CVE-2026-34829 vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, logstash, kube-fluentd-operator, ruby3.4-rack, ruby4.0-rack, ruby3.3-rack...

CVE-2026-34230 vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, logstash, kube-fluentd-operator, ruby3.4-rack, ruby4.0-rack, ruby3.3-rack...

GHSA-Q2WW-5357-X388 vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, logstash, kube-fluentd-operator, ruby3.4-rack, ruby4.0-rack, ruby3.3-rack...

CVE-2026-26962 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails...

RCE (Remote Code Execution) org.yaml:snakeyaml Dependency in Jira Service Management Data Center

This is a vulnerability in a non-Atlassian Jira Service Management dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity RCE Remote Code Execution vulnerability was introduced in versions 11.3.3 of Jira Service Management Data...

PT-2026-31073

The LightPress Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the group attribute in the gallery shortcode in all versions up to, and including, 2.3.4. This is due to the plugin modifying gallery shortcode output to include the group attribute value without proper...

SUSE CVE-2026-33026

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4...

CVE-2026-34378

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.4.0 to before 3.4.9, a missing bounds check on the dataWindow attribute in EXR file headers allows an attacker to trigger a signed integer overfl...

DEBIAN-CVE-2026-34378

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.4.0 to before 3.4.9, a missing bounds check on the dataWindow attribute in EXR file headers allows an attacker to trigger a signed integer overfl...

CVE-2026-5633 assafelovic gpt-researcher ws Endpoint server-side request forgery

A vulnerability was determined in assafelovic gpt-researcher up to 3.4.3. Affected is an unknown function of the component ws Endpoint. Executing a manipulation of the argument sourceurls can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-5630 assafelovic gpt-researcher Report API app.py cross site scripting

A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file backend/server/app.py of the component Report API. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been...

GHSA-Q2WW-5357-X388 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby4.0-rack, ruby3.4-rack, gitlab-rails-ce, ruby3.4-rails, pact-broker-docker, ruby3.3-rack, logstash, ruby3.2-rack, ruby3.2-rails, gitlab-cng, pact-broker-docker-fips, kube-fluentd-operator...

GHSA-H2JQ-G4CQ-5PPQ vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby4.0-rack, ruby3.4-rack, gitlab-rails-ce, ruby3.4-rails, pact-broker-docker, ruby3.3-rack, logstash, ruby3.2-rack, ruby3.2-rails, gitlab-cng, pact-broker-docker-fips, kube-fluentd-operator...

GHSA-VGPV-F759-9WX3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby4.0-rack, ruby3.4-rack, gitlab-rails-ce, ruby3.4-rails, pact-broker-docker, ruby3.3-rack, logstash, ruby3.2-rack, ruby3.2-rails, gitlab-cng, pact-broker-docker-fips, kube-fluentd-operator...

GHSA-QFGR-CRR9-7R49 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, pact-broker-docker, logstash, ruby3.2-rails, pact-broker-docker-fips, kube-fluentd-operator...

CVE-2026-32762 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, pact-broker-docker, logstash, ruby3.2-rails, pact-broker-docker-fips, kube-fluentd-operator...

GHSA-V6X5-CG8R-VV6X vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, pact-broker-docker, logstash, ruby3.2-rails, pact-broker-docker-fips, kube-fluentd-operator...

PT-2026-30570

A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract command data of the file backend/server/server utils.py of the component ws Endpoint. Such manipulation of the argument args leads to code injection. The attack may be performed from remote...

Linux Distros Unpatched Vulnerability : CVE-2026-34544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version...

SUSE CVE-2026-34543

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data information disclosure...