Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    PYSEC-2026-3876
    Fix available
    Packages

    onnx

    Summary

    ONNX: TOCTOU arbitrary file read/write in save_external_dat

    Published
    10 Sept 2026
    PYSEC-2026-3854
    Fix available
    Packages

    justhtml

    Summary

    Uncontrolled recursion DoS in JustHTML() via deeply nested HTML

    Published
    10 Sept 2026
    Packages

    cryptography

    Summary

    CVE-2026-39892 in cryptography - Patched by Root

    Published
    10 Sept 2026
    CGA-v7v9-p6cq-h8xj
    Fix available
    Packages

    kgateway-fips-2.3

    Summary

    Published
    10 Sept 2026
    CGA-5c74-mxrc-53qp
    No fix available
    Packages

    zot, zot

    Summary

    Published
    10 Sept 2026
    CGA-x265-883m-g358
    Fix available
    Packages

    teleport-17

    Summary

    Published
    10 Sept 2026
    CGA-grg9-p223-jrcc
    Fix available
    Packages

    kubescape-server

    Summary

    Published
    10 Sept 2026
    Packages

    python-jwcrypto

    Summary

    Security update for python-jwcrypto

    Published
    10 Sept 2026
    CGA-5c53-9wpg-gm6h
    Fix available
    Packages

    kubescape-server-fips

    Summary

    Published
    10 Sept 2026
    CGA-4m2v-8wqq-j2h3
    No fix available
    Packages

    rancher-agent-2.10

    Summary

    Published
    10 Sept 2026
    CGA-p8c6-9jxq-grh3
    Fix available
    Packages

    kubescape-operator-fips

    Summary

    Published
    10 Sept 2026
    CGA-q8mc-pw8w-g49x
    Fix available
    Packages

    trivy-operator, trivy-operator

    Summary

    Published
    10 Sept 2026
    CGA-5whf-mhf3-mp42
    Fix available
    Packages

    kgateway-2.4

    Summary

    Published
    10 Sept 2026
    CGA-xm4j-qjmw-p626
    Fix available
    Packages

    consul-k8s-1.1-cli

    Summary

    Published
    10 Sept 2026
    Packages

    vite

    Summary

    TuxCare security update for vite (2 CVEs)

    Published
    10 Sept 2026
    Packages

    @unhead/dom, @unhead/schema, @unhead/shared, @unhead/ssr, @unhead/vue, unhead

    Summary

    TuxCare security update for 6 packages (1 CVE)

    Published
    10 Sept 2026
    CGA-26xp-4g73-j5f6
    Fix available
    Packages

    kubescape-server-downloader

    Summary

    Published
    10 Sept 2026
    Packages

    vite

    Summary

    TuxCare security update for vite (16 CVEs)

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88265
    No fix available
    Packages

    crun, crun, crun

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88264
    No fix available
    Packages

    crun, crun, crun

    Summary

    Published
    10 Sept 2026
    Packages

    libxfont, libxfont, libxfont

    Summary

    Published
    10 Sept 2026
    Packages

    libxfont, libxfont, libxfont

    Summary

    Published
    10 Sept 2026
    CVE-2026-13745
    Fix available
    Packages

    Summary

    Published
    10 Sept 2026
    CGA-4vpg-46cm-3m6j
    No fix available
    Packages

    cloudbeat-9.3

    Summary

    Published
    10 Sept 2026
    CGA-772c-qr58-qhqm
    Fix available
    Packages

    harvester

    Summary

    Published
    10 Sept 2026
    Packages

    @astrojs/db, @astrojs/internal-helpers, @astrojs/prism, @astrojs/rss, @astrojs/telemetry, @astrojs/underscore-redirects, @astrojs/upgrade, astro, create-astro

    Summary

    TuxCare security update for 9 packages (1 CVE)

    Published
    10 Sept 2026
    CGA-5r8r-8f79-59m9
    Fix available
    Packages

    crossplane-cli-2.4

    Summary

    Published
    10 Sept 2026
    CGA-6fj5-xjfg-pcqv
    Fix available
    Packages

    redpanda-operator-25.1

    Summary

    Published
    10 Sept 2026
    Packages

    xmldom

    Summary

    TuxCare security update for xmldom (2 CVEs)

    Published
    10 Sept 2026
    USN-8742-1
    Fix available
    Packages

    netty

    Summary

    netty vulnerability

    Published
    10 Sept 2026
    CGA-r9fx-535x-gwc2
    Fix available
    Packages

    kubescape-server

    Summary

    Published
    10 Sept 2026
    CGA-8j8h-qp7x-qx6v
    Fix available
    Packages

    redpanda-operator-25.1

    Summary

    Published
    10 Sept 2026
    Packages

    mongodb

    Summary

    Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal

    Published
    10 Sept 2026
    CGA-5jhr-gjxr-hwhv
    Fix available
    Packages

    cluster-api-helm-controller-fips

    Summary

    Published
    10 Sept 2026
    Packages

    tiff, rootio-tiff

    Summary

    CVE-2026-4775 in tiff - Patched by Root

    Published
    10 Sept 2026
    CGA-hm2g-j53h-c38q
    No fix available
    Packages

    datadog-agent-fips-7.82

    Summary

    Published
    10 Sept 2026
    CGA-jr6p-95gr-qh67
    No fix available
    Packages

    datadog-agent-fips-7.82

    Summary

    Published
    10 Sept 2026
    CGA-9xq5-xv2f-fxm8
    No fix available
    Packages

    datadog-agent-fips-7.82

    Summary

    Published
    10 Sept 2026
    USN-8741-1
    Fix available
    Packages

    flatpak, flatpak, flatpak, flatpak

    Summary

    flatpak vulnerabilities

    Published
    10 Sept 2026
    CGA-44c8-v87m-3gqg
    No fix available
    Packages

    pyrra-fips

    Summary

    Published
    10 Sept 2026
    CGA-j53j-3wmr-h5mp
    No fix available
    Packages

    pyrra-fips

    Summary

    Published
    10 Sept 2026
    CGA-8pc7-qp6q-hgcm
    No fix available
    Packages

    pyrra-fips

    Summary

    Published
    10 Sept 2026
    CGA-xg8c-fp2v-686r
    No fix available
    Packages

    pyrra-fips

    Summary

    Published
    10 Sept 2026
    Packages

    react-router, react-router-dom, react-router-native

    Summary

    TuxCare security update for 3 packages (2 CVEs)

    Published
    10 Sept 2026
    CGA-rcwh-8pw4-689j
    No fix available
    Packages

    rancher-agent-2.10

    Summary

    Published
    10 Sept 2026
    ECHO-0636-b260-0d3d
    No fix available
    Packages

    cups

    Summary

    Published
    10 Sept 2026
    ECHO-95b0-8ee7-7f63
    No fix available
    Packages

    cups

    Summary

    Published
    10 Sept 2026
    CGA-7x7f-rgxg-7h5q
    Fix available
    Packages

    crossplane-cli-2.3

    Summary

    Published
    10 Sept 2026
    CGA-m667-g7f4-6qf5
    Fix available
    Packages

    cluster-api-helm-controller-fips

    Summary

    Published
    10 Sept 2026
    MINI-8pjp-8qcp-xmw7
    No fix available
    Packages

    terraform-1.14

    Summary

    Published
    10 Sept 2026