GHSA-GX9W-9QQ8-M485 vulnerabilities

Vulnerabilities for packages: tigera-operator, commercial-gitlab-workhorse-ee, backup-restore-operator, timescaledb-parallel-copy, trino, typescript, grafana, grafana-fips, kube-bench-fips, kube-bench, vault-fips, timescaledb-parallel-copy-fips, wavefront-collector-for-kubernetes,...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: tigera-operator, commercial-gitlab-workhorse-ee, backup-restore-operator, timescaledb-parallel-copy, trino, typescript, grafana, grafana-fips, kube-bench-fips, kube-bench, vault-fips, timescaledb-parallel-copy-fips, wavefront-collector-for-kubernetes,...

CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: tigera-operator, commercial-gitlab-workhorse-ee, backup-restore-operator, timescaledb-parallel-copy, trino, typescript, grafana, grafana-fips, kube-bench-fips, kube-bench, vault-fips, timescaledb-parallel-copy-fips, wavefront-collector-for-kubernetes,...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: grafana, kube-bench, trino, timescaledb-parallel-copy, typescript...

GHSA-GX9W-9QQ8-M485 vulnerabilities

Vulnerabilities for packages: grafana, kube-bench, trino, timescaledb-parallel-copy, typescript...

CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: grafana, kube-bench, trino, timescaledb-parallel-copy, typescript...

CVE-2026-70633

A flaw was found in TimescaleDB. An authenticated attacker with data manipulation language DML access to a compressed hypertable could exploit an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator. By storing a specially crafted compressed data entry with an internal...

CVE-2026-70635

A flaw was found in TimescaleDB. Authenticated attackers with direct data manipulation language DML access to a compressed hypertable can exploit an out-of-bounds read vulnerability. By supplying a specially crafted Simple8b selector-11 value, attackers can bypass index validation checks during...

CVE-2026-70634

A flaw was found in TimescaleDB. An out-of-bounds read vulnerability exists in the Dictionary compression reverse row iterator. Attackers with Data Manipulation Language DML access to a physical compressed database table can store specially crafted data. By performing a reverse-order scan, this...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tekton-chains, kubernetes-dashboard-auth, kyverno-notation-aws, controller-gen, portieris, clickhouse-operator, cni-plugins, wgcf, ko, kind, k8sgateway, cerbos, terraform-mcp-server, harbor-cli, ipfs-cluster, step-kms-plugin, eksctl, swagger, k8sgpt, wal-g, cilium-cl...

SUSE CVE-2026-70633

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

SUSE CVE-2026-70634

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

SUSE CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

EUVD-2026-54182

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

EUVD-2026-54179

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

EUVD-2026-54183

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

CVE-2026-70634

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

CVE-2026-70633

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

CVE-2026-70635 TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...