CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, spire-server, cloudnative-pg, gitaly, step-issuer, rke2-cloud-provider, timescaledb-parallel-copy, src, hydra, kubeflow-pipelines, falcosidekick, splunk-otel-collector, flyte, temporal-server, caddy, cloudprober, grafana-alloy, seaweedfs,...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, jitsucom-bulker, grafana-alloy, argo-events, bento, cluster-api-aws-controller, opentelemetry-collector-contrib, sqlexporter, amazon-cloudwatch-agent...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, sqlexporter-fips, cluster-api-aws-controller, jitsucom-bulker, opentelemetry-collector-contrib, telegraf, argo-events, amazon-cloudwatch-agent, argo-events-fips, dapr-fips, bento, dapr, splunk-otel-collector, vault-fips, vault,...

GHSA-79JV-5226-783F OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand

Summary The export-rows command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page that submits a form POST that contains embedded JavaScript code. This code would then ...