PT-2026-102426

TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.7.4-tuxcare.2...

PT-2026-101085

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100084

ghsa-8qvm-5x2c-j2w7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101582

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101958

ghsa-98wm-3w3q-mw94 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101205

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101648

ghsa-45x7-px36-x8w8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100805

Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102213

ghsa-72xf-g2v4-qvf3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100342

ghsa-r53h-jv2g-vpx6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100724

ghsa-m4cv-j2px-7723 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100253

ghsa-9m89-8frq-c98c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100843

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101479

ghsa-mgf9-4vpg-hj56 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101679

Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100502

Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100829

ghsa-394x-vwmw-crm3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101550

ghsa-g5ww-5jh7-63cx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100467

Security vulnerability affects the strimzi-kafka-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102159

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100665

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101567

ghsa-xxqh-mfjm-7mv9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100005

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101540

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95292

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description The search functionality contains a Server-Side Request Forgery SSRF flaw. This allows an attacker to compel the application server to transmit requests to internal...

PT-2026-101404

ghsa-qw64-3x98-g7q2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-99994

Security vulnerability affects the harbor-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101828

ghsa-cj8j-37rh-8475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101442

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101466

Security vulnerability affects the apache-nifi-registry package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100364

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100992

ghsa-v39h-62p7-jpjc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102038

Security vulnerability affects the azure-functions-node package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101522

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102111

Security vulnerability affects the orientdb package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101839

ghsa-xq3w-v528-46rv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102116

Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95684

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an SQL command allows a remote attacker to execute arbitrary SQL commands. This issue is a form of SQL injection, where an attacker can...

PT-2026-95478

Name of the Vulnerable Software and Affected Versions CareCam CM2507 affected versions not specified Description IP cameras accept an empty password for a privileged account exposed through the ONVIF management service. An attacker with network access to the device can access privileged managemen...

PT-2026-101234

Security vulnerability affects the activemq package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101178

ghsa-vx85-mj8c-4qm6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95699

Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description Password recovery validation tokens are derived from md5microtime within the users.passrecover.php file, resulting in a predictable token space of approximately one million values per second. Unauthenticated...

PT-2026-95589

Name of the Vulnerable Software and Affected Versions source-map-js versions 1.2.1 and earlier Description The software fails to validate the per-section offset line value in indexed source maps. An attacker can provide arbitrary and extremely large numeric values for these offsets, which leads t...

PT-2026-100205

ghsa-xx6v-rp6x-q39c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95559

Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description Mongoid does not restrict which query operators are accepted when an application passes caller-supplied filter data to its query-building methods. An unauthenticated party can influence how t...

PT-2026-95692

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of input during web page generation allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version...

PT-2026-95556

Name of the Vulnerable Software and Affected Versions versions prior to 0.9.0 Description The intra-handshake attested TLS aTLS Intel TDX verification path fails to copy the expected current-session freshness value into the TDX quote-body policy before quote validation. Consequently, structurally...

PT-2026-95343

Name of the Vulnerable Software and Affected Versions Popup Maker versions prior to 1.24.1 Description The plugin is subject to Stored Cross-Site Scripting XSS, a flaw where malicious scripts are permanently stored on the target server. Unauthenticated attackers can inject arbitrary web scripts...

PT-2026-95669

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A path traversal issue allows a remote authenticated attacker to access and traverse directories on the system. Path traversal is a flaw that allows an attacker to use special characters to...

PT-2026-95671

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...