Open Source Vulnerabilities

ws, @rootio/ws

CVE-2021-32640 in ws - Patched by Root

django

TuxCare security update for django (3 CVEs)

django

TuxCare security update for django (4 CVEs)

next, @rootio/next

CVE-2024-34350 in next - Patched by Root

next, @rootio/next

CVE-2024-39693 in next - Patched by Root

node-morgan, node-morgan, node-morgan

nginx, nginx-all-modules, nginx-core, nginx-core-debuginfo, nginx-debuginfo, nginx-debugsource, nginx-filesystem, nginx-mod-http-image-filter, nginx-mod-http-image-filter-debuginfo, nginx-mod-http-perl, nginx-mod-http-perl-debuginfo, nginx-mod-http-xslt-filter, nginx-mod-http-xslt-filter-debuginfo, nginx-mod-mail, nginx-mod-mail-debuginfo, nginx-mod-stream, nginx-mod-stream-debuginfo, nginx-core-debuginfo, nginx-debuginfo, nginx-debugsource, nginx-mod-devel, nginx-mod-http-image-filter-debuginfo, nginx-mod-http-perl-debuginfo, nginx-mod-http-xslt-filter-debuginfo, nginx-mod-mail-debuginfo, nginx-mod-stream-debuginfo

Red Hat Security Advisory: nginx security update

openssl, openssl-static

Red Hat Security Advisory: openssl security, bug fix, and enhancement update

tar

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

gstreamer1-plugins-base, gstreamer1-plugins-base-debuginfo, gstreamer1-plugins-base-debugsource, gstreamer1-plugins-base-devel, gstreamer1-plugins-base-tools, gstreamer1-plugins-base-tools-debuginfo

Red Hat Security Advisory: gstreamer1-plugins-base security update

grafana-pcp, grafana-pcp-debuginfo, grafana-pcp-debugsource

Red Hat Security Advisory: grafana-pcp security update

glib2, glib2-debuginfo, glib2-debugsource, glib2-devel, glib2-devel-debuginfo, glib2-fam, glib2-fam-debuginfo, glib2-tests, glib2-tests-debuginfo, glib2-debuginfo, glib2-debugsource, glib2-devel-debuginfo, glib2-doc, glib2-fam-debuginfo, glib2-static, glib2-tests-debuginfo

Red Hat Security Advisory: glib2 security update

osbuild-composer, osbuild-composer-core, osbuild-composer-core-debuginfo, osbuild-composer-debuginfo, osbuild-composer-debugsource, osbuild-composer-tests-debuginfo, osbuild-composer-worker, osbuild-composer-worker-debuginfo

Red Hat Security Advisory: osbuild-composer security update

trivy

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free-debuginfo, gstreamer1-plugins-bad-free-debugsource

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

openssh-askpass, openssh-askpass-debuginfo, openssh-debuginfo, openssh-debugsource, openssh-keycat-debuginfo, openssh-server-debuginfo, openssh-sk-dummy-debuginfo, pam_ssh_agent_auth, openssh, openssh-askpass-debuginfo, openssh-clients, openssh-debuginfo, openssh-debugsource, openssh-keycat, openssh-keycat-debuginfo, openssh-server, openssh-server-debuginfo, openssh-sk-dummy-debuginfo

Red Hat Security Advisory: openssh security update

gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free-debuginfo, gstreamer1-plugins-bad-free-debugsource, gstreamer1-plugins-bad-free, gstreamer1-plugins-bad-free-debuginfo, gstreamer1-plugins-bad-free-debugsource

Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

coreutils, coreutils-debuginfo, coreutils-debugsource, coreutils-single, coreutils-single-debuginfo

