CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: py3-pipenv, py3-setuptools, superset, airflow, kubeflow-volumes-web-app, pypy-3.10, mlflow, kubeflow-katib, datadog-agent, kubeflow-jupyter-web-app, httpie...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, label-studio, openstack-placement-2026.1, openstack-horizon-2025.1-fips, request-1276, openstack-placement-2026.1-fips, datadog-agent, openstack-keystone-2025.2-fips, pypy-3.10, py3-pipenv, kubeflow-volumes-web-app, authentik, mlflow,...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: label-studio, azureml-inference-server-http-fips, metaflow-service, request-1276, kubeflow-pipelines, barman, datadog-agent, openstack-keystone-2025.2-fips, awx, kubeflow-volumes-web-app, k8s-sidecar, authentik, kubeflow-pipelines-fips, mlflow, kserve, superset-fips,...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, label-studio, openstack-placement-2026.1, openstack-horizon-2025.1-fips, request-1276, openstack-placement-2026.1-fips, datadog-agent, openstack-keystone-2025.2-fips, pypy-3.10, py3-pipenv, kubeflow-volumes-web-app, authentik, mlflow,...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: label-studio, azureml-inference-server-http-fips, metaflow-service, request-1276, kubeflow-pipelines, barman, datadog-agent, openstack-keystone-2025.2-fips, awx, kubeflow-volumes-web-app, k8s-sidecar, authentik, kubeflow-pipelines-fips, mlflow, kserve, superset-fips,...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: label-studio, azureml-inference-server-http-fips, metaflow-service, request-1276, kubeflow-pipelines, barman, datadog-agent, openstack-keystone-2025.2-fips, awx, kubeflow-volumes-web-app, k8s-sidecar, authentik, kubeflow-pipelines-fips, mlflow, kserve, superset-fips,...

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

CVE-2026-9602

Mattermost Desktop App vulnerable versions:

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-42486

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-15115

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-56634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.115 Description Insufficient validation of untrusted input in WebAppInstalls allows a local attacker to bypass the same origin policy via a crafted HTML page. The same origin policy is a...

MAL-2026-7421 Malicious code in sitefinitywebapp (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7313 Malicious code in liportal-web-app (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2026-13852

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-13881

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-13993

Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-14122

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-14131

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...