SUSE CVE-2026-35602

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the Vikunja file import endpoint uses the attacker-controlled Size field from the JSON metadata inside the import zip instead of the actual decompressed file content length for the file size enforcement check. By...

SUSE CVE-2026-40103

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's scoped API token enforcement for custom project background routes is method-confused. A token with only projects.background can successfully delete a project background, while a token with only...

CVE-2026-62663

Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters image, audio, video, document in banks accept untrusted user input as file paths via Pathvalue and pass them directly to openfilepath, "rb" without any path sanitization,...

EUVD-2026-50468

Flyto2 Core: LLM/API keys leak to an attacker-controlled baseurl...

CVE-2026-64785

A flaw was found in SwiftNIO HTTP/2. This vulnerability allows a remote attacker to perform HTTP request smuggling or response splitting. The issue stems from insufficient validation of incoming HTTP/2 HEADERS frames, which are parts of an HTTP/2 request. This allows special control characters,...

CVE-2026-16969 DFIR-IRIS Stored XSS in Assets

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...

CLEANSTART-2026-RC48434 Security fixes in mongosh 2.7.0-r1

Package mongosh version 2.7.0-r1 fixes 31 vulnerabilities: CVE-2025-62718, CVE-2026-33937, ghsa-2w6w-674q-4c4q, ghsa-3p68-rc4w-qgx5, CVE-2026-33671...

CLEANSTART-2026-HO81161 Security fixes in apache-nifi 2.8.0-r0

Package apache-nifi version 2.8.0-r0 fixes 4 vulnerabilities: ghsa-x2wq-9x2f-fhj7, ghsa-72hv-8253-57qq, ghsa-6v53-7c9g-w56r, ghsa-2m67-wjpj-xhg9...

CLEANSTART-2026-IF30502 Security fixes in kube-state-metrics 2.10.1-r1

Package kube-state-metrics version 2.10.1-r1 fixes 24 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-ZY62272 Security fixes in opensearch-k8s-operator-fips 2.5.1-r4

Package opensearch-k8s-operator-fips version 2.5.1-r4 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...

CLEANSTART-2026-BG62788 Security fixes in expat 2.4.3-r0

Package expat version 2.4.3-r0 fixes 8 vulnerabilities: CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824...

CLEANSTART-2026-VY64153 Security fixes in dex 2.44.0-r2

Package dex version 2.44.0-r2 fixes 4 vulnerabilities: CVE-2026-33810, CVE-2026-33814, CVE-2026-29181, CVE-2026-32952...

CLEANSTART-2026-YT96362 Security fixes in kubernetes-csi-node-driver-registrar-fips 2.16.0-r3

Package kubernetes-csi-node-driver-registrar-fips version 2.16.0-r3 fixes 13 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-39820, CVE-2026-42499, CVE-2026-39836...

CLEANSTART-2026-BC05591 Security fixes in k8s-sidecar 2.4.0-r0

Package k8s-sidecar version 2.4.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-RB40964 Security fixes in ip-masq-agent 2.9.3-r0

Package ip-masq-agent version 2.9.3-r0 fixes 2 vulnerabilities: ghsa-6wxm-mpqj-6jpf, CVE-2024-45339...

CLEANSTART-2026-XF99533 Security fixes in kube-state-metrics 2.17.0-r3

Package kube-state-metrics version 2.17.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-IV23706 Security fixes in kube-state-metrics 2.19.1-r0

Package kube-state-metrics version 2.19.1-r0 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-US20993 Security fixes in airflow-2 2.10.3-r3

Package airflow-2 version 2.10.3-r3 fixes 22 vulnerabilities: ghsa-27jp-wm6q-gp25, ghsa-5rvq-cxj2-64vf, ghsa-82w8-qh3p-5jfq, ghsa-wqp7-x3pw-xc5r, ghsa-3x9g-8vmp-wqvf...

CLEANSTART-2026-MJ21228 Security fixes in harbor 2.13.4-r2

Package harbor version 2.13.4-r2 fixes 7 vulnerabilities: CVE-2025-55198, CVE-2025-55199, CVE-2026-27141, CVE-2025-53547, ghsa-f9f8-9pmf-xv68...

CLEANSTART-2026-WO19208 Security fixes in argo-cd-fips 2.14.20-r0

Package argo-cd-fips version 2.14.20-r0 fixes 10 vulnerabilities: CVE-2025-58187, CVE-2025-58188, CVE-2025-61723, CVE-2025-61725, CVE-2025-47912...