Open Source Vulnerabilities

X.Org Server GestureBuildSprite Use-After-Free

cert-manager-controller-1.21

starship, starship

gitlab-container-registry-19.4

crossplane-provider-gcp-beta-cloudplatform

X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read

traefik-fips-3.7

org.springframework.data:spring-data-rest-core

TuxCare security update for org.springframework.data:spring-data-rest-core (5 CVEs)

perl-Cpanel-JSON-XS

Security update for perl-Cpanel-JSON-XS

parsejson

TuxCare security update for parsejson (1 CVE)

xwayland, xwayland, xwayland

xorg-server, xwayland

xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

xorg-server, xwayland

xorg-x11-server-Xwayland

CVE-2026-93522 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

wayland

CVE-2026-93521 affecting package wayland 1.22.0-1

xorg-x11-server

CVE-2026-93521 affecting package xorg-x11-server 1.20.10-6

xorg-x11-server-Xwayland

CVE-2026-93521 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

xorg-x11-server

CVE-2026-93522 affecting package xorg-x11-server 1.20.10-6

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland

xorg-server, xorg-server, xorg-server-hwe-16.04, xorg-server, xorg-server-hwe-18.04, xorg-server, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland, xorg-server, xwayland

X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write

supabase-studio-fips

step-ca, step-ca

step-ca, step-ca

Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs

gitlab-kas-19.4, gitlab-kas-19.4

neuvector-sigstore-interface-fips

fio

Updated fio package fixes a security vulnerability

starship, starship

k3s-1.37, k3s-1.37

k3s-static-1.37, k3s-static-1.37

spark-4.2-scala-2.13

spark-4.2-scala-2.13

spark-4.2-scala-2.13

spark-4.2-scala-2.13

spark-4.2-scala-2.13

spark-4.2-scala-2.13

spark-4.2-scala-2.13

spark-4.2-scala-2.13

gitness, gitness

react-dev-utils

TuxCare security update for react-dev-utils (2 CVEs)

node-fetch

TuxCare security update for node-fetch (2 CVEs)

kyverno-background-controller-fips-1.18

X.Org Server Glamor CopyArea Heap Buffer Overflow

reports-server

reports-server

@babel/core

TuxCare security update for @babel/core (1 CVE)

cert-manager-controller-1.21

datadog-agent-7.84