CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: py3-pipenv, kubeflow-katib, superset, kubeflow-volumes-web-app, pypy-3.10, httpie, py3-setuptools, mlflow, kubeflow-jupyter-web-app, datadog-agent, airflow...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, openstack-horizon-2026.1-fips, openstack-glance-2026.1, ansible-operator-fips, datahub-ingestion, openstack-placement-2026.1-fips, datadog-agent, nemo, openstack-glance-2025.1, openstack-horizon-2025.1-fips, openstack-glance-2025.1-fips,...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, datahub-ingestion, kubeflow-pipelines-fips, datadog-agent, openstack-keystone-2025.1-fips, apache-beam-python-3.12-sdk, localstack, openstack-keystone-2026.1-fips, spamcheck, mitmproxy,...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, datahub-ingestion, kubeflow-pipelines-fips, datadog-agent, openstack-keystone-2025.1-fips, apache-beam-python-3.12-sdk, localstack, openstack-keystone-2026.1-fips, spamcheck, mitmproxy,...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, datahub-ingestion, kubeflow-pipelines-fips, datadog-agent, openstack-keystone-2025.1-fips, apache-beam-python-3.12-sdk, localstack, openstack-keystone-2026.1-fips, spamcheck, mitmproxy,...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, openstack-horizon-2026.1-fips, openstack-glance-2026.1, ansible-operator-fips, datahub-ingestion, openstack-placement-2026.1-fips, datadog-agent, nemo, openstack-glance-2025.1, openstack-horizon-2025.1-fips, openstack-glance-2025.1-fips,...

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

CVE-2026-9602

Mattermost Desktop App vulnerable versions:

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-42486

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-15115

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-56634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.115 Description Insufficient validation of untrusted input in WebAppInstalls allows a local attacker to bypass the same origin policy via a crafted HTML page. The same origin policy is a...

MAL-2026-7421 Malicious code in sitefinitywebapp (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7313 Malicious code in liportal-web-app (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2026-13852

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-13881

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-13993

Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-14122

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-14131

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...