Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    UBUNTU-CVE-2026-116269
    No fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116268
    No fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116267
    No fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116266
    No fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116265
    No fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116264
    No fix available
    Packages

    libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl, libmime-tools-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116135
    No fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116134
    No fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116133
    No fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116132
    No fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116131
    No fix available
    Packages

    libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl, libhttp-body-perl

    Summary

    Published
    28 Oct 2026
    UBUNTU-CVE-2026-116794
    No fix available
    Packages

    rust-russh

    Summary

    Published
    28 Oct 2026
    CGA-wpm4-v4fv-22x7
    Fix available
    Packages

    crossplane-fips-2.2-crank

    Summary

    Published
    28 Oct 2026
    CVE-2026-118254
    Fix available
    Packages

    Summary

    Highcharts Grid: pagination language options are parsed as HTML

    Published
    28 Oct 2026
    CGA-82wp-27fq-mhrm
    Fix available
    Packages

    crossplane-2.1

    Summary

    Published
    28 Oct 2026
    CVE-2026-118253
    Fix available
    Packages

    Summary

    Highcharts Dashboards: fullscreen labels are parsed as HTML

    Published
    28 Oct 2026
    ECHO-d72d-6214-ef8e
    Fix available
    Packages

    aspnet-runtime-6.0, aspnet-runtime-7.0

    Summary

    Published
    28 Oct 2026
    CVE-2026-118252
    Fix available
    Packages

    Summary

    Highcharts Dashboards: sidebar component labels are parsed as HTML

    Published
    28 Oct 2026
    CGA-3566-qm2m-j937
    Fix available
    Packages

    gitlab-container-registry-fips-19.5

    Summary

    Published
    28 Oct 2026
    CVE-2026-106484
    Fix available
    Packages

    Summary

    Published
    28 Oct 2026
    CVE-2026-118251
    Fix available
    Packages

    Summary

    Highcharts: javascript: URL in credits.href runs script on click

    Published
    28 Oct 2026
    CGA-w5px-265m-r38g
    Fix available
    Packages

    opensearch-k8s-operator-2

    Summary

    Published
    28 Oct 2026
    CGA-2c73-452h-q4h8
    Fix available
    Packages

    opensearch-k8s-operator-2

    Summary

    Published
    28 Oct 2026
    CVE-2026-118250
    Fix available
    Packages

    Summary

    Highcharts: dotted series.keys paths write to Object.prototype

    Published
    28 Oct 2026
    ECHO-480f-995c-98cf
    Fix available
    Packages

    expat

    Summary

    Published
    28 Oct 2026
    CVE-2026-118249
    Fix available
    Packages

    Summary

    Highcharts: series column construction writes to Object.prototype

    Published
    28 Oct 2026
    CVE-2026-118248
    Fix available
    Packages

    Summary

    Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototype

    Published
    28 Oct 2026
    CGA-4hjj-5vfr-cf7w
    No fix available
    Packages

    frankenphp-8.5

    Summary

    Published
    28 Oct 2026
    CGA-pf87-6vwx-p4mr
    Fix available
    Packages

    opensearch-k8s-operator-fips-3

    Summary

    Published
    28 Oct 2026
    CGA-m6v3-545q-9gqx
    Fix available
    Packages

    opensearch-k8s-operator-fips-3

    Summary

    Published
    28 Oct 2026
    CGA-4f6v-h358-9694
    Fix available
    Packages

    opensearch-k8s-operator-fips-3

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793209895
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

    Published
    28 Oct 2026
    CVE-2026-118247
    Fix available
    Packages

    Summary

    Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column.

    Published
    28 Oct 2026
    DRUPAL-CONTRIB-2026-292
    Fix available
    Packages

    drupal/media_alias_display

    Summary

    Published
    28 Oct 2026
    DRUPAL-CONTRIB-2026-291
    Fix available
    Packages

    drupal/cms_content_sync

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793209760
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

    Published
    28 Oct 2026
    CLSA-2026-1793209672
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

    Published
    28 Oct 2026
    CVE-2026-118246
    Fix available
    Packages

    Summary

    Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes

    Published
    28 Oct 2026
    CLSA-2026-1793209588
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

    Published
    28 Oct 2026
    CLSA-2026-1793209495
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

    Published
    28 Oct 2026
    CVE-2026-118245
    Fix available
    Packages

    Summary

    Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

    Published
    28 Oct 2026
    CLSA-2026-1793209463
    Fix available
    Packages

    @hono/node-server

    Summary

    TuxCare security update for @hono/node-server (1 CVE)

    Published
    28 Oct 2026
    CLSA-2026-1793209433
    Fix available
    Packages

    nodemailer

    Summary

    TuxCare security update for nodemailer (2 CVEs)

    Published
    28 Oct 2026
    CLSA-2026-1793209403
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

    Published
    28 Oct 2026
    CLSA-2026-1793209361
    Fix available
    Packages

    browserslist

    Summary

    TuxCare security update for browserslist (1 CVE)

    Published
    28 Oct 2026
    DRUPAL-CONTRIB-2026-290
    Fix available
    Packages

    drupal/oauth2_token_manager

    Summary

    Published
    28 Oct 2026
    DRUPAL-CONTRIB-2026-289
    Fix available
    Packages

    drupal/field_permissions

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793209315
    Fix available
    Packages

    tmp

    Summary

    TuxCare security update for tmp (2 CVEs)

    Published
    28 Oct 2026
    CLSA-2026-1793209314
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

    Published
    28 Oct 2026
    DRUPAL-CONTRIB-2026-288
    Fix available
    Packages

    drupal/field_permissions

    Summary

    Published
    28 Oct 2026