CVE-2026-54787 vulnerabilities

Vulnerabilities for packages: spire-server, ko, neuvector-sigstore-interface, falcoctl, zot, tkn, kyverno-notation-aws, skaffold, aactl, zarf, trivy-operator, trivy, policy-controller, goreleaser, crossplane, flux-source-controller, teleport, kyverno, tekton-chains, kubescape...

CVE-2026-67353

guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and...

RHSA-2026:43225 Red Hat Security Advisory: OpenShift Container Platform 4.15.67 packages and security update

Bulletin has no description...

CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1

CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1

CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53399 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-aws, linux-qemu, linux-vmware, linux-gcp...

GHSA-CHX6-HX7R-MCP5 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-4X4J-2G7C-83W6 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-9HW9-CH79-4VH6 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi-registry...

GHSA-337J-9HXR-RHXG vulnerabilities

Vulnerabilities for packages: vitess, librechat...

GHSA-MQ64-J8F9-9GCJ vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, camunda-zeebe, apache-nifi-registry, apache-activemq, camunda...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

EUVD-2026-51556

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141

The CVE-2026-18141 entry concerns aap-gateway in Ansible Automation Platform’s Event-Driven Ansible (EDA). Affected component: aap-gateway. Vulnerability: an unauthenticated remote attacker can bypass mutual TLS on event streams by manipulating the event stream URL and forging the HTTP Subject he...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...