Open Source Vulnerabilities

Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments

@opentelemetry/core

TuxCare security update for @opentelemetry/core (1 CVE)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

kserve-huggingfaceserver-cuda-13.3

kserve-huggingfaceserver-cuda-13.3

kserve-huggingfaceserver-cuda-13.3

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

hauler

Security update for hauler

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

litellm

litellm

litellm

org.springframework.cloud:spring-cloud-context

TuxCare security update for org.springframework.cloud:spring-cloud-context (1 CVE)

kaniko, kaniko

superset-fips-6.1

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

kyverno-cleanup-controller-1.17, kyverno-cleanup-controller-1.17

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

datadog-agent-fips-7.84

datadog-agent-fips-7.84

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

xorg-server, xwayland

xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

xorg-server, xwayland

xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

xorg-server, xwayland

xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

xorg-x11-server-Xwayland

CVE-2026-93518 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

xorg-x11-server-Xwayland

CVE-2026-93519 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

xorg-x11-server-Xwayland

CVE-2026-93520 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

wayland

CVE-2026-93518 affecting package wayland 1.22.0-1

wayland

CVE-2026-93520 affecting package wayland 1.22.0-1

wayland

CVE-2026-93519 affecting package wayland 1.22.0-1

xorg-x11-server

CVE-2026-93520 affecting package xorg-x11-server 1.20.10-6

xorg-x11-server

CVE-2026-93519 affecting package xorg-x11-server 1.20.10-6

xorg-x11-server

CVE-2026-93518 affecting package xorg-x11-server 1.20.10-6

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland

msgpack

laravel/framework

TuxCare security update for laravel/framework (1 CVE)

gitlab-kas-19.5, gitlab-kas-19.5

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

kyverno-fips-1.18

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (2 CVEs)

wasmcloud, wasmcloud

wasmcloud, wasmcloud