Open Source Vulnerabilities

python3.11, rootio-python3.11

CVE-2025-12781 in python3.11 - Patched by Root

python3.11, rootio-python3.11

CVE-2025-15366 in python3.11 - Patched by Root

python3.11, rootio-python3.11

CVE-2026-6019 in python3.11 - Patched by Root

python3.11, rootio-python3.11

CVE-2026-7774 in python3.11 - Patched by Root

python3.11, rootio-python3.11

CVE-2026-8328 in python3.11 - Patched by Root

MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs

MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery

ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods

gzip

gzip vulnerabilities

MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users

crossplane-provider-azure-marketplaceordering

MISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Events

org.springframework.ldap:spring-ldap-core, org.springframework.ldap:spring-ldap-ldif-core, org.springframework.ldap:spring-ldap-odm, org.springframework.ldap:spring-ldap-odm-sample, org.springframework.ldap:spring-ldap-plain-sample, org.springframework.ldap:spring-ldap-sandbox, org.springframework.ldap:spring-ldap-test

TuxCare security update for org.springframework.ldap (1 CVE)

org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-instrument-tomcat, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webmvc, org.springframework:spring-webmvc-portlet, org.springframework:spring-websocket

TuxCare security update for org.springframework (4 CVEs)

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

strongswan

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

greentic-setup-dev

`greentic-setup-dev` 1.3.34027618345 was removed from crates.io due to containing malicious code

greentic-setup

`greentic-setup` 1.3.1-dev.34027618345 was removed from crates.io due to containing malicious code

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan, strongswan

org.springframework:framework-docs, org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-indexer, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-core-test, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-jcl, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-r2dbc, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket

TuxCare security update for org.springframework (1 CVE)

crossplane-provider-azure-marketplaceordering

XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import

pacote

TuxCare security update for pacote (1 CVE)

crossplane-provider-gcp-beta-compute-fips

crossplane-provider-gcp-beta-compute-fips

crossplane-provider-gcp-beta-compute-fips

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

rancher-agent-2.15

jetty12, jetty12, jetty9, jetty9, jetty9

jetty9, jetty9, jetty9, jetty9, jetty9, jetty12, jetty9

crossplane-provider-gcp-beta-compute-fips