CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: envoy-gateway, step-ca, rke2-cloud-provider, kots, pgtimetable, migrate, jitsucom-bulker, sftpgo, grafana, gitaly, step, steampipe, timescaledb-parallel-copy, hydra, gitness, flyte, falcosidekick, opentelemetry-collector-contrib, telegraf, spqr, temporal-server, dapr...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, cluster-api-aws-controller, splunk-otel-collector, grafana-alloy, opentelemetry-collector-contrib, argo-events, jitsucom-bulker, bento, sqlexporter...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: vault, amazon-cloudwatch-agent-fips, argo-events-fips, splunk-otel-collector, telegraf, jitsucom-bulker, cluster-api-aws-controller, amazon-cloudwatch-agent, dapr, dapr-fips, cluster-api-aws-controller-fips, grafana-alloy, argo-events, splunk-otel-collector-fips,...

GHSA-79JV-5226-783F OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand

Summary The export-rows command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page that submits a form POST that contains embedded JavaScript code. This code would then ...