Open Source Vulnerabilities

commercial-gitlab-rails-ee-19.2

rancher-agent-2.11

k9s-fips

k9s-fips

packer

gitlab-rails-ce-19.0

newrelic-infrastructure-agent, newrelic-infrastructure-agent

newrelic-infrastructure-agent, newrelic-infrastructure-agent

newrelic-infrastructure-agent, newrelic-infrastructure-agent

newrelic-infrastructure-agent, newrelic-infrastructure-agent

redpanda-operator-26.2

glibc

glibc vulnerabilities

Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token

zot, zot

steampipe, steampipe

gitaly-backup-fips-19.2

gitaly-backup-fips-19.2

gitaly-backup-fips-19.2

langfuse-3-worker, langfuse-3-worker

langfuse-3-worker, langfuse-3-worker

commercial-gitlab-rails-ee-fips-19.3

steampipe, steampipe

commercial-gitlab-rails-ee-19.3

ESP32-audioI2S 3.4.4 through 4.0.0 Heap-based Out-of-Bounds Read via Shadowed Length Parameter in read_ID3_Header

gitlab-rails-ce-18.11

nodemailer

TuxCare security update for nodemailer (3 CVEs)

pyrra

pyrra

pyrra

pyrra

chromium, chromium

chromium, chromium

pyrra

pyrra

org.yaml:snakeyaml, io.root.org.yaml:snakeyaml

CVE-2022-1471 in org.yaml:snakeyaml - Patched by Root

org.yaml:snakeyaml, io.root.org.yaml:snakeyaml

CVE-2022-25857 in org.yaml:snakeyaml - Patched by Root

pyrra

pyrra

kubescape-server-downloader

gitlab-rails-ce-18.11

commercial-gitlab-rails-ee-19.3

nginx, rootio-nginx

CVE-2026-60005 in nginx - Patched by Root

varnish, nginx, rootio-varnish, rootio-nginx

CVE-2023-44487 in varnish - Patched by Root

nginx, rootio-nginx

CVE-2026-42533 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-56434 in nginx - Patched by Root

tiff, rootio-tiff

CVE-2025-61144 in tiff - Patched by Root

tiff, rootio-tiff

CVE-2025-8176 in tiff - Patched by Root

tiff, rootio-tiff

CVE-2025-8177 in tiff - Patched by Root

tiff, rootio-tiff

CVE-2026-4775 in tiff - Patched by Root

libxml2, rootio-libxml2

CVE-2025-12863 in libxml2 - Patched by Root