com.vaadin:vaadin-jandex (>=23.6.0, <=23.6.16), com.vaadin:vaadin-platform-javadoc (>=23.6.0, <=23.6.16) +1 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=23.6.0, <=23.6.16)

com.vaadin:vaadin MAVEN version =23.6.0, =23.6.0, =23.6.0, =8.3.1, =8.3.4 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.vaadin:vaadin-jandex (>=24.5.0, <=24.7.16), com.vaadin:vaadin-platform-javadoc (>=24.5.0, <=24.7.16) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.5.0, <=24.7.16)

com.vaadin:vaadin MAVEN version =24.5.0, =24.5.0, =24.5.0, =24.7.16 - com.vaadin:vaadin-testbench-unit 9.3.15 - com.vaadin:vaadin-testbench-unit-junit5 9.3.15 - com.vaadin:vaadin-testbench-unit-quarkus 9.3.15 - com.vaadin:vaadin-testbench-unit-shared 9.3.15 Source cves: CVE-2026-110737 Source...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.23), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.23) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.8.0, <=24.9.23)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.9 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.github.mcollovati:hilla-shaded-deps (>=24.4.0-beta1, <=24.4.2), com.github.mcollovati:quarkus-hilla (>=24.4.0-beta1, <=24.4.2) +7 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.4.0, <=24.4.25)

com.vaadin:vaadin MAVEN version =24.4.0, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0, =24.4.1, =24.4.25 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.vaadin:vaadin-jandex (>=24.10.0, <=24.10.11), com.vaadin:vaadin-platform-javadoc (>=24.10.0, <=24.10.11) +5 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.10.0, <=24.10.11)

com.vaadin:vaadin MAVEN version =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.4 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.59 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.59 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

CVE-2026-117494 Multiple vulnerabilities in Sisense’s Cloud BI Platform

Cross-Site Scripting XSS in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant window, allowing JavaScript to be executed and the displayed conte...

CVE-2026-117494

Sisense’s Cloud BI Platform contains a Cross-Site Scripting (XSS) vulnerability (CWE-79) during the processing of SVG images submitted to the /api/v2/ai/sessions API. The flaw occurs when images are submitted in the data:image/svg+xml;base64 format; because the system processes script tags embedd...

CVE-2026-117493 Multiple vulnerabilities in Sisense’s Cloud BI Platform

Stored cross-site scripting XSS in BloX widgets. The /api/dashboards//widgets/ API accepts HTML and JavaScript content in the ‘desc’ and ‘text’ parameters. The code entered is executed in the browser when the widget is rendered, which could compromise the confidentiality of the information...

CVE-2026-117493

Sisense's Cloud BI Platform is vulnerable to Stored Cross-Site Scripting (XSS) in BloX widgets . The /api/dashboards//widgets/ API fails to properly sanitize HTML and JavaScript content submitted via the desc and text parameters. When a widget is rendered, the injected code executes in the user's...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.59 security and extras update

Red Hat OpenShift Container Platform release 4.18.59 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: LVMS 4.14 Bug Fix and Enhancement update

Updated container images that fix multiple bugs are now available for LVMS 4.14 After a successful LVMS upgrade, the latest lvms-operator SHA image should be running. This erratum implements the following changes: - Golang version bump to address CVE-2026-33818, CVE-2026-56860 and CVE-2026-56862...

ROOT-APP-NUGET-CVE-2026-50525 CVE-2026-50525 in System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-50525 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.40 packages and security update

Red Hat OpenShift Container Platform release 4.21.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.20.44 packages update

Red Hat OpenShift Container Platform release 4.20.44 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.53 packages update

Red Hat OpenShift Container Platform release 4.19.53 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.20 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.20 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Parse Platform parse-server input validation error vulnerability

Versions of Parse Platform prior to 8.6.105 and versions prior to 9.10.5-alpha.6 contain an input validation error vulnerability. This vulnerability arises from the lack of validation of object references in $relatedTo queries; using query operators instead of object IDs can bypass object ACL...

Sisense Cloud BI Platform cross-site scripting vulnerability

Versions of Sisense Cloud BI Platform prior to 27/10/2026 contain a cross-site scripting vulnerability. This vulnerability stems from stored XSS in BloX widgets; the desc and text parameters in the /api/dashboards//widgets/ API accept HTML and JavaScript content. When these components are rendere...

Sisense Cloud BI Platform cross-site scripting vulnerability

The Sisense Cloud BI Platform contains a cross-site scripting vulnerability. This vulnerability arises when processing SVG images formatted as data:image/svg+xml;base64 via the /api/v2/ai/sessions endpoint; the embedded script tags are rendered in the assistant window and can be exploited to...