Open Source Vulnerabilities
craftcms/cms
TuxCare security update for craftcms/cms (1 CVE)
craftcms/cms
TuxCare security update for craftcms/cms (1 CVE)
debezium-connector-cassandra-3.7-cassandra-4
golang-github-gopasspw-gopass
python-markdown2, python-markdown2, python-markdown2
python-markdown2/ python-markdown2/ python-markdown2
cherrytree, cherrytree, cherrytree
cherrytree, cherrytree, cherrytree
python-oauthlib, python-oauthlib, python-oauthlib
python-oauthlib
CVE-2026-118669 affecting package python-oauthlib 3.2.2-4
python-oauthlib
CVE-2026-118669 affecting package python-oauthlib 3.2.2-4
gopass, gopass, gopass, gopass
freeimage, freeimage, freeimage, freeimage, freeimage, freeimage, freeimage, freeimage
freeimage/ freeimage/ freeimage/ freeimage/ freeimage/ freeimage/ freeimage/ freeimage
freeimage, freeimage, freeimage, freeimage, freeimage, freeimage, freeimage, freeimage
freeimage/ freeimage/ freeimage/ freeimage/ freeimage/ freeimage/ freeimage/ freeimage
python-markdown2, python-markdown2, python-markdown2, python-markdown2, python-markdown2
python-markdown2/ python-markdown2/ python-markdown2/ python-markdown2/ python-markdown2
cherrytree, cherrytree, cherrytree, cherrytree, cherrytree, cherrytree
cherrytree/ cherrytree/ cherrytree/ cherrytree/ cherrytree/ cherrytree
cherrytree, cherrytree, cherrytree, cherrytree, cherrytree, cherrytree
cherrytree/ cherrytree/ cherrytree/ cherrytree/ cherrytree/ cherrytree
python-oauthlib, python-oauthlib, python-oauthlib, python-oauthlib, python-oauthlib, python-oauthlib, python-oauthlib
python-oauthlib/ python-oauthlib/ python-oauthlib/ python-oauthlib/ python-oauthlib/ python-oauthlib/ python-oauthlib
maotoumao MusicFreeDesktop Request Forwarder server-side request forgery
maotoumao MusicFreeDesktop Request Forwarder server-side request forgery
kubevirt-cdi-controller-fips-1.6
grafana-pyroscope-2.0, grafana-pyroscope-2.0
grafana-pyroscope-2.0, grafana-pyroscope-2.0
datadog-cluster-agent-7.81, datadog-cluster-agent-7.81
a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes
a2ui-project a2ui Renderer root.js Root.renderComponentTree dynamically-determined object attributes
AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles
AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles
AVideo-Encoder: pre-authentication streamer-login SQL injection
AVideo-Encoder: pre-authentication streamer-login SQL injection
OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
AVideo-Encoder: missing authentication on control and status endpoints
AVideo-Encoder: missing authentication on control and status endpoints
AVideo-Encoder: unauthenticated full-response server-side request forgery
AVideo-Encoder: unauthenticated full-response server-side request forgery
AVideo-Encoder: reflected cross-site scripting in the login interface
AVideo-Encoder: reflected cross-site scripting in the login interface
a2ui Image Player/Video Player/Audio Player Image.js input validation
a2ui Image Player/Video Player/Audio Player Image.js input validation
knative-eventing-fips-1.24-filter
OpenCATS: Authenticated SQL injection in activity DataGrid date filters
OpenCATS: Authenticated SQL injection in activity DataGrid date filters
knative-eventing-1.24-channel-dispatcher
knative-eventing-1.24-channel-dispatcher
knative-eventing-1.24-channel-dispatcher
