CVE-2026-101918 vulnerabilities

Vulnerabilities for packages: openstack-barbican-2025.2, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, openstack-nova-2026.1, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, superset, openstack-barbican-2026.1, ggshield,...

GHSA-42VR-XJ54-VC7V vulnerabilities

Vulnerabilities for packages: openstack-barbican-2025.2, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, openstack-nova-2026.1, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, superset, openstack-barbican-2026.1, ggshield,...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, mcp-atlassian, openstack-nova-2026.1, open-webui, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, openstack-glance-2025.2-fips, semgrep,...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: mlrun, openstack-keystone-2026.1-fips, kubeflow-pipelines-visualization-server, azureml-inference-server-http-fips, mcp-atlassian, open-webui, kserve-pmmlserver, azureml-inference-server-http, metaflow-service-fips, pgadmin4-fips, ggshield, kubeflow,...

GHSA-HXM8-2XGR-2P9M vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, mcp-atlassian, openstack-nova-2026.1, open-webui, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, openstack-glance-2025.2-fips, semgrep,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, kubeflow-pipelines-visualization-server, azureml-inference-server-http-fips, mcp-atlassian, open-webui, kserve-pmmlserver, azureml-inference-server-http, metaflow-service-fips, pgadmin4-fips, ggshield, kubeflow, kubeflow-pipelines,...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, mcp-atlassian, openstack-nova-2026.1, open-webui, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, openstack-glance-2025.2-fips, semgrep,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, kubeflow-pipelines-visualization-server, azureml-inference-server-http-fips, mcp-atlassian, open-webui, kserve-pmmlserver, azureml-inference-server-http, metaflow-service-fips, pgadmin4-fips, ggshield, kubeflow, kubeflow-pipelines,...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: mlrun, openstack-keystone-2026.1-fips, kubeflow-pipelines-visualization-server, azureml-inference-server-http-fips, mcp-atlassian, open-webui, kserve-pmmlserver, azureml-inference-server-http, metaflow-service-fips, pgadmin4-fips, ggshield, kubeflow,...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, mcp-atlassian, openstack-nova-2026.1, open-webui, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, openstack-glance-2025.2-fips, semgrep,...

CVE-2026-102274 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, mcp-atlassian, openstack-nova-2026.1, open-webui, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, openstack-glance-2025.2-fips, semgrep,...

GHSA-P4G4-X82P-Q773 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, mcp-atlassian, openstack-nova-2026.1, open-webui, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, openstack-glance-2025.2-fips, semgrep,...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, mcp-atlassian, openstack-nova-2026.1, open-webui, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, openstack-glance-2025.2-fips, semgrep,...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, authentik-fips, azureml-inference-server-http-fips, openstack-heat-2026.1, mcp-atlassian, openstack-nova-2026.1, open-webui, openstack-neutron-2026.1, azureml-inference-server-http, metaflow-service-fips, openstack-glance-2025.2-fips, semgrep,...

CVE-2026-102878

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878

The mcp-chrome-bridge software, in versions through 1.0.31 , contains an origin validation error within its native-server HTTP API. This vulnerability allows an attacker to bypass CORS restrictions by crafting malicious web pages. Successful exploitation enables the execution of browser automatio...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-102878 mcp-chrome-bridge through 1.0.31 CORS Origin Bypass

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

EUVD-2026-89413

mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft malicious web pages that make cross-origin requests to the local server and invoke browser automation tools including script...

CVE-2026-44441

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.106.0 and 16.16.0, a malicious user could send a crafted request to an endpoint, which would lead to the server making an HTTP call to a service of the user's choice. This vulnerability is fixed in 15.106.0 and 16.16...