CVE-2026-61808 LightRAG: Missing Authentication for Critical API Functions in Default Configuration

LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document content, upload or delete documents, modi...

CVE-2026-61808

CVE-2026-61808 affects LightRAG up to version 1.5.4, where the API server binds to all network interfaces with authentication disabled by default. This allows an unauthenticated network attacker to read indexed documents, upload or delete documents, modify the knowledge graph, cancel pipelines, c...

CVE-2026-12261

A flaw was found in the nltk.downloader component of NLTK. This vulnerability allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces and only validates package integrity after extraction. This design flaw enables one package to...

CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

CVE-2026-53985

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...

EUVD-2026-54095

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: pulumi, npm, saf, code-server, sqlpad, langfuse, opensearch-dashboards, prism, kubeflow-pipelines, renovate, lerna...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: pulumi, npm, saf, code-server, sqlpad, langfuse, opensearch-dashboards, prism, kubeflow-pipelines, renovate, lerna...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: pulumi, npm, saf, code-server, sqlpad, langfuse, opensearch-dashboards, prism, kubeflow-pipelines, renovate, lerna...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: pulumi, npm, saf, code-server, sqlpad, langfuse, opensearch-dashboards, prism, kubeflow-pipelines, renovate, lerna...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: pulumi, npm, saf, code-server, sqlpad, langfuse, opensearch-dashboards, prism, kubeflow-pipelines, renovate, lerna...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: pulumi, npm, saf, code-server, sqlpad, langfuse, opensearch-dashboards, prism, kubeflow-pipelines, renovate, lerna...

CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CLEANSTART-2026-CX21211 Security fixes in tekton-pipelines 1.11.0-r0

Package tekton-pipelines version 1.11.0-r0 fixes 4 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986, ghsa-w8rr-5gcm-pp58, CVE-2026-39882...

CLEANSTART-2026-TY53053 Security fixes in tekton-pipelines-fips 1.5.0-r1

Package tekton-pipelines-fips version 1.5.0-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-AB47177 Security fixes in tekton-pipelines 1.9.2-r1

Package tekton-pipelines version 1.9.2-r1 fixes 8 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-PX32512 Security fixes in tekton-pipelines 1.9.2-r0

Package tekton-pipelines version 1.9.2-r0 fixes 10 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186, ghsa-mh2q-q3fh-2475, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-FI63843 Security fixes in tekton-pipelines-fips 1.7.0-r0

Package tekton-pipelines-fips version 1.7.0-r0 fixes 14 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-p436-gjf2-799p, ghsa-78h2-9frx-2jm8, CVE-2025-15558, CVE-2026-34986...