Red Hat Security Advisory: coreutils security update

rsyslog, rsyslog-crypto, rsyslog-crypto-debuginfo, rsyslog-debuginfo, rsyslog-debugsource, rsyslog-doc, rsyslog-elasticsearch, rsyslog-elasticsearch-debuginfo, rsyslog-gnutls, rsyslog-gnutls-debuginfo, rsyslog-gssapi, rsyslog-gssapi-debuginfo, rsyslog-kafka, rsyslog-kafka-debuginfo, rsyslog-mmaudit, rsyslog-mmaudit-debuginfo, rsyslog-mmfields, rsyslog-mmfields-debuginfo, rsyslog-mmjsonparse, rsyslog-mmjsonparse-debuginfo, rsyslog-mmkubernetes, rsyslog-mmkubernetes-debuginfo, rsyslog-mmnormalize, rsyslog-mmnormalize-debuginfo, rsyslog-mmsnmptrapd, rsyslog-mmsnmptrapd-debuginfo, rsyslog-mysql, rsyslog-mysql-debuginfo, rsyslog-omamqp1, rsyslog-omamqp1-debuginfo, rsyslog-openssl, rsyslog-openssl-debuginfo, rsyslog-pgsql, rsyslog-pgsql-debuginfo, rsyslog-relp, rsyslog-relp-debuginfo, rsyslog-snmp, rsyslog-snmp-debuginfo, rsyslog-udpspoof, rsyslog-udpspoof-debuginfo

Red Hat Security Advisory: rsyslog security update

ansible-collection-ansible-posix, ansible-collections-openstack, collectd-sensubility, collectd-sensubility-debuginfo, erlang, erlang-asn1, erlang-asn1-debuginfo, erlang-compiler, erlang-crypto, erlang-crypto-debuginfo, erlang-debuginfo, erlang-debugsource, erlang-eldap, erlang-erl_interface-debuginfo, erlang-erts, erlang-erts-debuginfo, erlang-inets, erlang-kernel, erlang-mnesia, erlang-odbc-debuginfo, erlang-os_mon, erlang-os_mon-debuginfo, erlang-parsetools, erlang-public_key, erlang-runtime_tools, erlang-runtime_tools-debuginfo, erlang-sasl, erlang-snmp, erlang-ssl, erlang-stdlib, erlang-syntax_tools, erlang-tools, erlang-tools-debuginfo, erlang-xmerl, etcd, etcd-debuginfo, etcd-debugsource, octavia-amphora-image-fips-x86_64, octavia-amphora-image-x86_64, openstack-cinder, openstack-dashboard, openstack-heat, openstack-heat-api, openstack-heat-api-cfn, openstack-heat-common, openstack-heat-engine, openstack-heat-monolith, openstack-ironic, openstack-ironic-api, openstack-ironic-common, openstack-ironic-conductor, openstack-ironic-python-agent, openstack-keystone, openstack-neutron, openstack-neutron-common, openstack-neutron-linuxbridge, openstack-neutron-macvtap-agent, openstack-neutron-metering-agent, openstack-neutron-ml2, openstack-neutron-openvswitch, openstack-neutron-ovn-metadata-agent, openstack-neutron-ovn-migration-tool, openstack-neutron-rpc-server, openstack-neutron-sriov-nic-agent, openstack-nova, openstack-nova-api, openstack-nova-common, openstack-nova-compute, openstack-nova-conductor, openstack-nova-migration, openstack-nova-novncproxy, openstack-nova-scheduler, openstack-nova-serialproxy, openstack-nova-spicehtml5proxy, openstack-selinux, openstack-swift, openstack-swift-account, openstack-swift-container, openstack-swift-object, openstack-swift-proxy, openstack-tripleo-heat-templates, os-net-config, puppet-rabbitmq, puppet-tripleo, python-cinder-tests-tempest, python-django-horizon, python-glance-store, python-os-brick, python-oslo-messaging, python-oslo-serialization, python-ovsdbapp, python3-cinder, python3-cinder-common, python3-cinder-tests-tempest, python3-django-horizon, python3-glance-store, python3-ironic-python-agent, python3-keystone, python3-neutron, python3-nova, python3-os-brick, python3-oslo-messaging, python3-oslo-serialization, python3-ovsdbapp, python3-swift, rhosp-director-images, rhosp-director-images-all, rhosp-director-images-base, rhosp-director-images-fips-x86_64, rhosp-director-images-ipa-fips-x86_64, rhosp-director-images-ipa-x86_64, rhosp-director-images-metadata, rhosp-director-images-minimal, rhosp-director-images-minimal-fips, rhosp-director-images-multirhel-x86_64, rhosp-director-images-uefi-fips-x86_64, rhosp-director-images-uefi-x86_64, rhosp-director-images-x86_64, tripleo-ansible

