PT-2026-100535

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100030

Security vulnerability affects the multus-cni-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101820

ghsa-mh2q-q3fh-2475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100023

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102281

TuxCare rebuilt 5 org.springframework.data packages to address 4 CVEs. Fixed in 3.6.10-tuxcare.1...

PT-2026-102067

Security vulnerability affects the renovate package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100601

ghsa-77fj-vx54-gvh7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100425

Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101533

Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100324

ghsa-5c6j-r48x-rmvq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100354

ghsa-527x-5wrf-22m2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102004

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95348

Name of the Vulnerable Software and Affected Versions T-Systems TAO 2.0 affected versions not specified Description A stored Cross-Site Scripting XSS issue exists in the profile management functionality. An authenticated user can inject malicious HTML or JavaScript into personal data fields. This...

PT-2026-101005

ghsa-995c-6rp3-4m4x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101623

ghsa-x746-7m8f-x49c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101755

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95229

Name of the Vulnerable Software and Affected Versions ManageEngine DataSecurity Plus versions prior to 6310 Description An agent authentication bypass exists that allows unenrolled agents to send requests without proper authentication. Recommendations Update ManageEngine DataSecurity Plus to...

PT-2026-101066

ghsa-f9vj-2wh5-fj8j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100954

ghsa-27v5-c462-wpq7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95293

Name of the Vulnerable Software and Affected Versions NEX-Forms – Ultimate Forms Plugin for WordPress versions prior to 9.3.1 Description An issue exists where authenticated attackers with custom-level access and above can perform a generic SQL Injection. This occurs because the additional params...

PT-2026-101959

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100733

Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101411

ghsa-w2fm-2cpv-w7v5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101974

Security vulnerability affects the wso2is package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101289

ghsa-2r2c-cx56-8933 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100270

ghsa-gcjf-9mgh-3p7g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101074

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101237

ghsa-xm5m-wgh2-rrg3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101842

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101603

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100011

Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101333

Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95713

Name of the Vulnerable Software and Affected Versions Vinyl Cache versions prior to 9.0.2 Description A workspace buffer overflow exists in the .upper and .lower string type methods of the VCL Varnish Configuration Language. This issue can be leveraged as a remote denial of service DoS vector,...

PT-2026-101164

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101703

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100714

Security vulnerability affects the npm package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101253

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100433

Security vulnerability affects the solr package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100160

Security vulnerability affects the calico package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100521

ghsa-r275-fr43-pm7q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100132

Security vulnerability affects the python3 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102184

Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101431

Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101311

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100597

ghsa-c3fc-8qff-9hwx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100801

Security vulnerability affects the apicurio-registry package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95390

Name of the Vulnerable Software and Affected Versions wildfly-elytron-asn1 affected versions not specified Description A resource exhaustion flaw exists in the DERDecoder class. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted DER Distinguished Encoding Rules...

PT-2026-95246

Name of the Vulnerable Software and Affected Versions Tz Weekly Radio Schedule versions prior to 1.8.2 Description The plugin fails to sanitize and escape a parameter used to construct a SQL query within an AJAX action accessible to unauthenticated users. This allows remote attackers to execute S...

PT-2026-95627

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated privileged CLI user can execute arbitrary shell commands with root privileges. This occurs due to a command injection flaw in the create csr wildcard CLI command via the...

PT-2026-95646

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The extension manages partitioned tables by time or ID. The functions run maintenance, show partitions, show partition info, undo partition, and partition data time interpolate the writable part...