EUVD-2026-38430

Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext API keys through the capgkey header despite enforcehashedapikeys being enabled. Attackers can bypass org-level hashed-key enforcement by sending plaintext API keys directly to th...

Astra Linux – Vulnerability in Chromium

The use of after-free in CSS in Google Chrome before version 145.0.7632.75 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

RHSA-2026:28047 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update

Bulletin has no description...

RHSA-2026:28046 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (golang-uber-multierr) security update

Bulletin has no description...

RHSA-2026:28044 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update

Bulletin has no description...

RHSA-2026:28043 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-urllib3) security update

Bulletin has no description...

RHSA-2026:28042 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-pyasn1) security update

Bulletin has no description...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in follow-redirects

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in follow-redirects. CVE-2026-40895 The vulnerabilities have been addressed Vulnerability Details CVEID:CVE-2026-40895 DESCRIPTION: follow-redirects is an open source, drop-in...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.2 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.2 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.26 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.26 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.2 security and extras update

Red Hat OpenShift Container Platform release 4.22.2 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

GHSA-VMHF-C436-HXJ4 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-9669 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: logstash, ruby4.0-fluentd-kubernetes-daemonset, logstash-fips, kube-fluentd-operator, kube-logging-operator, ruby3.4-rails, ruby4.0-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.3-rails,...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: logstash, ruby4.0-fluentd-kubernetes-daemonset, logstash-fips, kube-fluentd-operator, kube-logging-operator, ruby3.4-rails, ruby4.0-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.3-rails,...

GHSA-WFQX-GJRF-G28R vulnerabilities

Vulnerabilities for packages: crossplane...

CVE-2025-61023

An issue in the stcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2025-61025

An issue in the sslrqstget component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

Linux Distros Unpatched Vulnerability : CVE-2026-46417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-next.12,...