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security and bug fix advisory

ffmpeg, ffmpeg-debuginfo, ffmpeg-debugsource, ffmpeg-free-rhai, ffmpeg-free-rhai-debuginfo, ffmpeg-free-rhai-devel, libavcodec-free-rhai, libavcodec-free-rhai-debuginfo, libavcodec-free-rhai-devel, libavdevice-free-rhai, libavdevice-free-rhai-debuginfo, libavdevice-free-rhai-devel, libavfilter-free-rhai, libavfilter-free-rhai-debuginfo, libavfilter-free-rhai-devel, libavformat-free-rhai, libavformat-free-rhai-debuginfo, libavformat-free-rhai-devel, libavutil-free-rhai, libavutil-free-rhai-debuginfo, libavutil-free-rhai-devel, libpostproc-free-rhai, libpostproc-free-rhai-debuginfo, libpostproc-free-rhai-devel, libswresample-free-rhai, libswresample-free-rhai-debuginfo, libswresample-free-rhai-devel, libswscale-free-rhai, libswscale-free-rhai-debuginfo, libswscale-free-rhai-devel

Red Hat Security Advisory: RHEL AI 3.6 RPM runtime CVE fix - ffmpeg

apr-util, apr-util-debuginfo, apr-util-debugsource, apr-util-devel, apr-util-ldap, apr-util-ldap-debuginfo, apr-util-lmdb, apr-util-lmdb-debuginfo, apr-util-mysql, apr-util-mysql-debuginfo, apr-util-odbc, apr-util-odbc-debuginfo, apr-util-openssl, apr-util-openssl-debuginfo, apr-util-pgsql, apr-util-pgsql-debuginfo, apr-util-sqlite, apr-util-sqlite-debuginfo

Red Hat Security Advisory: apr-util security update

git-lfs, git-lfs-debuginfo, git-lfs-debugsource

Red Hat Security Advisory: git-lfs security update

vim-X11, vim-enhanced, vim, vim-common

Red Hat Security Advisory: vim security update

freerdp, freerdp-debuginfo, freerdp-debugsource, freerdp-libs, freerdp-libs-debuginfo, freerdp-server-debuginfo, libwinpr, libwinpr-debuginfo, freerdp-devel, freerdp-server, libwinpr-devel

Red Hat Security Advisory: freerdp security update

kernel-64k-debug-debuginfo, kernel-64k-debug-devel, kernel-64k-debug-devel-matched, kernel-64k-debuginfo, kernel-64k-devel, kernel-64k-devel-matched, kernel-debug-debuginfo, kernel-debug-devel, kernel-debug-devel-matched, kernel-debuginfo, kernel-debuginfo-common-aarch64, kernel-debuginfo-common-ppc64le, kernel-debuginfo-common-s390x, kernel-debuginfo-common-x86_64, kernel-devel, kernel-devel-matched, kernel-doc, kernel-rt-64k-debug-debuginfo, kernel-rt-64k-debuginfo, kernel-rt-debug-debuginfo, kernel-rt-debuginfo, kernel-tools-debuginfo, kernel-zfcpdump-debuginfo, kernel-zfcpdump-devel, kernel-zfcpdump-devel-matched, libperf-debuginfo, perf, perf-debuginfo, python3-perf, python3-perf-debuginfo, rtla, rv, kernel, kernel-64k, kernel-64k-core, kernel-64k-debug, kernel-64k-debug-core, kernel-64k-debug-modules, kernel-64k-debug-modules-core, kernel-64k-debug-modules-extra, kernel-64k-modules, kernel-64k-modules-core, kernel-64k-modules-extra, kernel-abi-stablelists, kernel-core, kernel-debug, kernel-debug-core, kernel-debug-modules, kernel-debug-modules-core, kernel-debug-modules-extra, kernel-debug-uki-virt, kernel-modules, kernel-modules-core, kernel-modules-extra, kernel-modules-extra-matched, kernel-tools, kernel-tools-libs, kernel-uki-virt, kernel-uki-virt-addons, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-modules, kernel-zfcpdump-modules-core, kernel-zfcpdump-modules-extra, kernel-tools-libs-devel, libperf, kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-core, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-core, kernel-rt-modules-extra, kernel-rt-64k, kernel-rt-64k-core, kernel-rt-64k-debug, kernel-rt-64k-debug-core, kernel-rt-64k-debug-devel, kernel-rt-64k-debug-modules, kernel-rt-64k-debug-modules-core, kernel-rt-64k-debug-modules-extra, kernel-rt-64k-devel, kernel-rt-64k-modules, kernel-rt-64k-modules-core, kernel-rt-64k-modules-extra

