Open Source Vulnerabilities
gitlab-container-registry-fips-19.2
wnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elements used in a Command ('Command Injection')
wnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elements used in a Command ('Command Injection')
Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`
Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`
nebula-mesh: Certificate revocation is never enforced at the mesh
nebula-mesh: Certificate revocation is never enforced at the mesh
nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens
nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens
firefox-docker-selenium-compat, firefox-docker-selenium-compat
firefox-docker-selenium-compat/ firefox-docker-selenium-compat
firefox-docker-selenium-compat, firefox-docker-selenium-compat
firefox-docker-selenium-compat/ firefox-docker-selenium-compat
firefox-docker-selenium-compat, firefox-docker-selenium-compat
firefox-docker-selenium-compat/ firefox-docker-selenium-compat
firefox-docker-selenium-compat, firefox-docker-selenium-compat
firefox-docker-selenium-compat/ firefox-docker-selenium-compat
firefox-docker-selenium-compat, firefox-docker-selenium-compat
firefox-docker-selenium-compat/ firefox-docker-selenium-compat
firefox-docker-selenium-compat, firefox-docker-selenium-compat
firefox-docker-selenium-compat/ firefox-docker-selenium-compat
firefox-docker-selenium-compat, firefox-docker-selenium-compat
firefox-docker-selenium-compat/ firefox-docker-selenium-compat
nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting
nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
nebula-mesh: Operator session tokens stored in plaintext in the database
nebula-mesh: Operator session tokens stored in plaintext in the database
nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate
nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-jasper, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.experimental:tomcat-embed-programmatic, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-annotations-api, org.apache.tomcat:tomcat-api, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina-ant, org.apache.tomcat:tomcat-catalina-ha, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-coyote-ffm, org.apache.tomcat:tomcat-dbcp, org.apache.tomcat:tomcat-el-api, org.apache.tomcat:tomcat-i18n-cs, org.apache.tomcat:tomcat-i18n-de, org.apache.tomcat:tomcat-i18n-es, org.apache.tomcat:tomcat-i18n-fr, org.apache.tomcat:tomcat-i18n-ja, org.apache.tomcat:tomcat-i18n-ko, org.apache.tomcat:tomcat-i18n-pt-BR, org.apache.tomcat:tomcat-i18n-ru, org.apache.tomcat:tomcat-i18n-zh-CN, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper-el, org.apache.tomcat:tomcat-jaspic-api, org.apache.tomcat:tomcat-jdbc, org.apache.tomcat:tomcat-jni, org.apache.tomcat:tomcat-jsp-api, org.apache.tomcat:tomcat-juli, org.apache.tomcat:tomcat-servlet-api, org.apache.tomcat:tomcat-ssi, org.apache.tomcat:tomcat-storeconfig, org.apache.tomcat:tomcat-tribes, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util-scan, org.apache.tomcat:tomcat-websocket, org.apache.tomcat:tomcat-websocket-api, org.apache.tomcat:tomcat-websocket-client-api
TuxCare security update for 40 packages (4 CVEs)
org.apache.tomcat.embed:tomcat-embed-core/ org.apache.tomcat.embed:tomcat-embed-el/ org.apache.tomcat.embed:tomcat-embed-jasper/ org.apache.tomcat.embed:tomcat-embed-websocket/ org.apache.tomcat.experimental:tomcat-embed-programmatic/ org.apache.tomcat:tomcat/ org.apache.tomcat:tomcat-annotations-api/ org.apache.tomcat:tomcat-api/ org.apache.tomcat:tomcat-catalina/ org.apache.tomcat:tomcat-catalina-ant/ org.apache.tomcat:tomcat-catalina-ha/ org.apache.tomcat:tomcat-coyote/ org.apache.tomcat:tomcat-coyote-ffm/ org.apache.tomcat:tomcat-dbcp/ org.apache.tomcat:tomcat-el-api/ org.apache.tomcat:tomcat-i18n-cs/ org.apache.tomcat:tomcat-i18n-de/ org.apache.tomcat:tomcat-i18n-es/ org.apache.tomcat:tomcat-i18n-fr/ org.apache.tomcat:tomcat-i18n-ja/ org.apache.tomcat:tomcat-i18n-ko/ org.apache.tomcat:tomcat-i18n-pt-BR/ org.apache.tomcat:tomcat-i18n-ru/ org.apache.tomcat:tomcat-i18n-zh-CN/ org.apache.tomcat:tomcat-jasper/ org.apache.tomcat:tomcat-jasper-el/ org.apache.tomcat:tomcat-jaspic-api/ org.apache.tomcat:tomcat-jdbc/ org.apache.tomcat:tomcat-jni/ org.apache.tomcat:tomcat-jsp-api/ org.apache.tomcat:tomcat-juli/ org.apache.tomcat:tomcat-servlet-api/ org.apache.tomcat:tomcat-ssi/ org.apache.tomcat:tomcat-storeconfig/ org.apache.tomcat:tomcat-tribes/ org.apache.tomcat:tomcat-util/ org.apache.tomcat:tomcat-util-scan/ org.apache.tomcat:tomcat-websocket/ org.apache.tomcat:tomcat-websocket-api/ org.apache.tomcat:tomcat-websocket-client-api
