Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-2phg-xv57-grg6
    Fix available
    Packages

    containerd-2.3, containerd-2.3

    Summary

    Published
    28 Oct 2026
    CVE-2026-44179
    Fix available
    Packages

    Summary

    XWiki Pro Macros: excerpt-include title and content injection executes code

    Published
    28 Oct 2026
    CGA-w755-2hm3-934w
    Fix available
    Packages

    starboard-exporter-fips

    Summary

    Published
    28 Oct 2026
    CVE-2026-50542
    Fix available
    Packages

    Summary

    Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure

    Published
    28 Oct 2026
    CVE-2026-118029
    Fix available
    Packages

    Summary

    Unverified ownership of the default Athena query result location in AWS SDK for pandas

    Published
    28 Oct 2026
    CVE-2026-50543
    Fix available
    Packages

    Summary

    Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices

    Published
    28 Oct 2026
    CGA-46m7-9gwh-g55c
    Fix available
    Packages

    elasticsearch-8.19

    Summary

    Published
    28 Oct 2026
    CGA-wjv8-gwrp-8qrr
    Fix available
    Packages

    elasticsearch-8.19

    Summary

    Published
    28 Oct 2026
    CGA-j8r8-vvmx-fv6f
    Fix available
    Packages

    elasticsearch-8.19

    Summary

    Published
    28 Oct 2026
    CGA-xv5c-c4p4-527p
    Fix available
    Packages

    elasticsearch-8.19

    Summary

    Published
    28 Oct 2026
    CGA-88rr-c536-36qr
    Fix available
    Packages

    elasticsearch-8.19

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793201527
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

    Published
    28 Oct 2026
    CGA-ffpr-qm8j-g6qm
    Fix available
    Packages

    grafana-pyroscope-2.1

    Summary

    Published
    28 Oct 2026
    CGA-57r5-frgf-3pfq
    Fix available
    Packages

    grafana-pyroscope-2.1

    Summary

    Published
    28 Oct 2026
    CVE-2026-50539
    Fix available
    Packages

    Summary

    Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments

    Published
    28 Oct 2026
    CLSA-2026-1793201463
    Fix available
    Packages

    @opentelemetry/core

    Summary

    TuxCare security update for @opentelemetry/core (1 CVE)

    Published
    28 Oct 2026
    CLSA-2026-1793201459
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

    Published
    28 Oct 2026
    CGA-m4hh-226c-f4fc
    No fix available
    Packages

    kserve-huggingfaceserver-cuda-13.3

    Summary

    Published
    28 Oct 2026
    CGA-p2cm-4mfc-v62h
    No fix available
    Packages

    kserve-huggingfaceserver-cuda-13.3

    Summary

    Published
    28 Oct 2026
    CGA-q5hw-v284-c4h3
    Fix available
    Packages

    kserve-huggingfaceserver-cuda-13.3

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793201332
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

    Published
    28 Oct 2026
    CLSA-2026-1793201235
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

    Published
    28 Oct 2026
    openSUSE-SU-2026:22201-1
    Fix available
    Packages

    hauler

    Summary

    Security update for hauler

    Published
    28 Oct 2026
    CLSA-2026-1793201131
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

    Published
    28 Oct 2026
    CGA-7f23-vrr4-hjjh
    Fix available
    Packages

    litellm

    Summary

    Published
    28 Oct 2026
    CGA-r236-gv2v-398p
    Fix available
    Packages

    litellm

    Summary

    Published
    28 Oct 2026
    CGA-x5qm-82j9-xxpp
    Fix available
    Packages

    litellm

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793201104
    Fix available
    Packages

    org.springframework.cloud:spring-cloud-context

    Summary

    TuxCare security update for org.springframework.cloud:spring-cloud-context (1 CVE)

    Published
    28 Oct 2026
    CGA-4v94-4mpm-fcwv
    Fix available
    Packages

    kaniko, kaniko

    Summary

    Published
    28 Oct 2026
    CGA-mwc2-4m8j-f8pc
    Fix available
    Packages

    superset-fips-6.1

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793201047
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

    Published
    28 Oct 2026
    CLSA-2026-1793200950
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

    Published
    28 Oct 2026
    CGA-687g-8gmj-qrxx
    Fix available
    Packages

    kyverno-cleanup-controller-1.17, kyverno-cleanup-controller-1.17

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793200844
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

    Published
    28 Oct 2026
    CLSA-2026-1793200760
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)

    Published
    28 Oct 2026
    CGA-cc58-fgp5-gj5w
    No fix available
    Packages

    datadog-agent-fips-7.84

    Summary

    Published
    28 Oct 2026
    CGA-pxcq-6g2h-vvmf
    No fix available
    Packages

    datadog-agent-fips-7.84

    Summary

    Published
    28 Oct 2026
    CLSA-2026-1793200647
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

    Published
    28 Oct 2026
    ALPINE-CVE-2026-93520
    Fix available
    Packages

    xorg-server, xwayland

    Summary

    Published
    28 Oct 2026
    ECHO-200f-d15d-9fa0
    Fix available
    Packages

    xorg-server

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-93520
    Fix available
    Packages

    xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

    Summary

    Published
    28 Oct 2026
    ALPINE-CVE-2026-93519
    Fix available
    Packages

    xorg-server, xwayland

    Summary

    Published
    28 Oct 2026
    ECHO-5033-20c4-35d8
    Fix available
    Packages

    xorg-server

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-93519
    Fix available
    Packages

    xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

    Summary

    Published
    28 Oct 2026
    ALPINE-CVE-2026-93518
    Fix available
    Packages

    xorg-server, xwayland

    Summary

    Published
    28 Oct 2026
    ECHO-893f-d8e0-f442
    Fix available
    Packages

    xorg-server

    Summary

    Published
    28 Oct 2026
    DEBIAN-CVE-2026-93518
    Fix available
    Packages

    xorg-server, xorg-server, xorg-server, xwayland, xwayland, xwayland

    Summary

    Published
    28 Oct 2026
    AZL-112276
    Fix available
    Packages

    xorg-x11-server-Xwayland

    Summary

    CVE-2026-93518 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

    Published
    28 Oct 2026
    AZL-112285
    Fix available
    Packages

    xorg-x11-server-Xwayland

    Summary

    CVE-2026-93519 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

    Published
    28 Oct 2026
    AZL-112306
    Fix available
    Packages

    xorg-x11-server-Xwayland

    Summary

    CVE-2026-93520 affecting package xorg-x11-server-Xwayland for versions less than 24.1.14-1

    Published
    28 Oct 2026