Open Source Vulnerabilities

tmp

TuxCare security update for tmp (2 CVEs)

rollup

TuxCare security update for rollup (2 CVEs)

org.springframework.cloud:spring-cloud-function-adapter-aws, org.springframework.cloud:spring-cloud-function-adapter-azure, org.springframework.cloud:spring-cloud-function-context, org.springframework.cloud:spring-cloud-function-web

TuxCare security update for org.springframework.cloud (5 CVEs)

containerd-2.3, containerd-2.3

piscina

TuxCare security update for piscina (2 CVEs)

apicurio-registry, apicurio-registry

apicurio-registry, apicurio-registry

Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet

Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode

drupal/commerce_stripe

org.springframework.cloud:spring-cloud-config-server

TuxCare security update for org.springframework.cloud:spring-cloud-config-server (3 CVEs)

drupal/commerce_stripe

drupal/commerce_stripe

drupal/commerce_shipping

drupal/commerce_shipping

drupal/commerce_license

drupal/commerce

knative-kafka-broker-1.23-receiver-loom

drupal/commerce

drupal/commerce

drupal/commerce

drupal/commerce

drupal/commerce

NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol

kyverno-fips-1.18

frankenphp-8.2

opensearch-k8s-operator-2

opensearch-k8s-operator-2

grafana-pyroscope-fips-2.4

grafana-pyroscope-fips-2.4

crossplane-provider-gcp-filestore

openstack-keystone-2026.1-fips

telegraf-1.39

cert-manager-1.21

telegraf-1.38, telegraf-1.38

automq

automq

automq

postgres-meta-fips

postgres-meta-fips

postgres-meta-fips

postgres-meta-fips

postgres-meta-fips

postgres-meta-fips

postgres-meta-fips

postgres-meta-fips

postgres-meta-fips

gosec

Security update for gosec

pbkdf2

TuxCare security update for pbkdf2 (1 CVE)

Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.