PT-2026-100222

ghsa-jqc5-w2xx-5vq4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100160

Security vulnerability affects the calico package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100442

ghsa-c6gw-w398-hv78 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95493

Name of the Vulnerable Software and Affected Versions NanoMQ versions prior to 0.24.14 Description The broker-side MQTT v5 nmq subinfo decode function in nng/src/sp/protocol/mqtt/mqtt parser.c reuses len of varint from the outer Properties Length when parsing each SUBSCRIPTION IDENTIFIER. A remot...

PT-2026-101623

ghsa-x746-7m8f-x49c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100270

ghsa-gcjf-9mgh-3p7g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95713

Name of the Vulnerable Software and Affected Versions Vinyl Cache versions prior to 9.0.2 Description A workspace buffer overflow exists in the .upper and .lower string type methods of the VCL Varnish Configuration Language. This issue can be leveraged as a remote denial of service DoS vector,...

PT-2026-100002

ghsa-r4pg-vg54-wxx4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95701

Name of the Vulnerable Software and Affected Versions Cotonti versions prior to 1.0.1 Description The ratings plugin AJAX handler fails to validate anti-CSRF tokens, which are unique tokens used to prevent Cross-Site Request Forgery CSRF—an attack that forces an authenticated user to execute...

PT-2026-95685

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Insufficient argument validation in the SUID-root nmap wrapper binary on the Collector appliance allows a local attacker with low-privileged access to execute arbitrary commands as root. Th...

PT-2026-95721

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.5 Description Stored cross-site scripting occurs because the software fails to escape heading style attributes when rendering HTML for the outline and bookmark dock. Attackers can inject malicious style values by...

PT-2026-101245

Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100014

ghsa-hp87-p4gw-j4gq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101453

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101637

ghsa-hgj6-7826-r7m5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95649

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The inherit template properties function manually surrounds primary-key column names from pg attribute.attname with double quotes without escaping embedded double-quote characters. A user with...

PT-2026-101165

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101494

Security vulnerability affects the prometheus-blackbox-exporter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95451

Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to 3.0.20.0 OpenImageIO versions prior to 3.1.15.0 OpenImageIO versions prior to 3.2.0.3-beta1 Description A crafted FITS stream containing consecutive 2880-byte header blocks without the mandatory END keyword causes...

PT-2026-100219

ghsa-j26w-f9rq-mr2q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100287

ghsa-9jj7-4m8r-rfcm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102156

Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100470

ghsa-65xw-vw82-r86x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100539

ghsa-xmrv-pmrh-hhx2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-102163

ghsa-497x-rrr9-68jp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101284

Security vulnerability affects the rancher-agent package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101361

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101674

Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101882

ghsa-v2v4-37r5-5v8g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95633

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An issue exists where a remote authenticated attacker can execute arbitrary commands. This occurs due to improper neutralization of special elements used in an OS command, which allows the...

PT-2026-101759

ghsa-p93r-85wp-75v3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101123

Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100720

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100207

ghsa-jg4p-7fhp-p32p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100596

ghsa-xmv7-r254-6q78 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101236

ghsa-6ghj-frrj-jjj3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95421

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists where the HTTP-object conversion path incorrectly processes specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests as regular HTTP/1.1 CONNECT requests. This misinterpretati...

PT-2026-101201

Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100177

ghsa-xpw8-rcwv-8f8p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-101403

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102072

ghsa-37qj-frw5-hhjh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-100531

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101763

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100211

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95580

Name of the Vulnerable Software and Affected Versions SysReptor Professional versions prior to 2026.61 Description Authenticated users can upload image files that trigger Ghostscript during processing, allowing embedded PostScript to operate within the shared temporary directory. By combining thi...

PT-2026-102062

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101398

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101656

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101832

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100782

Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...