Open Source Vulnerabilities

python-git, python-git, python-git, python-git, python-git, python-git, python-git

t-digest, t-digest, t-digest, t-digest, t-digest, t-digest

zstd-jni-java, zstd-jni-java

zstd-jni-java, zstd-jni-java

zstd-jni-java, zstd-jni-java

cups, cups, cups, cups, cups, cups

cups, cups, cups, cups, cups, cups

vim-X11, vim-common, vim-data, vim-enhanced, vim-filesystem, vim-minimal, xxd

Important: vim security update

freerdp, freerdp-devel, freerdp-libs, libwinpr, libwinpr-devel

Important: freerdp security update

git-lfs

Important: git-lfs security update

vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

Important: vim security update

apr-util, apr-util-devel, apr-util-ldap, apr-util-lmdb, apr-util-mysql, apr-util-odbc, apr-util-openssl, apr-util-pgsql, apr-util-sqlite

Moderate: apr-util security update

coreutils, coreutils-common, coreutils-single

Moderate: coreutils security update

gstreamer1-plugins-base, gstreamer1-plugins-base-devel, gstreamer1-plugins-base-tools

Moderate: gstreamer1-plugins-base security update

nginx, nginx-all-modules, nginx-core, nginx-filesystem, nginx-mod-devel, nginx-mod-http-image-filter, nginx-mod-http-perl, nginx-mod-http-xslt-filter, nginx-mod-mail, nginx-mod-stream

Important: nginx security update

google-osconfig-agent

google-osconfig-agent-20260908.00-1.1 on GA media

389-ds

389-ds-3.3.1+8c2711bd6-1.1 on GA media

azure-storage-azcopy

azure-storage-azcopy-10.32.8-1.1 on GA media

cargo-c

cargo-c-0.10.25-1.1 on GA media

google-guest-agent

google-guest-agent-20260903.01-1.1 on GA media

libpcap

libpcap-devel-1.10.7-1.1 on GA media

perl-HTML-FormHandler

perl-HTML-FormHandler-0.410.2-1.1 on GA media

python-modelscope-hub

python313-modelscope-hub-0.4.2-1.1 on GA media

python310

python310-3.10.21-1.1 on GA media

python315

python315-3.15.0~rc2-1.1 on GA media

tdbg-fips, temporal-cassandra-tool-fips, temporal-elasticsearch-tool-fips, temporal-server-fips, temporal-sql-tool-fips

tdbg-fips, temporal-cassandra-tool-fips, temporal-elasticsearch-tool-fips, temporal-server-fips, temporal-sql-tool-fips

tdbg, temporal-cassandra-tool, temporal-elasticsearch-tool, temporal-server, temporal-sql-tool

tdbg, temporal-cassandra-tool, temporal-elasticsearch-tool, temporal-server, temporal-sql-tool

tempo-fips, tempo-fips-cli, tempo-fips-query, tempo-fips-vulture

tempo-fips, tempo-fips-cli, tempo-fips-query, tempo-fips-vulture

tempo, tempo-cli, tempo-query, tempo-vulture

tempo, tempo-cli, tempo-query, tempo-vulture

teleport-fips-16

teleport-fips-16

teleport-16

teleport-16

strimzi-kafka-operator-cluster-operator, strimzi-kafka-operator-kafka-agent, strimzi-kafka-operator-kafka-init, strimzi-kafka-operator-mirror-maker-agent, strimzi-kafka-operator-topic-operator, strimzi-kafka-operator-tracing-agent, strimzi-kafka-operator-user-operator

strimzi-kafka-operator-cluster-operator, strimzi-kafka-operator-kafka-agent, strimzi-kafka-operator-kafka-init, strimzi-kafka-operator-mirror-maker-agent, strimzi-kafka-operator-topic-operator, strimzi-kafka-operator-tracing-agent, strimzi-kafka-operator-user-operator

open-webui

Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

open-webui

Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets

open-webui

Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

spark-4.0-scala-2.13

spark-4.0-scala-2.13

ceph

Updated ceph packages fix security vulnerabilities

perl-DBI, perl-DBI

Updated perl-DBI packages fix security vulnerabilities

spark-3.5-scala-2.12, spark-3.5-scala-2.13

spark-3.5-scala-2.12, spark-3.5-scala-2.13

github.com/identrail/identrail

Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification

@openhop/server

@openhop/server: Path Traversal in Flow ID File Operations