Open Source Vulnerabilities
sigstore-scaffolding-fips-tuf-createsecret
OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]
aiohttp
TuxCare security update for aiohttp (1 CVE)
python
tar filter allows writing outside destination via empty-named symlink
python
tar filter allows writing outside destination via empty-named symlink
python-min
tar filter allows writing outside destination via empty-named symlink
python-min
tar filter allows writing outside destination via empty-named symlink
@ai-sdk/openai
TuxCare security update for @ai-sdk/openai (1 CVE)
@ai-sdk/openai
TuxCare security update for @ai-sdk/openai (1 CVE)
python-tensorboard
CVE-2026-119025 affecting package python-tensorboard 2.16.2-6
python-tensorboard
CVE-2026-119025 affecting package python-tensorboard 2.16.2-6
node-open, node-open, node-open
mlflow
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
mlflow
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
libpython
tar filter allows writing outside destination via empty-named symlink
libpython
tar filter allows writing outside destination via empty-named symlink
gcc-toolset-15-gcc
Moderate: gcc-toolset-15-gcc security update
gcc-toolset-15-gcc
Moderate: gcc-toolset-15-gcc security update
brotli
Important: brotli security update
xdg-dbus-proxy
Important: xdg-dbus-proxy security update
emacs
Important: emacs security update
thunderbird
Important: thunderbird security, bug fix, and enhancement update
thunderbird
Important: thunderbird security, bug fix, and enhancement update
libXrender
Important: libXrender security update
yggdrasil
Important: yggdrasil security update
kernel
Important: kernel security, bug fix, and enhancement update
kernel
Important: kernel security, bug fix, and enhancement update
libXtst
Important: libXtst security update
python-urllib3
Important: python-urllib3 security update
org.springframework.boot:spring-boot-actuator, org.springframework.boot:spring-boot-devtools
TuxCare security update for org.springframework.boot (2 CVEs)
org.springframework.boot:spring-boot-actuator/ org.springframework.boot:spring-boot-devtools
TuxCare security update for org.springframework.boot (2 CVEs)
