SUSE CVE-2026-54158

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the attribute-view database cell renderer genAVValueHTML interpolates cell content raw in four of its branches: text, url, phone, and mAsset. A cell value like or " breaks out of its surrounding tag and runs arbitrary...

CLEANSTART-2026-CJ46936 Security fixes in kyverno-policy-reporter-fips 3.7.2-r0

Package kyverno-policy-reporter-fips version 3.7.2-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-RZ01875 Security fixes in argo-cd-fips 3.1.12-r1

Package argo-cd-fips version 3.1.12-r1 fixes 4 vulnerabilities: CVE-2026-24051, CVE-2025-68121, CVE-2025-61732, CVE-2026-25934...

CLEANSTART-2026-CT11931 Security fixes in prometheus-mysqld-exporter 0.18.0-r3

Package prometheus-mysqld-exporter version 0.18.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-JV70419 Security fixes in loki 3.6.12-r0

Package loki version 3.6.12-r0 fixes 4 vulnerabilities: CVE-2020-8911, CVE-2020-8912, CVE-2026-56852, CVE-2026-46600...

CLEANSTART-2026-CL18609 Security fixes in argo-workflows-fips 3.6.16-r0

Package argo-workflows-fips version 3.6.16-r0 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, ghsa-37cx-329c-33x3...

CLEANSTART-2026-EW52288 Security fixes in cassandra-reaper-fips 3.8.0-r3

Package cassandra-reaper-fips version 3.8.0-r3 fixes 2 vulnerabilities: ghsa-gc5v-m9x4-r6x2, CVE-2026-25645...

CLEANSTART-2026-AR33057 Security fixes in prometheus 3.5.1-r1

Package prometheus version 3.5.1-r1 fixes 9 vulnerabilities: CVE-2026-33186, CVE-2026-32280, CVE-2026-39883, CVE-2026-39882, CVE-2026-32289...

CLEANSTART-2026-AD69953 Security fixes in argo-cd-fips 3.1.14-r0

Package argo-cd-fips version 3.1.14-r0 fixes 14 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-MS00856 Security fixes in airflow-3 3.1.8-r3

Package airflow-3 version 3.1.8-r3 fixes 15 vulnerabilities: CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526...

CLEANSTART-2026-RB15576 Security fixes in kyverno-policy-reporter-fips 3.7.3-r1

Package kyverno-policy-reporter-fips version 3.7.3-r1 fixes 3 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-34986, CVE-2026-39883...

CLEANSTART-2026-RM58877 Security fixes in harbor-registry-fips 3.0.0-r1

Package harbor-registry-fips version 3.0.0-r1 fixes 15 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...

CLEANSTART-2026-JY81919 Security fixes in python3 3.14.0-r0

Package python3 version 3.14.0-r0 fixes 1 vulnerabilities: CVE-2025-8291...

CLEANSTART-2026-OX83078 Security fixes in eck-operator-fips 3.2.0-r0

Package eck-operator-fips version 3.2.0-r0 fixes 12 vulnerabilities: CVE-2025-58187, CVE-2025-58188, CVE-2025-61723, CVE-2025-61725, CVE-2025-47912...

CLEANSTART-2026-KC30939 Security fixes in argo-workflows-fips 3.7.8-r2

Package argo-workflows-fips version 3.7.8-r2 fixes 7 vulnerabilities: ghsa-fw7p-63qq-7hpr, ghsa-q9hv-hpm4-hj6x, ghsa-9h8m-3fm2-qjrq, CVE-2026-26958, CVE-2026-1229...

CLEANSTART-2026-FE21216 Security fixes in fluent-operator-fips 3.4.0-r7

Package fluent-operator-fips version 3.4.0-r7 fixes 4 vulnerabilities: CVE-2026-27139, CVE-2025-61730, CVE-2025-61732, CVE-2026-27142...

CLEANSTART-2026-UX16932 Security fixes in prometheus 3.11.2-r0

Package prometheus version 3.11.2-r0 fixes 28 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

Linux Distros Unpatched Vulnerability : CVE-2026-55555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS...

WordPress Advanced Shipment Tracking for WooCommerce plugin <= 3.9 - Authenticated (Shop Manager+) SQL Injection vulnerability

Authenticated Shop Manager+ SQL Injection vulnerability discovered by Nguyen Truong Roll in WordPress Plugin Advanced Shipment Tracking for WooCommerce versions = 3.9...