove-colors-config-e26731597751d1581014163b7e73df159cf80be3.1, =0.0.2-0, =4.55.0, =2.12.3-canary.621.14971.0, =2.1.0-beta-1, =2.1.0-beta-1, =2.1.8, =5.0.0, =0.0.1, =2.7.4, =3.59.1--canary.1316.b3452bb.0, =4.0.0--canary.2146.fe4f461.0...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +247 more potentially affected by CVE-2026-84370 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84370 Source advisory: SNYK:JS-SVGO-19498539...