CLEANSTART-2026-MJ21228 Security fixes in harbor 2.13.4-r2

Package harbor version 2.13.4-r2 fixes 7 vulnerabilities: CVE-2025-55198, CVE-2025-55199, CVE-2026-27141, CVE-2025-53547, ghsa-f9f8-9pmf-xv68...

CLEANSTART-2026-AU09596 Security fixes in confluent-kafka 8.2.0-r0

Package confluent-kafka version 8.2.0-r0 fixes 7 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-2332...

CLEANSTART-2026-ZH81233 Security fixes in elasticsearch 9.4.3-r1

Package elasticsearch version 9.4.3-r1 fixes 7 vulnerabilities: ghsa-72hv-8253-57qq, CVE-2026-59949, CVE-2026-54399, CVE-2026-54428, CVE-2026-41715...

CLEANSTART-2026-ZR97403 Security fixes in wavefront-proxy 13.7-r1

Package wavefront-proxy version 13.7-r1 fixes 1 vulnerabilities: CVE-2026-41417...

CLEANSTART-2026-AW87167 Security fixes in logstash-fips 9.2.7-r1

Package logstash-fips version 9.2.7-r1 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-CH37263 Security fixes in kafka 4.0.1-r3

Package kafka version 4.0.1-r3 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-IY64694 Security fixes in kubernetes-dashboard-api-fips 1.14.0-r1

Package kubernetes-dashboard-api-fips version 1.14.0-r1 fixes 27 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469, CVE-2026-39820, CVE-2026-25679, CVE-2026-27143...

CLEANSTART-2026-YG91374 Security fixes in hubble-ui-fips 0.13.3-r1

Package hubble-ui-fips version 0.13.3-r1 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, CVE-2025-58190...

CLEANSTART-2026-EV74091 Security fixes in kafka-fips 4.0.1-r3

Package kafka-fips version 4.0.1-r3 fixes 7 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-LM07136 Security fixes in harbor-registry 3.0.0.1-r3

Package harbor-registry version 3.0.0.1-r3 fixes 7 vulnerabilities: CVE-2025-68121, CVE-2021-3538, CVE-2026-27139, CVE-2025-29923, CVE-2026-27142...

CLEANSTART-2026-RX97622 Security fixes in dcgm-exporter 4.5.1-r0

Package dcgm-exporter version 4.5.1-r0 fixes 7 vulnerabilities: CVE-2026-27139, CVE-2025-61732, CVE-2025-68121, CVE-2026-27142, CVE-2026-25679...

CVE-2026-13330

The Animation Addons for Elementor WordPress plugin before 2.7.0 does not sanitise uploaded SVG/SVGZ files, which it adds to the list of allowed upload types, allowing users with the uploadfiles capability Author and above to upload files containing malicious JavaScript, leading to Stored...

SUSE-SU-2026:22987-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...

EUVD-2026-50573

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27...

PT-2026-66612

Name of the Vulnerable Software and Affected Versions Kamaji versions prior to 26.7.4-edge Description The PostgreSQL and MySQL datastore drivers build Data Definition Language DDL statements by interpolating user-supplied DataStoreUsername and DataStoreSchema directly into SQL using fmt.Sprintf...

Linux Distros Unpatched Vulnerability : CVE-2026-14643

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no- cache or private Cache-Control directive. In undici...

CVE-2026-62343 ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel. This issu...

DEBIAN-CVE-2026-14643

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal...

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7

CVE-2026-56852 affecting package sriov-network-device-plugin for versions less than 3.7.0-7. A patched version of the package is available...

CVE-2026-67428

The CVE-2026-67428 entry concerns Flyto2 Core, an automation/AI-agent workflow kernel. Before version 2.26.7, multiple HTTP-emitting modules (including http/requests.py, core.api.http_get, core.api.http_post, graphql.query/mutation, monitor.http_check, communication.slack_send, notification.disco...