GO-2025-3924 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, vault, splunk-otel-collector-fips...

GO-2025-3839 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GO-2024-3223 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GO-2024-2848 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-4978 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, terraform-provider-acme-fips, nri-jmx-fips, crossplane-provider-aws-datasync, crossplane-provider-aws-macie2, timestamp-authority, influx, prometheus-mongodb-exporter, mattermost-fips, ocm-cli-fips, crossplane-provider-aws-sagemaker-fips, xeol,...

GO-2026-5417 vulnerabilities

Vulnerabilities for packages: juicefs, k8sgateway, kubernetes-dns-node-cache...

CLSA-2026-1786690945 TuxCare security update for org.springframework.hateoas:spring-hateoas (1 CVE)

TuxCare rebuilt org.springframework.hateoas:spring-hateoas to address 1 CVE. Fixed in 2.4.1-tuxcare.2...

CVE-2026-19786

A vulnerability was found in francoisjacquet RosarioSIS up to 12.8. This issue affects some unknown processing of the file Modules.php. Performing a manipulation results in cross-site request forgery. Remote exploitation of the attack is possible. Upgrading to version 12.9 is capable of addressin...

CVE-2026-19785

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

CVE-2026-72838: Allocation of Resources Without Limits or Throttling

FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to disk. Attackers can send oversized request bodies that exceed the declared upload length to exhaust available disk spa...

Linux Distros Unpatched Vulnerability : CVE-2026-73251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mongoose - None CVE-2026-73251 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

Linux Distros Unpatched Vulnerability : CVE-2026-63626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mongoose - None CVE-2026-63626 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

Linux Distros Unpatched Vulnerability : CVE-2026-73261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mongoose - None CVE-2026-73261 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

nodejs:22 security update

nodejs 1:22.23.1-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 1:22.23.1-3 - Backport patch: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 Resolves: RHEL-224135 RHEL-224144 1:22.23.1-2 -...

Linux Distros Unpatched Vulnerability : CVE-2026-73260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mongoose - None CVE-2026-73260 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...

Fedora 44 : flatpak (2026-6b83471b0e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6b83471b0e advisory. Update to 1.18.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-16457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - virtio: Malformed packed descriptor livelocks the device at 100% host CPU guest triggered DoS CVE-2026-16457 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-50626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-63318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - QEMU 9pfs Readonly OTRUNC/OAPPEND Bypass via 9P2000.u Flag Mismatch CVE-2026-63318 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-73252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - mongoose - None CVE-2026-73252 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable,...