GHSA-GX9W-9QQ8-M485 vulnerabilities

Vulnerabilities for packages: grafana-fips, timescaledb-parallel-copy, commercial-gitlab-workhorse-ee-fips, tigera-operator, ingress-nginx-controller, trino, commercial-gitlab-workhorse-ee, typescript, kube-bench, wavefront-collector-for-kubernetes, kube-state-metrics, backup-restore-operator,...

CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: grafana-fips, timescaledb-parallel-copy, commercial-gitlab-workhorse-ee-fips, tigera-operator, ingress-nginx-controller, trino, commercial-gitlab-workhorse-ee, typescript, kube-bench, wavefront-collector-for-kubernetes, kube-state-metrics, backup-restore-operator,...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: grafana-fips, timescaledb-parallel-copy, commercial-gitlab-workhorse-ee-fips, tigera-operator, ingress-nginx-controller, trino, commercial-gitlab-workhorse-ee, typescript, kube-bench, wavefront-collector-for-kubernetes, kube-state-metrics, backup-restore-operator,...

GHSA-GX9W-9QQ8-M485 vulnerabilities

Vulnerabilities for packages: kube-bench, timescaledb-parallel-copy, grafana, trino, typescript, ingress-nginx-controller...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: kube-bench, timescaledb-parallel-copy, grafana, trino, typescript, ingress-nginx-controller...

CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: kube-bench, timescaledb-parallel-copy, grafana, trino, typescript, ingress-nginx-controller...

CVE-2026-70633

A flaw was found in TimescaleDB. An authenticated attacker with data manipulation language DML access to a compressed hypertable could exploit an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator. By storing a specially crafted compressed data entry with an internal...

CVE-2026-70635

A flaw was found in TimescaleDB. Authenticated attackers with direct data manipulation language DML access to a compressed hypertable can exploit an out-of-bounds read vulnerability. By supplying a specially crafted Simple8b selector-11 value, attackers can bypass index validation checks during...

CVE-2026-70634

A flaw was found in TimescaleDB. An out-of-bounds read vulnerability exists in the Dictionary compression reverse row iterator. Attackers with Data Manipulation Language DML access to a physical compressed database table can store specially crafted data. By performing a reverse-order scan, this...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: src, timescaledb-tune, cluster-api-helm-controller, cilium-cli, ip-masq-agent, tekton-chains, render-template, helm-push, buildkitd, hubble, yunikorn-k8shim, wal-g, thanos-operator, nodetaint, envconsul, docker-cli-buildx, opa, witness, k3s, ratify, kubeflow-katib,...

SUSE CVE-2026-70633

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

SUSE CVE-2026-70634

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

SUSE CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

EUVD-2026-54183

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

EUVD-2026-54179

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

EUVD-2026-54182

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

CVE-2026-70633

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

CVE-2026-70634

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

CVE-2026-70635 TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...