PT-2026-100292

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101369

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101747

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-99972

rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...

PT-2026-101659

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101735

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100631

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101911

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100762

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100293

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101073

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101815

Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101217

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100638

ghsa-w33c-445m-f8w7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101823

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95398

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the WebSocketServerExtensionHandler allows a remote, unauthenticated attacker to cause a Denial of Service DoS. By utilizing HTTP/1.1 pipelining—a technique where multiple HTTP reques...

PT-2026-95401

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description An issue exists where strict validation of the chunk-size line is skipped when the line contains no chunk extension ;. A remote attacker can exploit this by sending a specially crafted HTTP...

PT-2026-102216

Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100943

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100451

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101276

Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101303

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-99827

Multiple security vulnerabilities affect the grafana-alloy package. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...

PT-2026-101118

Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100784

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101794

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100242

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101445

Security vulnerability affects the wildfly package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101087

Security vulnerability affects the wildfly package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100522

Security vulnerability affects the tekton-chains-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101221

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100564

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95341

Name of the Vulnerable Software and Affected Versions Jeg Kit for Elementor versions prior to 3.2.17 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages via...

PT-2026-100879

Security vulnerability affects the renovate package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102126

Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101050

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101444

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100944

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100575

ghsa-f6hv-jmp6-3vwv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100888

ghsa-2wpx-qpw2-g5h5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95363

Name of the Vulnerable Software and Affected Versions ABB Freelance Controller DCP versions 2013 through 2019 SP1 ABB Freelance Controller AC700 versions 2013 through 2019 SP1 ABB Freelance Controller AC800 versions 2013 through 2019 SP1 ABB Freelance Controller AC900 versions 2013 through 2019 S...

PT-2026-95631

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

PT-2026-95300

Name of the Vulnerable Software and Affected Versions ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin versions prior to 3.5.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occur...

PT-2026-101524

ghsa-pw6j-qg29-8w7f affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101951

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101558

ghsa-273p-m2cw-6833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100281

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100918

ghsa-cvc6-q2cp-2xhw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95315

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...

PT-2026-102052

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...