GHSA-248M-82V9-Q6G6 vulnerabilities

Vulnerabilities for packages: open-webui, litellm...

GHSA-H2QV-FJ59-J46J vulnerabilities

Vulnerabilities for packages: zipkin, apache-pulsar, thingsboard, neo4j, celeborn, apicurio-registry, apache-activemq-artemis, tez, management-api-for-apache-cassandra-5.0...

CVE-2026-48059 vulnerabilities

Vulnerabilities for packages: zipkin, apache-pulsar, thingsboard, neo4j, celeborn, apicurio-registry, apache-activemq-artemis, tez, management-api-for-apache-cassandra-5.0...

CVE-2026-48096 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-11638 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11697 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-48006 vulnerabilities

Vulnerabilities for packages: celeborn, management-api-for-apache-cassandra-5.0, thingsboard, tez...

CVE-2026-53438 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-RCVQ-M9J9-6F4G vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, kibana...

GHSA-M6WV-WH8G-64XC vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2026-46557 vulnerabilities

Vulnerabilities for packages: imagemagick...

GHSA-G28P-6MCC-V4RV vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-463R-5M89-4XFR vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-92M7-4FPW-2WXM vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2026-48006 vulnerabilities

Vulnerabilities for packages: pinot-fips, management-api-for-apache-cassandra-5.0, thingsboard, hadoop-fips, tinkerpop, seata, tez, celeborn...

Linux Distros Unpatched Vulnerability : CVE-2026-54057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 color-control query reply reflects attacker-controlled bytes, includin...

CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrepsstreceiveaddress or wsrepsstdonor global system...

MAL-2026-5700 Malicious code in transportator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f40d878023c5462d17916a03d22d7c2e9e1573ab590f50532aa2e620e7a5a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-50560

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty HTTP/2 max header size handling produces an attack similar to HTTP/2 Rapid Reset. There is a setting in the http2 specification called...

CVE-2026-48059

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client sends a syntactically valid header containing nest...