Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    UBUNTU-CVE-2026-93524
    No fix available
    Packages

    xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-93523
    No fix available
    Packages

    xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-88967
    No fix available
    Packages

    grafana

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-88858
    No fix available
    Packages

    grafana

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-83525
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-115644
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    DRUPAL-CONTRIB-2026-276
    No fix available
    Packages

    drupal/cacheflush

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/single_content_sync

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/single_content_sync

    Summary

    Published
    28 Oct 2026
    CVE-2026-117501
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies

    Published
    28 Oct 2026
    Packages

    grafana

    Summary

    Published
    28 Oct 2026
    CVE-2026-117500
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-114349
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-112375
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-111551
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-111496
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-111073
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-110985
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-110952
    No fix available
    Packages

    kafka

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-103506
    No fix available
    Packages

    grafana

    Summary

    Published
    28 Oct 2026
    CVE-2026-116531
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk

    Published
    28 Oct 2026
    CVE-2026-116285
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies

    Published
    28 Oct 2026
    Packages

    @modelcontextprotocol/client

    Summary

    TuxCare security update for @modelcontextprotocol/client (1 CVE)

    Published
    28 Oct 2026
    CVE-2026-116135
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them

    Published
    28 Oct 2026
    CVE-2026-116134
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block

    Published
    28 Oct 2026
    CVE-2026-116133
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary

    Published
    28 Oct 2026
    CVE-2026-116132
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk

    Published
    28 Oct 2026
    CVE-2026-116131
    Fix available
    Packages

    Summary

    HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts

    Published
    28 Oct 2026
    CVE-2026-116795
    Fix available
    Packages

    Summary

    RE2JS: Quadratic-time denial of service in re2js lookbehind matching

    Published
    28 Oct 2026
    CGA-g9pp-hxwf-vxc3
    No fix available
    Packages

    frankenphp-8.3

    Summary

    Published
    28 Oct 2026
    CGA-fvhh-r2mc-jp2g
    No fix available
    Packages

    knative-kafka-broker-fips-1.20-controller

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/ai

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/ai

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/ai

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/ai

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/ai

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/ai

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/ai

    Summary

    Published
    28 Oct 2026
    Packages

    drupal/ai

    Summary

    Published
    28 Oct 2026
    CVE-2026-116794
    Fix available
    Packages

    Summary

    russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation

    Published
    28 Oct 2026
    Packages

    @hono/node-server

    Summary

    TuxCare security update for @hono/node-server (1 CVE)

    Published
    28 Oct 2026
    Packages

    serialize-javascript

    Summary

    TuxCare security update for serialize-javascript (1 CVE)

    Published
    28 Oct 2026
    Packages

    nodemailer

    Summary

    TuxCare security update for nodemailer (2 CVEs)

    Published
    28 Oct 2026
    Packages

    ip-address

    Summary

    TuxCare security update for ip-address (1 CVE)

    Published
    28 Oct 2026
    Packages

    @hono/node-server

    Summary

    TuxCare security update for @hono/node-server (1 CVE)

    Published
    28 Oct 2026
    Packages

    tmp

    Summary

    TuxCare security update for tmp (1 CVE)

    Published
    28 Oct 2026
    CGA-mvg5-74gh-vw93
    Fix available
    Packages

    opensearch-k8s-operator-3

    Summary

    Published
    28 Oct 2026
    CGA-mh2j-h5fg-jv4m
    Fix available
    Packages

    opensearch-k8s-operator-3

    Summary

    Published
    28 Oct 2026
    CGA-75rc-q7r5-jppr
    Fix available
    Packages

    opensearch-k8s-operator-3

    Summary

    Published
    28 Oct 2026
    Packages

    browserslist

    Summary

    TuxCare security update for browserslist (1 CVE)

    Published
    28 Oct 2026