GHSA-PHJ9-MV4W-65PM vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, superset...

GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, superset...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, superset...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli, zipkin...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli, zipkin...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli, zipkin...

GHSA-395F-4HP3-45GV vulnerabilities

Vulnerabilities for packages: code-server...

GHSA-VV88-699V-W5RH vulnerabilities

Vulnerabilities for packages: wget...

GHSA-5F52-PX6M-C5HW vulnerabilities

Vulnerabilities for packages: wget...

CVE-2026-58472 vulnerabilities

Vulnerabilities for packages: wget...

CVE-2026-58469 vulnerabilities

Vulnerabilities for packages: wget...

GHSA-FXF9-RXPJ-26GX vulnerabilities

Vulnerabilities for packages: wget...

GHSA-WRJC-X8RR-H8H6 vulnerabilities

Vulnerabilities for packages: vitess, keycloak, librechat...

GHSA-H8FP-F39C-Q6MH vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-2RP8-MM9Q-FP49 vulnerabilities

Vulnerabilities for packages: redisinsight...

GHSA-R635-G3XR-VW7X vulnerabilities

Vulnerabilities for packages: redisinsight...

CVE-2026-59725 vulnerabilities

Vulnerabilities for packages: redisinsight...

GHSA-957G-F97V-VPPC vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry, camunda, apache-activemq-fips, apache-activemq...

GHSA-3CHG-M5W7-QFV5 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry, camunda, apache-activemq-fips, apache-activemq...

DEBIAN-CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escaping dots, so a hostname differing at dot positions can match the allowlist. This issue is fixed in 7.8.0...