CLEANSTART-2026-LL73757 Security fixes in weaviate-fips 1.38.11-r1

Package weaviate-fips version 1.38.11-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-FB79569 Security fixes in opentelemetry-collector-contrib-fips 0.159.0-r1

Package opentelemetry-collector-contrib-fips version 0.159.0-r1 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

CLEANSTART-2026-SR41656 Security fixes in prometheus-mongodb-exporter-fips 0.53.0-r1

Package prometheus-mongodb-exporter-fips version 0.53.0-r1 fixes 12 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-VT71030 Security fixes in argo-cd-fips 3.4.7-r2

Package argo-cd-fips version 3.4.7-r2 fixes 12 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-XH81643 Security fixes in opa-fips 1.19.1-r2

Package opa-fips version 1.19.1-r2 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-NW77012 Security fixes in opa-fips 1.19.1-r1

Package opa-fips version 1.19.1-r1 fixes 7 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853, CVE-2026-56859...

CLEANSTART-2026-PD33877 Security fixes in ollama-fips 0.32.15-r1

Package ollama-fips version 0.32.15-r1 fixes 11 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-RK66396 Security fixes in temporal-ui-server-fips 2.49.1-r1

Package temporal-ui-server-fips version 2.49.1-r1 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

CLEANSTART-2026-BN39310 Security fixes in atlantis-fips 0.47.1-r1

Package atlantis-fips version 0.47.1-r1 fixes 10 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

CLEANSTART-2026-DF04587 Security fixes in opentelemetry-collector-contrib-fips 0.158.0-r3

Package opentelemetry-collector-contrib-fips version 0.158.0-r3 fixes 10 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818...

CLEANSTART-2026-FV12726 Security fixes in mongodb 8.0.29-r0

Package mongodb version 8.0.29-r0 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

CLEANSTART-2026-YR55628 Security fixes in langfuse-worker 3.194.1-r1

Package langfuse-worker version 3.194.1-r1 fixes 30 vulnerabilities: ghsa-frvp-7c67-39w9, ghsa-p63j-vcc4-9vmv, CVE-2026-50272, ghsa-55q2-fjhq-7xh7, CVE-2026-65898...

CIS GitLab Benchmark Scanner

Сканер CIS GitLab Benchmark - gitlabcis История вопроса 17 апреля 2024 года GitLab™ опубликовал запись в блоге, в которой представил свой бенчмарк Center for Internet Security® CIS GitLab Benchmark. Цель — улучшить безопасность продукта и предложить клиентам GitLab рекомендации по усилению защиты...

ROOT-APP-NPM-CVE-2026-59874 CVE-2026-59874 in tar - Patched by Root

Root has patched CVE-2026-59874 in the tar package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-24842 CVE-2026-24842 in tar - Patched by Root

Root has patched CVE-2026-24842 in the tar package for Root:npm. Multiple fixed versions available...

ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval

ManageEngine ServiceDesk 9.3.9328 is vulnerable to an arbitrary file retrieval due to improper restrictions of the pathname used in the name parameter for the download-snapshot path. An unauthenticated remote attacker can use this vulnerability to download arbitrary files. id: CVE-2017-11512 info...

ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet. id: CVE-2020-28653 info: name: ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization author: iamnoooob,pdresearch severity:...

Emby < 4.5.0 - Server Server-Side Request Forgery

Emby Server before 4.5.0 allows server-side request forgery SSRF via the Items/RemoteSearch/Image ImageURL parameter. id: CVE-2020-26948 info: name: Emby 4.5.0 - Server Server-Side Request Forgery author: dwisiswant0 severity: critical description: | Emby Server before 4.5.0 allows server-side...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

Grafana Post-Auth DuckDB - SQL Injection To File Read

The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...