CVE-2026-14392 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4W24-9GXJ-7VCF vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-13914 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-13947 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HP82-6QCX-X2XC vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-54GW-X8GH-F524 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-13949 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-13942 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-auth, knative-serving, docker, newrelic-fluent-bit-output, cosign, kubernetes-csi-external-snapshotter, tempo, goreleaser, kubo, cilium-certgen, crossplane-provider-aws-iam, kube-rbac-proxy, spicedb, gitaly, clickhouse-operator, kserve-modelmesh-serving...

MGASA-2026-0239 Updated ack packages fix security vulnerabilities

This update fixes several security vulnerabilities...

Updated ack packages fix security vulnerabilities

This update fixes several security vulnerabilities...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssh: openssh-10.4p1-1.hum1 aarch64, x8664 openssh-askpass-10.4p1-1.hum1 aarch64, x8664 openssh-clients-10.4p1-1.hum1 aarch64, x8664 openssh-keycat-10.4p1-1.hum1 aarch64, x8664...

RHSA-2026:26989 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.55 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.55 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

CVE-2026-47828

During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS without verifying the server certificate, even though a CA certificate for that endpoint is available in the installation manifest. A network...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.55 security and extras update

Red Hat OpenShift Container Platform release 4.17.55 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-47828

During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS without verifying the server certificate, even though a CA certificate for that endpoint is available in the installation manifest. A network...

CVE-2026-53136 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange, linux-vmware...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: istio, k3s, telegraf, docker, k8s-device-plugin, karpenter, timestamp-authority, docker-cli-buildx, apko, kyverno, pinact, prometheus-operator, melange, grafana-operator, kots, kubernetes-dashboard, flux, src, cilium-cli, buildkitd, buildah, mattermost, prometheus,...

Malicious code in @wagni_bot/wagni (npm)

The npm package @wagnibot/wagni is a supply-chain credential stealer disguised as a the campaign's own namesake handle SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a...