DEBIAN-CVE-2026-103399

Bulletin has no description...

ECHO-34DD-7B97-3C35

Bulletin has no description...

ECHO-5375-53EF-D472

Bulletin has no description...

GHSA-3CV6-JPF6-8222 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination they control and cause the proxy to send its own configured provider credentials to that destination. The proxy's request-body validation was a denylist that did not cover every sensitive paramet...

ECHO-4DDC-E650-11BE

Bulletin has no description...

ECHO-1AD3-2097-5734

Bulletin has no description...

ECHO-C70C-D13E-FD09

Bulletin has no description...

ECHO-6A3F-94EB-497C

Bulletin has no description...

ECHO-940B-9DD5-9D88

Bulletin has no description...

MINI-JVCV-CX49-7J62

Bulletin has no description...

MINI-W7JQ-58MR-CMGX

Bulletin has no description...

MINI-QXC2-3RC9-W5F3

Bulletin has no description...

MINI-WWQ2-M3CQ-9PMF

Bulletin has no description...

MINI-P432-H49P-J452

Bulletin has no description...

MINI-X82Q-C59W-GGCW

Bulletin has no description...

MINI-WX84-3F5Q-734Q

Bulletin has no description...

MINI-JX9J-V849-G37W

Bulletin has no description...

MINI-C2H4-6J43-66F5

Bulletin has no description...

MINI-2V74-8J2F-93GQ

Bulletin has no description...

MINI-C229-4FVF-86JV

Bulletin has no description...

MINI-JHJV-FJXX-453X

Bulletin has no description...

MINI-JJHH-2JWC-JRGH

Bulletin has no description...

ROOT-APP-MAVEN-CVE-2024-38816 CVE-2024-38816 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38816 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38820 CVE-2024-38820 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-38820 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22740 CVE-2026-22740 in org.springframework:spring-webflux - Patched by Root

Root has patched CVE-2026-22740 in the org.springframework:spring-webflux package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22259 CVE-2024-22259 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22259 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22243 CVE-2024-22243 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22243 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38809 CVE-2024-38809 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-38809 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22745 CVE-2026-22745 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22745 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22262 CVE-2024-22262 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22262 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22741 CVE-2026-22741 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-22741 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-41242 CVE-2025-41242 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2025-41242 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38819 CVE-2024-38819 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2024-38819 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

DEBIAN-CVE-2026-101276

Bulletin has no description...

ROOT-APP-GOBINARY-CVE-2026-25681 CVE-2026-25681 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-25681 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39821 CVE-2026-39821 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-39821 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-25680 CVE-2026-25680 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-25680 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42502 CVE-2026-42502 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-42502 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-33814 CVE-2026-33814 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-33814 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42506 CVE-2026-42506 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-42506 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ECHO-F9F7-0739-3421

Bulletin has no description...

ECHO-A40F-FCBC-6816

Bulletin has no description...

ECHO-E52A-F4C4-7DC8

Bulletin has no description...

MAL-2026-17416 Malicious code in friendly-greeting-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d584c571cf5d112735aefd07c78bc19659af32f5950b1331a4970cba97c9707 The package presents itself as a harmless greeting demo but src/friendlygreeting/main.py ships two base64+gzip-encoded Python blobs DEMOEN and DEMOST...

CLEANSTART-2025-JH01650 race condition in the one-pass compression functions of Zstandard prior to version 1

Security vulnerability affects the zstd package. A race condition in the one-pass compression functions of Zstandard prior to version 1...

CLEANSTART-2025-NH78236 In the Zstandard command-line utility prior to v1

Security vulnerability affects the zstd package. In the Zstandard command-line utility prior to v1...

CLEANSTART-2025-AN69250 Beginning in v1

Security vulnerability affects the zstd package. Beginning in v1...

CLEANSTART-2025-NL28578 Malicious code was discovered in the upstream tarballs of xz, starting with version 5

Security vulnerability affects the xz package. Malicious code was discovered in the upstream tarballs of xz, starting with version 5...

CLEANSTART-2025-BC18774 arbitrary file write vulnerability was found in GNU gzip's zgrep utility

Security vulnerability affects the xz package. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility...