GHSA-W62V-XXXG-MG59 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-64250

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

CVE-2026-50289 vulnerabilities

Vulnerabilities for packages: homepage, opentelemetry-auto-instrumentations-node...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: opensearch, akhq, spark, cloudwatch-exporter, apache-nifi, zipkin, thingsboard, management-api-for-apache-cassandra-5.0, celeborn, keycloak, apicurio-registry, kserve-modelmesh, apache-pulsar, flyway, tez, infinispan, druid, logstash, apache-activemq-artemis,...

GHSA-35RM-7J9C-2F7M vulnerabilities

Vulnerabilities for packages: zed...

GHSA-P9J2-GV94-2WF4 vulnerabilities

Vulnerabilities for packages: keep-fips, keep, langfuse, homepage, langfuse-fips, peerdb-ui, jitsucom-jitsu...

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: keep-fips, keep, langfuse, homepage, langfuse-fips, peerdb-ui, jitsucom-jitsu...

SUSE CVE-2026-56684

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: awx, datahub-ingestion, mlflow, datahub-ingestion-fips, checkov, opal...

CVE-2026-16221 vulnerabilities

Vulnerabilities for packages: keep-fips, unleash-fips, wazuh-dashboard, gitlab-rails-ce, kibana, argo-workflows, tileserver-gl-fips, unleash, prism, opensearch-dashboards-fips, gitlab-rails-ce-fips, librechat, langfuse, nextcloud-server, wazuh-dashboard-fips, opensearch-dashboards, tileserver-gl,...

GHSA-2F96-G7MH-G2HX vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

SUSE CVE-2026-59898

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...

GHSA-5GVW-P9QM-JGWH vulnerabilities

Vulnerabilities for packages: opensearch, akhq, jenkins-plugin-manager, apache-tika, zookeeper, sonarqube, spark, apache-nifi, scala, thingsboard, apicurio-registry, confluent-kafka, flyway, tez, infinispan, ruby3.3-jrjackson, keycloak-config-cli, apache-nifi-registry, druid, logstash,...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-rds, crossplane-provider-aws-elasticache, crossplane-provider-aws-dynamodb, crossplane-provider-aws-iam, crossplane-provider-family-aws, crossplane-provider-aws-sns, crossplane-provider-aws-memorydb, crossplane-provider-aws-sqs,...

CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2, open-webui, openstack-horizon-2026.1-fips, label-studio, text-generation-inference, mlflow, superset, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, openstack-horizon-2026.1,...

CVE-2026-52869 vulnerabilities

Vulnerabilities for packages: litellm, semgrep...

CVE-2026-13149 vulnerabilities

Vulnerabilities for packages: sqlpad, unleash-fips, thingsboard, wazuh-dashboard, gitlab-rails-ce, kibana, azurite, saf, authentik, pulumi, ts-patch, jupyter-base-notebook, unleash, prism, pelias-api, opensearch-dashboards-fips, gitlab-rails-ce-fips, bash-language-server, langfuse, foxx-cli,...

CVE-2026-39244 vulnerabilities

Vulnerabilities for packages: saf, sqlpad, redisinsight, kibana...

CVE-2026-44227

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...