GHSA-FCW5-X6J4-CCMP vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-WXV8-W48J-R2F4 vulnerabilities

Vulnerabilities for packages: python...

GHSA-4M7W-QMGQ-4WJ5 vulnerabilities

Vulnerabilities for packages: text-generation-inference, authentik, authentik-fips, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.9, metaflow-service-fips, mlflow-fips, request-1276, mlflow...

GHSA-4FVR-RGM6-GQMC vulnerabilities

Vulnerabilities for packages: text-generation-inference, authentik, authentik-fips, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.9, metaflow-service-fips, mlflow-fips, request-1276, mlflow...

CVE-2026-5222 affecting package rust for versions less than 1.90.0-9

CVE-2026-5222 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...

CVE-2026-40034 affecting package rust for versions less than 1.90.0-9

CVE-2026-40034 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...

Updated nghttp2 packages fix security vulnerability

Denial of service: Assertion failure due to missing state validation. CVE-2026-27135...

GHSA-WX4M-978H-JHX3 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11701 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-M67C-5QCR-Q2MM vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11692 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HMRH-MQV8-RVVR vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-V446-XWFM-X7MR vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-48856

Sensitive Data Exposure vulnerability in Erlang OTP inets httpcresponse module allows Retrieve Embedded Sensitive Data. The httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the redirect crosses an origin boundary...

CVE-2026-48859

Observable Timing Discrepancy vulnerability in Erlang/OTP ssh sshauth, sshoptions modules allows unauthenticated remote username enumeration via timing side-channel in password authentication. When the SSH daemon is configured with the userpasswords or password option, sshauth:checkpassword/3...

CVE-2026-44250 vulnerabilities

Vulnerabilities for packages: tez, celeborn, trino, management-api-for-apache-cassandra-5.0, thingsboard...

GHSA-8X6R-G9MW-2R78 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-RPM7-PHH8-26F7 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GF8F-G97G-H982 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CJP7-QFWC-W9JJ vulnerabilities

Vulnerabilities for packages: chromium...