CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: openfga, opentelemetry-collector-contrib, amass, juicefs, gitlab-kas, step-ca, kube-bench, jitsucom-bulker, cloudnative-pg, dapr, sftpgo, trillian, flyte, grafana, kots, rke2-cloud-provider, seaweedfs, sftpgo-plugin-eventsearch, azure-service-operator, gitaly,...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, grafana-alloy, jitsucom-bulker, amazon-cloudwatch-agent, argo-events, sqlexporter, splunk-otel-collector, cluster-api-aws-controller, bento...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: argo-events, amazon-cloudwatch-agent-fips, argo-events-fips, vault-fips, sqlexporter, splunk-otel-collector, splunk-otel-collector-fips, amazon-cloudwatch-agent, grafana-alloy, dapr-fips, dapr, sqlexporter-fips, telegraf, opentelemetry-collector-contrib, vault,...

GHSA-79JV-5226-783F OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand

Summary The export-rows command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page that submits a form POST that contains embedded JavaScript code. This code would then ...