CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: hydra, steampipe, splunk-otel-collector, caddy, cloudnative-pg, kubeflow-pipelines, jitsucom-bulker, sftpgo-plugin-eventsearch, kube-bench, grafana-alloy, temporal, certificate-transparency, openbao, step-issuer, argo-workflows, rke2-cloud-provider, grafana, gitaly,...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: grafana-alloy, splunk-otel-collector, argo-events, cluster-api-aws-controller, opentelemetry-collector-contrib, jitsucom-bulker, sqlexporter, bento, amazon-cloudwatch-agent...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: bento, cluster-api-aws-controller-fips, sqlexporter, vault, telegraf, vault-fips, cluster-api-aws-controller, grafana-alloy, splunk-otel-collector-fips, argo-events, amazon-cloudwatch-agent-fips, splunk-otel-collector, sqlexporter-fips, amazon-cloudwatch-agent,...

GHSA-79JV-5226-783F OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand

Summary The export-rows command can be used in such a way that it reflects part of the request verbatim, with a Content-Type header also taken from the request. An attacker could lead a user to a malicious page that submits a form POST that contains embedded JavaScript code. This code would then ...