PT-2026-101612

Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101049

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100375

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95402

Name of the Vulnerable Software and Affected Versions Poppler affected versions not specified Description A denial of service flaw exists in the Splash backend. A specially crafted PDF containing tiling-pattern geometry near the int32 boundary can trigger the SplashOutputDev::tilingPatternFill...

PT-2026-101001

ghsa-v8h7-rr48-vmmv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101010

Security vulnerability affects the apache-nifi-registry package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100700

ghsa-445q-vr5w-6q77 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101111

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101747

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101665

ghsa-2vrm-gr82-f7m5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100762

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100378

Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100189

ghsa-4vrq-3vrq-g6gg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101036

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102174

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101998

ghsa-34x7-hfp2-rc4v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100445

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-99834

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.11.0-tuxcare.1...

PT-2026-100672

ghsa-h2qv-fj59-j46j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-99835

TuxCare rebuilt 25 org.springframework packages to address 34 CVEs. Fixed in 6.2.12-tuxcare.1...

PT-2026-101142

ghsa-78cv-mqj4-43f7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102224

ghsa-445c-vh5m-36rj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100290

Security vulnerability affects the runc package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-99970

rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...

PT-2026-100760

ghsa-3qp7-7mw8-wx86 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100063

Security vulnerability affects the spark-sc212-jdk17-py311 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101038

ghsa-q4f6-jm68-57ww affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95328

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description Improper file validation controls lead to an unrestricted file upload issue. This allows an unauthenticated attacker to upload and execute malicious payloads, which can...

PT-2026-102054

Security vulnerability affects the coredns package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100294

ghsa-65pc-fj4g-8rjx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100288

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100210

ghsa-6rx9-889q-vv2r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100997

ghsa-73rr-hh4g-fpgx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100110

ghsa-7gcm-g887-7qv7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100618

ghsa-vvgc-356p-c3xw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100609

ghsa-j3rv-43j4-c7qm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100101

ghsa-rwvp-r38j-9rgg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100394

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100704

ghsa-h5fg-jpgr-rv9c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100397

Security vulnerability affects the postgresql17 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102069

ghsa-5x3r-wrvg-rp6q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100488

ghsa-8r3f-844c-mc37 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101159

ghsa-q8qp-cvcw-x6jj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101359

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102105

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100119

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102008

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100018

Security vulnerability affects the kube-vip-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100614

ghsa-w4qc-356p-c3xw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95599

Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped. An unauthenticated remote attacker can supply a crafted UNION SELECT payloa...