GHSA-85GX-3QV6-4463 vulnerabilities

Vulnerabilities for packages: dapr...

CVE-2026-40173 vulnerabilities

Vulnerabilities for packages: dgraph...

GHSA-95MQ-XWJ4-R47P vulnerabilities

Vulnerabilities for packages: dgraph...

GHSA-RP42-5VXX-QPWR vulnerabilities

Vulnerabilities for packages: code-server, opensearch-dashboards-fips, wazuh-dashboard, opensearch-dashboards, kibana...

GHSA-9VQ6-R4XH-VM55 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-7G92-G4VH-HP84 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-21724 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-33375 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-41242 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, langfuse-fips, gemini-cli, vitess, pulumi, librechat, renovate, langfuse, jitsucom-jitsu, kibana, opentelemetry-auto-instrumentations-node...

GHSA-C3FC-8QFF-9HWX vulnerabilities

Vulnerabilities for packages: hono, jenkins, kayenta-fips, camunda, druid, camunda-zeebe, wso2is, apache-nifi, keycloak, geoserver, ruby4.0-bouncy-castle-java, ghidra, commercial-elasticsearch, elasticsearch, guacamole-client, apache-nifi-registry, wildfly, kserve-modelmesh, kayenta, spark,...

CVE-2026-0636 vulnerabilities

Vulnerabilities for packages: hono, jenkins, kayenta-fips, camunda, druid, camunda-zeebe, wso2is, apache-nifi, keycloak, geoserver, ruby4.0-bouncy-castle-java, ghidra, commercial-elasticsearch, elasticsearch, guacamole-client, apache-nifi-registry, wildfly, kserve-modelmesh, kayenta, spark,...

GHSA-CJ8J-37RH-8475 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins, apache-nifi-registry, wildfly, gradle...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, argocd-image-updater, mapotf, guac, flux-source-controller-fips, zarf-fips, grafana-alloy-fips, trivy, grype, gitaly, packer-fips, kargo, pulumi-language-yaml, trivy-operator, packer, gitlab-rails-ce, pulumi-kubernetes-operator, jfrog-cli,...

CVE-2026-3505 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins, apache-nifi-registry, wildfly, gradle...

CVE-2026-1839 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, nemo, lmcache-cuda-12.8, py3-transformers, vllm-openai-cuda-12.9...

GHSA-69W3-R845-3855 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, nemo, lmcache-cuda-12.8, py3-transformers, vllm-openai-cuda-12.9...

CVE-2026-39350 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr...

GHSA-9GCG-W975-3RJH vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr...

GHSA-V92G-XGXW-VVMM vulnerabilities

Vulnerabilities for packages: superset, airflow-core, nemo, jupyter-base-notebook, airflow, dagster-fips, prefect-fips, pgadmin4-fips, mlflow, dagster, open-webui...

GHSA-QQX8-2XMM-JRV8 vulnerabilities

Vulnerabilities for packages: sftpgo, traefik, traefik-fips...

CVE-2026-40611 vulnerabilities

Vulnerabilities for packages: sftpgo, traefik, traefik-fips...

GHSA-XQ3M-2V4X-88GG vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, langfuse-fips, gemini-cli, vitess, pulumi, librechat, renovate, langfuse, jitsucom-jitsu, kibana, opentelemetry-auto-instrumentations-node...

GHSA-7GW9-CF7V-778F vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-4PXV-J86V-MHCW vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

CVE-2026-40260 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-X284-J5P8-9C5P vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-JJ6C-8H6C-HPPX vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-3CRG-W4F6-42MX vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-497X-RRR9-68JP vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana, grafana-alloy, grafana-alloy-fips...

CVE-2026-21726 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana, grafana-alloy, grafana-alloy-fips...

GHSA-445C-VH5M-36RJ vulnerabilities

Vulnerabilities for packages: celeborn, camunda, spark-kubernetes-operator, akhq, logstash, kafka-fips, camunda-zeebe, kafka-bridge, pinot-fips, spark-kubernetes-operator-fips, infinispan, tritonserver-backend-vllm-cuda-13.0, apache-pulsar-fips, geoserver, airflow, ghidra, commercial-elasticsearc...

CVE-2025-71176 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, apache-beam-python-3.12-sdk, py3-cassandra-medusa, request-1276, open-webui, localstack...

CVE-2026-34478 vulnerabilities

Vulnerabilities for packages: celeborn, camunda, spark-kubernetes-operator, akhq, logstash, kafka-fips, camunda-zeebe, kafka-bridge, pinot-fips, spark-kubernetes-operator-fips, infinispan, tritonserver-backend-vllm-cuda-13.0, apache-pulsar-fips, geoserver, airflow, ghidra, commercial-elasticsearc...

GHSA-6W46-J5RX-G56G vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, apache-beam-python-3.12-sdk, py3-cassandra-medusa, request-1276, open-webui, localstack...

GHSA-2WRP-6FG6-HMC5 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta...

GHSA-WG6Q-6289-32HP vulnerabilities

Vulnerabilities for packages: hono, jenkins, kayenta-fips, camunda, druid, camunda-zeebe, wso2is, apache-nifi, keycloak, ghidra, commercial-elasticsearch, elasticsearch, guacamole-client, apache-nifi-registry, wildfly, kserve-modelmesh, kayenta, apache-pulsar, zipkin, jruby, thingsboard,...

CVE-2026-5588 vulnerabilities

Vulnerabilities for packages: hono, jenkins, kayenta-fips, camunda, druid, camunda-zeebe, wso2is, apache-nifi, keycloak, ghidra, commercial-elasticsearch, elasticsearch, guacamole-client, apache-nifi-registry, wildfly, kserve-modelmesh, kayenta, apache-pulsar, zipkin, jruby, thingsboard,...

CVE-2024-22262 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta...

GHSA-H2H4-5M64-M273 vulnerabilities

Vulnerabilities for packages: geoserver, apache-activemq-artemis, zipkin...

GHSA-5568-6QCG-G7FX vulnerabilities

Vulnerabilities for packages: geoserver, apache-activemq-artemis, zipkin...

CVE-2026-33227 vulnerabilities

Vulnerabilities for packages: geoserver, apache-activemq-artemis, zipkin...

CVE-2026-39304 vulnerabilities

Vulnerabilities for packages: geoserver, apache-activemq-artemis, zipkin...

CVE-2026-33816 vulnerabilities

Vulnerabilities for packages: envoy-gateway, commercial-expanso-edge, spire-server, envoy-gateway-fips, kots, kine, commercial-chainloop-backend, k3s...

GHSA-9JJ7-4M8R-RFCM vulnerabilities

Vulnerabilities for packages: envoy-gateway, commercial-expanso-edge, spire-server, envoy-gateway-fips, kots, kine, commercial-chainloop-backend, k3s...

GHSA-XGP8-3HG3-C2MH vulnerabilities

Vulnerabilities for packages: zellij, garage, mise, cargo-audit, rustup, sentry-cli, xh, linkerd-extension-init, kdash, deno, py3-xet-core, komodo, zizmor, ztunnel-fips, lakekeeper, pixi, wasmcloud, tealdeer, asciinema, atuin, linkerd2-cni-plugin, qdrant, wasmtime, linkerd2-proxy, uv, lychee,...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: zellij, garage, mise, cargo-audit, rustup, sentry-cli, xh, linkerd-extension-init, kdash, deno, py3-xet-core, komodo, zizmor, ztunnel-fips, lakekeeper, pixi, wasmcloud, tealdeer, asciinema, atuin, linkerd2-cni-plugin, qdrant, wasmtime, linkerd2-proxy, uv, lychee,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, verticadb-operator-fips, argocd-image-updater, velero, falcoctl-fips, k8sgpt-operator, argo-rollouts, k8sgpt, zarf-fips, cert-manager-istio-csr, cluster-api, cluster-api-fips, kcp-fips-0.29, eks-distro, trivy, cilium-fips, kubeflow-pipelines,...

CVE-2026-27143 vulnerabilities

Vulnerabilities for packages: verticadb-operator-fips, nri-mssql, nri-f5, crossplane-function-environment-configs, coredns, tekton-pipelines, knative-serving, opentofu, argo-rollouts, flux-source-controller-fips, dapr, secrets-store-csi-driver-provider-azure, kubescape-operator-fips,...

GHSA-CFP9-33RC-J74F vulnerabilities

Vulnerabilities for packages: verticadb-operator-fips, nri-mssql, nri-f5, crossplane-function-environment-configs, coredns, tekton-pipelines, knative-serving, opentofu, argo-rollouts, flux-source-controller-fips, dapr, secrets-store-csi-driver-provider-azure, kubescape-operator-fips,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, verticadb-operator-fips, argocd-image-updater, velero, falcoctl-fips, k8sgpt-operator, argo-rollouts, k8sgpt, zarf-fips, cert-manager-istio-csr, cluster-api, cluster-api-fips, kcp-fips-0.29, eks-distro, trivy, cilium-fips, kubeflow-pipelines,...