CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the downloader process. An attacker can compromise data integrity by causing package archiv...

CVE-2026-53985

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...

EUVD-2026-54095

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, code-server, langfuse, npm, kubeflow-pipelines, pulumi, prism, sqlpad, lerna, saf...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, code-server, langfuse, npm, kubeflow-pipelines, pulumi, prism, sqlpad, lerna, saf...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, code-server, langfuse, npm, kubeflow-pipelines, pulumi, prism, sqlpad, lerna, saf...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, code-server, langfuse, npm, kubeflow-pipelines, pulumi, prism, sqlpad, lerna, saf...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, code-server, langfuse, npm, kubeflow-pipelines, pulumi, prism, sqlpad, lerna, saf...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, code-server, langfuse, npm, kubeflow-pipelines, pulumi, prism, sqlpad, lerna, saf...

CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

JLSEC-2026-936

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

CLEANSTART-2026-ZI59420 Security fixes in tekton-pipelines 1.5.0-r2

Package tekton-pipelines version 1.5.0-r2 fixes 1 vulnerabilities: ghsa-fcv2-xgw5-pqxf...

CLEANSTART-2026-CX21211 Security fixes in tekton-pipelines 1.11.0-r0

Package tekton-pipelines version 1.11.0-r0 fixes 4 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-w8rr-5gcm-pp58, CVE-2026-39882...

CLEANSTART-2026-TY53053 Security fixes in tekton-pipelines-fips 1.5.0-r1

Package tekton-pipelines-fips version 1.5.0-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-PX32512 Security fixes in tekton-pipelines 1.9.2-r0

Package tekton-pipelines version 1.9.2-r0 fixes 10 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, ghsa-mh2q-q3fh-2475, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-AB47177 Security fixes in tekton-pipelines 1.9.2-r1

Package tekton-pipelines version 1.9.2-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-LH49283 Security fixes in tekton-pipelines-fips 1.10.2-r0

Package tekton-pipelines-fips version 1.10.2-r0 fixes 3 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, CVE-2025-15558...

CLEANSTART-2026-LS74618 Security fixes in tekton-pipelines 1.11.0-r1

Package tekton-pipelines version 1.11.0-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...