36325 matches found
EUVD-2026-51240
IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP Model Context Protocol stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUSENVVARS blocklist fails to include...
Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.67 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.67 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.70 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available (RHBQ 3.33.2.SP3)
An update for Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available RHBQ 3.33.2.SP3. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...
Security update for prometheus-ha_cluster_exporter
This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2 Use proper obs time forma...
SUSE-SU-2026:3421-1 Security update for prometheus-ha_cluster_exporter
This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: - Release 1.4.2 Use proper obs time...
CLEANSTART-2026-OQ92472 Security fixes in istio 1.29.5-r0
Package istio version 1.29.5-r0 fixes 4 vulnerabilities: CVE-2026-56852, CVE-2026-46600, CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-IK55843 Security fixes in helm 4.1.4-r2
Package helm version 4.1.4-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-WD10731 Security fixes in envoy-ratelimit 0.0.0_git20251231-r1
Package envoy-ratelimit version 0.0.0git20251231-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-OE12787 Security fixes in apache-superset 6.0.0-r5
Package apache-superset version 6.0.0-r5 fixes 18 vulnerabilities: ghsa-pwv6-vv43-88gr, ghsa-whj4-6x5x-4v2j, ghsa-cfh3-3jmp-rvhc, ghsa-5xmw-vc9v-4wf2, ghsa-wjx4-4jcj-g98j...
CLEANSTART-2026-OQ60527 Security fixes in velero-plugin-for-gcp-fips 1.13.2-r0
Package velero-plugin-for-gcp-fips version 1.13.2-r0 fixes 6 vulnerabilities: CVE-2026-27142, CVE-2026-27139, CVE-2026-34986, CVE-2026-24051, CVE-2026-25679...
CLEANSTART-2026-DY03272 Security fixes in calico 3.31.5-r1
Package calico version 3.31.5-r1 fixes 19 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-39827...
CLEANSTART-2026-RF81669 Security fixes in paranoia 0.3.1-r0
Package paranoia version 0.3.1-r0 fixes 9 vulnerabilities: ghsa-p436-gjf2-799p, CVE-2025-15558, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282...
CLEANSTART-2026-AL02169 Security fixes in kube-vip 1.0.4-r0
Package kube-vip version 1.0.4-r0 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186...
CLEANSTART-2026-AB17721 Security fixes in solr 10.0.0-r6
Package solr version 10.0.0-r6 fixes 4 vulnerabilities: CVE-2026-8384, CVE-2026-6790, CVE-2026-10051, CVE-2026-10050...
CLEANSTART-2026-RF73854 Security fixes in keda 2.18.3-r0
Package keda version 2.18.3-r0 fixes 6 vulnerabilities: CVE-2026-26958, CVE-2025-68156, CVE-2026-24051, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr...
CLEANSTART-2026-FR04784 Security fixes in postgresql 12.4-r0
Package postgresql version 12.4-r0 fixes 2 vulnerabilities: CVE-2020-14349, CVE-2020-14350...