CVE-2026-12084

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...

EUVD-2026-40392

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...

PT-2026-53967

Name of the Vulnerable Software and Affected Versions IBM DevOps Deploy versions 8.1 through 8.1.2.6 IBM DevOps Deploy versions 8.2 through 8.2.1.0 Description Cross-Origin Resource Sharing CORS, a mechanism that allows restricted resources on a web page to be requested from another domain, is...

CVE-2025-14148

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 could allow an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API Token...

CVE-2025-13489

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.3 IBM DevOps Deploy transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

PT-2025-51280

Name of the Vulnerable Software and Affected Versions IBM DevOps Deploy versions 8.1 through 8.1.2.3 Description An authenticated user with LLM integration configuration privileges may be able to recover a previously saved LLM API Token. Recommendations Update to a version later than 8.1.2.3...

PT-2025-51279

Name of the Vulnerable Software and Affected Versions IBM DevOps Deploy versions 8.1 through 8.1.2.3 Description IBM DevOps Deploy transmits data in clear text, potentially allowing an attacker to intercept sensitive information using man-in-the-middle techniques. Recommendations Update to a...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: azure-ipam, knative-operator-fips, terraform-provider-azapi-fips, kubernetes-csi-livenessprobe, custom-pod-autoscaler-fips, influxd, vault, vault-k8s, lvm-driver-fips, docker-credential-ecr-login-fips, kyverno-policy-reporter-plugins-trivy-fips, apm-server-fips,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: azure-ipam, knative-operator-fips, terraform-provider-azapi-fips, kubernetes-csi-livenessprobe, custom-pod-autoscaler-fips, influxd, vault, vault-k8s, lvm-driver-fips, docker-credential-ecr-login-fips, kyverno-policy-reporter-plugins-trivy-fips, apm-server-fips,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: azure-ipam, knative-operator-fips, terraform-provider-azapi-fips, kubernetes-csi-livenessprobe, custom-pod-autoscaler-fips, influxd, vault, vault-k8s, lvm-driver-fips, docker-credential-ecr-login-fips, kyverno-policy-reporter-plugins-trivy-fips, apm-server-fips,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: azure-ipam, knative-operator-fips, terraform-provider-azapi-fips, kubernetes-csi-livenessprobe, custom-pod-autoscaler-fips, influxd, vault, vault-k8s, lvm-driver-fips, docker-credential-ecr-login-fips, kyverno-policy-reporter-plugins-trivy-fips, apm-server-fips,...

CuPs (>=0.0.0 <=0.0.5), Druid_task1 (=0.1.0) +94 more potentially affected by unknown CVE via unic-ucd-bidi (>=0.1.1 <=0.9.0)

unic-ucd-bidi CARGO version =0.1.1, =0.0.0, =1.11.3, =0.3.0, =0.1.0-alpha.4, =0.3.0, =0.4.0, =0.2.4-beta, =0.7.0, =0.4.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0083...

CuPs (>=0.0.0 <=0.0.5), IF (=0.0.0) +29 more potentially affected by unknown CVE via unic-ucd-hangul (>=0.8.0 <=0.9.0)

unic-ucd-hangul CARGO version =0.8.0, =0.0.0, =1.11.3, =0.3.0, =0.3.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0079...

CuPs (>=0.0.0 <=0.0.5), Druid_task1 (=0.1.0) +318 more potentially affected by unknown CVE via unic-ucd-version (>=0.7.0 <=0.9.0)

unic-ucd-version CARGO version =0.7.0, =0.0.0, =1.11.3, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =2.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0098...

CuPs (>=0.0.0 <=0.0.5), IF (=0.0.0) +22 more potentially affected by unknown CVE via unic-ucd-age (>=0.5.0 <=0.9.0)

unic-ucd-age CARGO version =0.5.0, =0.0.0, =1.11.3, =0.3.0, =0.3.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =0.1.0, =0.0.0, =0.3.0, =0.3.0, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0102...

CuPs (>=0.0.0 <=0.0.5), IF (=0.0.0) +22 more potentially affected by unknown CVE via unic-ucd-name (>=0.6.0 <=0.9.0)

unic-ucd-name CARGO version =0.6.0, =0.0.0, =1.11.3, =0.3.0, =0.3.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0076...

RUSTSEC-2025-0098 `unic-ucd-version` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

RUSTSEC-2025-0103 `unic-ucd-core` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

`unic-ucd-version` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

`unic-ucd-normal` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icunormalizer...