TuxCare security update for 40 packages (4 CVEs)
Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java
Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java
Unverified access point ownership in Amazon EFS CSI Driver
org.springframework:framework-docs, org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-indexer, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-core-test, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-jcl, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-r2dbc, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket
TuxCare security update for org.springframework (1 CVE)
org.springframework:framework-docs/ org.springframework:spring-aop/ org.springframework:spring-aspects/ org.springframework:spring-beans/ org.springframework:spring-context/ org.springframework:spring-context-indexer/ org.springframework:spring-context-support/ org.springframework:spring-core/ org.springframework:spring-core-test/ org.springframework:spring-expression/ org.springframework:spring-framework-bom/ org.springframework:spring-instrument/ org.springframework:spring-jcl/ org.springframework:spring-jdbc/ org.springframework:spring-jms/ org.springframework:spring-messaging/ org.springframework:spring-orm/ org.springframework:spring-oxm/ org.springframework:spring-r2dbc/ org.springframework:spring-test/ org.springframework:spring-tx/ org.springframework:spring-web/ org.springframework:spring-webflux/ org.springframework:spring-webmvc/ org.springframework:spring-websocket
TuxCare security update for org.springframework (1 CVE)
org.springframework:framework-docs, org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-indexer, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-core-test, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-jcl, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-r2dbc, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket
TuxCare security update for org.springframework (1 CVE)
org.springframework:framework-docs/ org.springframework:spring-aop/ org.springframework:spring-aspects/ org.springframework:spring-beans/ org.springframework:spring-context/ org.springframework:spring-context-indexer/ org.springframework:spring-context-support/ org.springframework:spring-core/ org.springframework:spring-core-test/ org.springframework:spring-expression/ org.springframework:spring-framework-bom/ org.springframework:spring-instrument/ org.springframework:spring-jcl/ org.springframework:spring-jdbc/ org.springframework:spring-jms/ org.springframework:spring-messaging/ org.springframework:spring-orm/ org.springframework:spring-oxm/ org.springframework:spring-r2dbc/ org.springframework:spring-test/ org.springframework:spring-tx/ org.springframework:spring-web/ org.springframework:spring-webflux/ org.springframework:spring-webmvc/ org.springframework:spring-websocket
TuxCare security update for org.springframework (1 CVE)
org.springframework:framework-docs, org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-indexer, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-core-test, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-jcl, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-r2dbc, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket
TuxCare security update for org.springframework (1 CVE)
org.springframework:framework-docs/ org.springframework:spring-aop/ org.springframework:spring-aspects/ org.springframework:spring-beans/ org.springframework:spring-context/ org.springframework:spring-context-indexer/ org.springframework:spring-context-support/ org.springframework:spring-core/ org.springframework:spring-core-test/ org.springframework:spring-expression/ org.springframework:spring-framework-bom/ org.springframework:spring-instrument/ org.springframework:spring-jcl/ org.springframework:spring-jdbc/ org.springframework:spring-jms/ org.springframework:spring-messaging/ org.springframework:spring-orm/ org.springframework:spring-oxm/ org.springframework:spring-r2dbc/ org.springframework:spring-test/ org.springframework:spring-tx/ org.springframework:spring-web/ org.springframework:spring-webflux/ org.springframework:spring-webmvc/ org.springframework:spring-websocket
TuxCare security update for org.springframework (1 CVE)
libtpms
CVE-2026-85769 affecting package libtpms 0.9.6-8
node-undici, node-undici, node-undici
linux, linux, linux, linux-6.12
linux, linux, linux, linux-6.12
kernel
CVE-2026-80912 affecting package kernel 6.6.152.1-1
kernel
CVE-2026-80913 affecting package kernel 6.6.152.1-1
linux, linux, linux, linux-6.12
linux, linux, linux, linux-6.12
