PT-2026-102091

ghsa-f5fw-25gw-5m92 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102191

Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102145

Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100732

Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102044

Security vulnerability affects the argo-workflows-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100359

ghsa-qhmp-q7xh-99rh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102149

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100607

ghsa-44p7-9xx4-hf2g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95227

Name of the Vulnerable Software and Affected Versions OAKlouds affected versions not specified Description An Arbitrary File Read issue exists in OAKlouds developed by HGiga. Unauthenticated remote attackers can use Relative Path Traversal—a technique used to access files and directories stored...

PT-2026-101979

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95581

Name of the Vulnerable Software and Affected Versions SysReptor versions prior to 2026.68 Description The password authentication flow for protected shared notes fails to rotate the session identifier after successful authentication, leading to session fixation. This occurs when an attacker obtai...

PT-2026-101894

ghsa-wg35-8jpf-2xv3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100985

Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95267

Name of the Vulnerable Software and Affected Versions InfiniteWP Client plugin for WordPress versions prior to 1.14.0 Description An issue exists in the get comments action where insufficient escaping of array-key names in the JSON request body allows for SQL Injection. The IWP MMB Comment::get...

PT-2026-95590

Name of the Vulnerable Software and Affected Versions http-cache-semantics versions prior to 4.2.1 Description A cache validation issue exists in the varyMatches function. The function fails to properly validate Vary header wildcards because it uses byte-for-byte string comparison. This allows...

PT-2026-101732

ghsa-rgrr-p7gp-5xj7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101861

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100099

ghsa-xwmg-2g98-w7v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95418

Name of the Vulnerable Software and Affected Versions SveltyCMS version 0.0.6 Description An issue in the File Upload Endpoint component allows for remote server-side request forgery SSRF, which occurs when a server is tricked into making requests to an unintended location. This is caused by...

PT-2026-102165

Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100753

Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100643

ghsa-wqp7-x3pw-xc5r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101148

ghsa-9c54-x2g4-v92j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101374

ghsa-9g5q-2w5x-hmxf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100327

ghsa-3vp4-m3rf-835h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100284

ghsa-9f94-5g5w-gf6r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100297

ghsa-chqc-8p9q-pq6q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100904

ghsa-j4pr-3wm6-xx2r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100774

ghsa-gfh6-3pqw-x2j4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100498

Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100331

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101775

Security vulnerability affects the nginx package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95258

Name of the Vulnerable Software and Affected Versions Breeze Cache WordPress plugin versions prior to 2.5.15 Description The plugin fails to include specific tracking-related query parameters in its page-cache key while continuing to cache pages requested with those parameters. This allows an...

PT-2026-101662

ghsa-rj7p-rfgp-852x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101748

ghsa-c9v3-4pv7-87pr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100477

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100993

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101255

ghsa-vf5j-865m-mq7c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100906

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101352

ghsa-9fxm-vc8v-hj55 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95490

Name of the Vulnerable Software and Affected Versions Capsule versions 0.13.0 through 0.13.6 Description A parameter order bug in the hostnameRegexHandler.OnUpdate function within internal/webhook/tenant/validation/hostname regex.go causes the webhook to validate the old Tenant object instead of...

PT-2026-101016

Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101797

Security vulnerability affects the calico package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101339

ghsa-fphv-w9fq-2525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101642

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101982

Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101256

Security vulnerability affects the k8sgpt package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101889

ghsa-m5qp-6w8w-w647 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101095

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102431

Summary The URL checking logic in lmdeploy has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. Details The current lmdeploy project uses is safe url to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by...