Red Hat Security Advisory: kernel security update

freerdp, freerdp-debuginfo, freerdp-debugsource, freerdp-libs, freerdp-libs-debuginfo, libwinpr, libwinpr-debuginfo, freerdp-debuginfo, freerdp-debugsource, freerdp-devel, freerdp-libs-debuginfo, libwinpr-debuginfo, libwinpr-devel

Red Hat Security Advisory: freerdp security update

vim-X11, vim-enhanced, vim, vim-common

Red Hat Security Advisory: vim security update

apr-util, apr-util-bdb, apr-util-bdb-debuginfo, apr-util-debuginfo, apr-util-debugsource, apr-util-devel, apr-util-ldap, apr-util-ldap-debuginfo, apr-util-mysql, apr-util-mysql-debuginfo, apr-util-odbc, apr-util-odbc-debuginfo, apr-util-openssl, apr-util-openssl-debuginfo, apr-util-pgsql, apr-util-pgsql-debuginfo, apr-util-sqlite, apr-util-sqlite-debuginfo

Red Hat Security Advisory: apr-util security update

polkit, polkit-docs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

httpd, httpd-core, mod_ldap, mod_proxy_html, mod_ssl

Red Hat Security Advisory: httpd security update

qs, @rootio/qs

CVE-2025-15284 in qs - Patched by Root

next, @rootio/next

CVE-2025-32421 in next - Patched by Root

datadog-agent-7.76-serverless-init

datadog-agent-fips-7.76-serverless-init

perl, rootio-perl

CVE-2026-13221 in perl - Patched by Root

perl, rootio-perl

CVE-2026-57432 in perl - Patched by Root

perl, rootio-perl

CVE-2026-8376 in perl - Patched by Root

org.postgresql:postgresql, io.root.org.postgresql:postgresql

CVE-2026-42198 in org.postgresql:postgresql - Patched by Root

org.postgresql:postgresql, io.root.org.postgresql:postgresql

CVE-2026-54291 in org.postgresql:postgresql - Patched by Root

datadog-agent-7.76-serverless-init

@remix-run/architect, @remix-run/cloudflare, @remix-run/cloudflare-pages, @remix-run/cloudflare-workers, @remix-run/css-bundle, @remix-run/deno, @remix-run/dev, @remix-run/eslint-config, @remix-run/express, @remix-run/fs-routes, @remix-run/node, @remix-run/react, @remix-run/route-config, @remix-run/routes-option-adapter, @remix-run/serve, @remix-run/server-runtime, @remix-run/testing, create-remix, remix

TuxCare security update for 19 packages (1 CVE)

fast-xml-parser, @rootio/fast-xml-parser

CVE-2026-33036 in fast-xml-parser - Patched by Root

python3.9, rootio-python3.9

CVE-2026-11940 in python3.9 - Patched by Root

python3.9, rootio-python3.9

CVE-2026-1502 in python3.9 - Patched by Root

python3.9, python3-defaults, rootio-python3.9, rootio-python3-defaults

CVE-2026-15308 in python3.9 - Patched by Root

python3.9, rootio-python3.9

CVE-2026-3446 in python3.9 - Patched by Root

python3.9, rootio-python3.9

CVE-2026-6019 in python3.9 - Patched by Root

python3.9, rootio-python3.9

CVE-2024-5642 in python3.9 - Patched by Root

python3.9, rootio-python3.9

CVE-2026-0864 in python3.9 - Patched by Root