Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.74 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.74 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

com.github.mcollovati:hilla-shaded-deps (>=24.4.0-beta1, <=24.4.2), com.github.mcollovati:quarkus-hilla (>=24.4.0-beta1, <=24.4.2) +7 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.4.0, <=24.4.25)

com.vaadin:vaadin MAVEN version =24.4.0, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0, =24.4.1, =24.4.25 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin-jandex (>=23.6.0, <=23.6.16), com.vaadin:vaadin-platform-javadoc (>=23.6.0, <=23.6.16) +1 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=23.6.0, <=23.6.16)

com.vaadin:vaadin MAVEN version =23.6.0, =23.6.0, =23.6.0, =8.3.1, =8.3.4 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin-jandex (>=24.10.0, <=24.10.11), com.vaadin:vaadin-platform-javadoc (>=24.10.0, <=24.10.11) +5 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.10.0, <=24.10.11)

com.vaadin:vaadin MAVEN version =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.4 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin-platform-javadoc (>=14.14.0, <=14.14.7) potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=14.14.0, <=14.14.7)

com.vaadin:vaadin MAVEN version =14.14.0, =14.14.0, =14.14.7 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.23), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.23) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.8.0, <=24.9.23)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.9 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin (>=14.14.0, <=14.14.7), com.vaadin:vaadin-platform-javadoc (>=14.14.0, <=14.14.7) +1 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin-core (>=14.14.0, <=14.14.7)

com.vaadin:vaadin-core MAVEN version =14.14.0, =14.14.0, =14.14.0, =14.14.0, =14.14.7 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755466...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.19.53 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.21.40 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.20.44 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.44 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

com.vaadin:vaadin (>=14.14.0, <=14.14.7), com.vaadin:vaadin-platform-javadoc (>=14.14.0, <=14.14.7) +1 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin-core (>=14.14.0, <=14.14.7)

com.vaadin:vaadin-core MAVEN version =14.14.0, =14.14.0, =14.14.0, =14.14.0, =14.14.7 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.vaadin:vaadin-platform-javadoc (>=14.14.0, <=14.14.7) potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=14.14.0, <=14.14.7)

com.vaadin:vaadin MAVEN version =14.14.0, =14.14.0, =14.14.7 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.vaadin:vaadin-jandex (>=24.5.0, <=24.7.16), com.vaadin:vaadin-platform-javadoc (>=24.5.0, <=24.7.16) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.5.0, <=24.7.16)

com.vaadin:vaadin MAVEN version =24.5.0, =24.5.0, =24.5.0, =24.7.16 - com.vaadin:vaadin-testbench-unit 9.3.15 - com.vaadin:vaadin-testbench-unit-junit5 9.3.15 - com.vaadin:vaadin-testbench-unit-quarkus 9.3.15 - com.vaadin:vaadin-testbench-unit-shared 9.3.15 Source cves: CVE-2026-110737 Source...

com.vaadin:vaadin-jandex (>=23.6.0, <=23.6.16), com.vaadin:vaadin-platform-javadoc (>=23.6.0, <=23.6.16) +1 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=23.6.0, <=23.6.16)

com.vaadin:vaadin MAVEN version =23.6.0, =23.6.0, =23.6.0, =8.3.1, =8.3.4 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.vaadin:vaadin-jandex (>=24.10.0, <=24.10.11), com.vaadin:vaadin-platform-javadoc (>=24.10.0, <=24.10.11) +5 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.10.0, <=24.10.11)

com.vaadin:vaadin MAVEN version =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.4 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.23), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.23) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.8.0, <=24.9.23)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.9 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.github.mcollovati:hilla-shaded-deps (>=24.4.0-beta1, <=24.4.2), com.github.mcollovati:quarkus-hilla (>=24.4.0-beta1, <=24.4.2) +7 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.4.0, <=24.4.25)

com.vaadin:vaadin MAVEN version =24.4.0, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0, =24.4.1, =24.4.25 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.59 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.59 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

CVE-2026-117494 Multiple vulnerabilities in Sisense’s Cloud BI Platform

Cross-Site Scripting XSS in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant window, allowing JavaScript to be executed and the displayed conte...

CVE-2026-117494

Sisense’s Cloud BI Platform contains a Cross-Site Scripting (XSS) vulnerability (CWE-79) during the processing of SVG images submitted to the /api/v2/ai/sessions API. The flaw occurs when images are submitted in the data:image/svg+xml;base64 format; because the system processes script tags embedd...