Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4

The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.4 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4

The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.4 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3

The 1.15.3 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.3 release of Red Hat OpenShift Pipelines Operator...

AWE: Adaptive Agents for Dynamic Web Penetration Testing

Modern web applications are increasingly produced through AI-assisted development and rapid no-code deployment pipelines, widening the gap between accelerating software velocity and the limited adaptability of existing security tooling. Pattern-driven scanners fail to reason about novel contexts,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: vault, syft, rke2-runtime, packer, calico, gatekeeper, scorecard, google-osconfig-agent, consul, metrics-server-fips, cluster-api, grafana-pyroscope, spicedb-operator, cluster-api-ipam-provider-in-cluster, task-fips, kapp-controller-fips,...

PT-2026-21862

The SPIP interface traduction objets plugin versions prior to 4.3.3 contain an authenticated SQL injection vulnerability in interface traduction objets pipelines.php. When handling translation requests, the plugin reads the id parent parameter from user-supplied input and concatenates it directly...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, kubeflow-katib, opensearch-dashboards, vitess, node-gyp, tileserver-gl, code-server, prism, kubeflow-pipelines, lerna, sqlpad, py3-jupyterlab, npm, renovate, pnpm-stage0, pulumi, saf...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl, prism, kubeflow-pipelines, renovate, saf...

GHSA-JMR7-XGP7-CMFJ vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl, prism, kubeflow-pipelines, renovate, saf...

CVE-2026-26960 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, kubeflow-katib, opensearch-dashboards, vitess, node-gyp, tileserver-gl, code-server, prism, kubeflow-pipelines, lerna, sqlpad, py3-jupyterlab, npm, renovate, pnpm-stage0, pulumi, saf...

CVE-2025-69873 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, kubeflow-katib, opensearch-dashboards, vitess, tileserver-gl, eslint, kubeflow-centraldashboard, serve, prism, kubeflow-pipelines, langfuse, argo-workflows, py3-jupyterlab, renovate, sqlpad, saf...

GHSA-2G4F-4PWH-QVX6 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, kubeflow-katib, opensearch-dashboards, vitess, tileserver-gl, eslint, kubeflow-centraldashboard, serve, prism, kubeflow-pipelines, langfuse, argo-workflows, py3-jupyterlab, renovate, sqlpad, saf...

CVE-2026-1440

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...

CVE-2026-26960 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, sqlpad, tileserver-gl, pulumi, actions-runner, kibana, drupal, py3-jupyterlab, renovate, lerna, opensearch-dashboards-fips, jupyter-base-notebook, prism, gitlab-rails-ce-fips, graalvm, vitess, pnpm-stage0, code-server, kubeflow-pipelines, node-gyp, sa...

GHSA-83G3-92JG-28CX vulnerabilities

Vulnerabilities for packages: kubeflow-katib, sqlpad, tileserver-gl, pulumi, actions-runner, kibana, drupal, py3-jupyterlab, renovate, lerna, opensearch-dashboards-fips, jupyter-base-notebook, prism, gitlab-rails-ce-fips, graalvm, vitess, pnpm-stage0, code-server, kubeflow-pipelines, node-gyp, sa...

CVE-2026-26278 vulnerabilities

Vulnerabilities for packages: saf, renovate, jitsucom-jitsu, prism, dbgate-fips, librechat, tileserver-gl, kubeflow-pipelines, langfuse, dbgate, tileserver-gl-fips, langfuse-fips, kibana...

GHSA-JMR7-XGP7-CMFJ vulnerabilities

Vulnerabilities for packages: saf, renovate, jitsucom-jitsu, prism, dbgate-fips, librechat, tileserver-gl, kubeflow-pipelines, langfuse, dbgate, tileserver-gl-fips, langfuse-fips, kibana...

CVE-2025-69873 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-katib, sqlpad, serve, tensorflow-gpu-jupyter, tileserver-gl, eslint, langfuse, arangodb, kibana, drupal, py3-jupyterlab, renovate, opensearch-dashboards-fips, jupyter-base-notebook, prism, librechat, gitlab-rails-ce-fips, vitess,...

GHSA-2G4F-4PWH-QVX6 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-katib, sqlpad, serve, tensorflow-gpu-jupyter, tileserver-gl, eslint, langfuse, arangodb, kibana, drupal, py3-jupyterlab, renovate, opensearch-dashboards-fips, jupyter-base-notebook, prism, librechat, gitlab-rails-ce-fips, vitess,...

CVE-2026-1440

Reflected Cross-Site Scripting XSS vulnerability in the Graylog Web Interface console, version 2.2.3, caused by a lack of proper sanitization and escaping in HTML output. Several endpoints include segments of the URL directly in the response without applying output encoding, allowing an attacker ...