CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, kubeflow-jupyter-web-app, mlflow-fips, datahub-ingestion-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.2, datahub-ingestion, nemo, openstack-placement-2025.2-fips, dbt-bigquery,...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: metaflow-service, k8s-sidecar, kubeflow-jupyter-web-app, datahub-ingestion-fips, openstack-keystone-2025.2-fips, datahub-ingestion, kubeflow-pipelines-visualization-server, kubeflow-pipelines, dbt-bigquery, kserve, wazuh-manager-fips, datadog-agent-fips, airflow,...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, kubeflow-jupyter-web-app, mlflow-fips, datahub-ingestion-fips, openstack-horizon-2025.2-fips, openstack-keystone-2025.2-fips, openstack-placement-2025.2, datahub-ingestion, nemo, openstack-placement-2025.2-fips, dbt-bigquery,...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: metaflow-service, k8s-sidecar, kubeflow-jupyter-web-app, datahub-ingestion-fips, openstack-keystone-2025.2-fips, datahub-ingestion, kubeflow-pipelines-visualization-server, kubeflow-pipelines, dbt-bigquery, kserve, wazuh-manager-fips, datadog-agent-fips, airflow,...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: metaflow-service, k8s-sidecar, kubeflow-jupyter-web-app, datahub-ingestion-fips, openstack-keystone-2025.2-fips, datahub-ingestion, kubeflow-pipelines-visualization-server, kubeflow-pipelines, dbt-bigquery, kserve, wazuh-manager-fips, datadog-agent-fips, airflow,...

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

CVE-2026-9602

Mattermost Desktop App vulnerable versions:

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-42486

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-15115

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-56634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.115 Description Insufficient validation of untrusted input in WebAppInstalls allows a local attacker to bypass the same origin policy via a crafted HTML page. The same origin policy is a...

MAL-2026-7421 Malicious code in sitefinitywebapp (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7313 Malicious code in liportal-web-app (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2026-13852

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-13881

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-13993

Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-14122

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-14131

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated attacker with limited privileges to acces...