Open Source Vulnerabilities

freerdp, freerdp2, freerdp, freerdp2, freerdp2, freerdp3, freerdp2, freerdp3, freerdp3

freerdp, freerdp2, freerdp, freerdp2, freerdp2, freerdp3, freerdp2, freerdp3, freerdp3

Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client

org.springframework.hateoas:spring-hateoas

TuxCare security update for org.springframework.hateoas:spring-hateoas (1 CVE)

java-21-openjdk, java-17-openjdk, java-latest-openjdk, timezone

Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities

CachingWebClient shares user-specific HTTP responses across users via the shared cache tier

libmspack, libmspack, libmspack, libmspack

libmspack vulnerability

nginx, rootio-nginx

CVE-2026-27651 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-15176 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-97629 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-1642 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-27654 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-32647 in nginx - Patched by Root

isla-sail, isla-sail

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

jenkins-2.568

kgraft-patch-SLE12-SP5_Update_87

Security update for the Linux Kernel (Live Patch 87 for SUSE Linux Enterprise 12 SP5)

haproxy, haproxy, haproxy, haproxy

haproxy vulnerabilities

io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis, io.netty:netty-codec-smtp, io.netty:netty-common, io.netty:netty-handler, io.netty:netty-resolver-dns

TuxCare security update for io.netty (13 CVEs)

Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook

Dockhand before 1.0.54 Path Traversal via Stack Environment Routes

svg-sanitizer before 1.1.0 XSS via animateTransform on Safari

svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes

svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping

svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph

svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag

Frappe HRMS before 15.61.0 Permission Bypass via Expense Claim Advances API

Wasmtime before 36.0.19, 37.0.0 before 48.0.7, and 49.0.0 before 49.0.4 wasi-http Request Smuggling

Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter Bypass

Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 HTTP Response Splitting via wasi-http

Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing

Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters

Froxlor 2.3.8 before 2.3.15 API Key Disclosure via api_keys.php

Froxlor before 2.3.15 Authorization Bypass via Mysqls.add API

Froxlor 2.3.0 before 2.3.15 Authorization Bypass via Certificates.update API

AzuraCast before 0.24.0 Stored CSV Formula Injection via Bulk Media Export

AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist