CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: openbao, kine, sftpgo-plugin-eventsearch, amass, caddy, juicefs, gitlab-kas, seaweedfs, spqr, sqlexporter, ferretdb, step, argo-workflows, opentelemetry-collector-contrib, step-issuer, gitness, gitaly, azure-service-operator, hydra, rke2-cloud-provider,...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: cluster-api-aws-controller, bento, splunk-otel-collector, grafana-alloy, jitsucom-bulker, sqlexporter, amazon-cloudwatch-agent, argo-events, opentelemetry-collector-contrib...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: dapr, vault, vault-fips, dapr-fips, jitsucom-bulker, splunk-otel-collector-fips, bento, cluster-api-aws-controller, argo-events, sqlexporter, amazon-cloudwatch-agent-fips, amazon-cloudwatch-agent, telegraf, argo-events-fips, grafana-alloy, splunk-otel-collector,...

GHSA-79JV-5226-783F OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand

Summary The export-rows command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page that submits a form POST that contains embedded JavaScript code. This code would then ...