PT-2026-101431

Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100898

Security vulnerability affects the kafka package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102222

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100514

Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95408

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A flaw exists in the gptp handle msg function within subsys/net/l2/ethernet/gptp/gptp.c where the gPTP header returned by GPTP HDR is dereferenced and switched o...

PT-2026-95619

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header...

PT-2026-100542

Security vulnerability affects the cfssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101181

ghsa-vxf7-qj7q-83fh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101326

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100152

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100221

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95549

Name of the Vulnerable Software and Affected Versions Kyoo versions prior to 5.1.0 Description A registered user with the core.play permission can provide a base64-encoded filesystem path to the transcoder. The path handling in transcoder/src/api/path.go cleans the value and verifies it starts wi...

PT-2026-95706

Name of the Vulnerable Software and Affected Versions microsandbox versions prior to 0.5.10 Description The software serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repeated --env arguments within sdk/rust/lib/runtime/spawn.rs and...

PT-2026-95685

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Insufficient argument validation in the SUID-root nmap wrapper binary on the Collector appliance allows a local attacker with low-privileged access to execute arbitrary commands as root. Th...

PT-2026-95247

Name of the Vulnerable Software and Affected Versions Easy Appointments versions prior to 4.0.2.2 Description The plugin fails to use an unguessable token to authorize appointment cancellation and confirmation actions via mail-links. The token is derived from a hardcoded source-embedded salt and...

PT-2026-100821

ghsa-4vq8-7jfc-9cvp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101934

ghsa-2g4f-4pwh-qvx6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101189

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100960

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101637

ghsa-hgj6-7826-r7m5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100287

ghsa-9jj7-4m8r-rfcm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100478

Security vulnerability affects the wavefront-collector-for-kubernetes package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102207

ghsa-xf85-363p-868w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95721

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.5 Description Stored cross-site scripting occurs because the software fails to escape heading style attributes when rendering HTML for the outline and bookmark dock. Attackers can inject malicious style values by...

PT-2026-101684

ghsa-xcgm-r5h9-7989 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95701

Name of the Vulnerable Software and Affected Versions Cotonti versions prior to 1.0.1 Description The ratings plugin AJAX handler fails to validate anti-CSRF tokens, which are unique tokens used to prevent Cross-Site Request Forgery CSRF—an attack that forces an authenticated user to execute...

PT-2026-95208

Name of the Vulnerable Software and Affected Versions Nextcloud affected versions not specified Description Remote-instance signature verification in Circles fetches the keyId URL provided by an attacker before trust is established. This process explicitly allows local or private addresses,...

PT-2026-95638

Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.1 Description An authentication bypass exists in the /pd register WebSocket endpoint. Unauthenticated attackers can register arbitrary nodes by providing crafted JSON, as the system fails to perform peer address...

PT-2026-101904

ghsa-8c26-wmh5-6g9v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100323

ghsa-jfg9-48mv-9qgx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101481

ghsa-66jq-2c23-2xh5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95443

Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.0.0 through 11.0.1 FP7 IBM Controller versions 11.1.0 through 11.1.3 FP1 Description An authenticated user can bypass input validation because the software improperly validates client-side input regarding file size...

PT-2026-95209

Name of the Vulnerable Software and Affected Versions Nextcloud Team Folders affected versions not specified Description An issue exists in the team folders app previously known as group folders when integrated with the workspace app. This flaw allows delegated administrators with API/REST-only...

PT-2026-102156

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101434

ghsa-w35j-pv5h-q9q9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95276

Name of the Vulnerable Software and Affected Versions Divi versions 5.0 through 5.11.1 Description The software allows unauthenticated attackers to execute arbitrary shortcodes because it fails to properly validate a value before running the do shortcode function. If the 'Force Enable D4 Shortcod...

PT-2026-102125

ghsa-29vq-49wr-vm6x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101453

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100645

Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95632

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A missing authorization check in the REST API allows a remote authenticated attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer versio...

PT-2026-100401

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100466

Security vulnerability affects the ruby-fluentd-1.18 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100950

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101245

Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101760

Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102255

Security vulnerability affects the patch package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101116

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100104

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101580

Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101914

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...