Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-m4jq-v32x-8g94
    No fix available
    Packages

    linux-desktop-6.18

    Summary

    Published
    9 Sept 2026
    CGA-4jj7-78p8-px9j
    No fix available
    Packages

    linux-desktop-6.18

    Summary

    Published
    9 Sept 2026
    CGA-5789-7hh5-fxxr
    No fix available
    Packages

    linux-desktop-6.18

    Summary

    Published
    9 Sept 2026
    CGA-8wj2-2cfc-58c4
    No fix available
    Packages

    linux-desktop-6.18

    Summary

    Published
    9 Sept 2026
    CGA-3xh4-c9r6-v925
    No fix available
    Packages

    linux-desktop-6.18

    Summary

    Published
    9 Sept 2026
    CVE-2026-88002
    Fix available
    Packages

    Summary

    Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

    Published
    9 Sept 2026
    CVE-2026-88001
    Fix available
    Packages

    Summary

    Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets

    Published
    9 Sept 2026
    CVE-2026-88069
    Fix available
    Packages

    Summary

    Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis

    Published
    9 Sept 2026
    CVE-2026-88000
    Fix available
    Packages

    Summary

    Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree

    Published
    9 Sept 2026
    MINI-qw98-777w-92wh
    No fix available
    Packages

    kafka-3.8-fips-libs

    Summary

    Published
    9 Sept 2026
    MINI-wrfv-hgm7-2g42
    No fix available
    Packages

    kafka-3.8-fips-libs

    Summary

    Published
    9 Sept 2026
    MINI-4q77-x8h7-vjrc
    No fix available
    Packages

    kafka-3.8

    Summary

    Published
    9 Sept 2026
    MINI-jvm8-5x7h-r83c
    No fix available
    Packages

    kafka-3.8

    Summary

    Published
    9 Sept 2026
    MINI-wc7r-586h-6fh6
    No fix available
    Packages

    kafka-3.7-fips-libs

    Summary

    Published
    9 Sept 2026
    MINI-868w-prcr-32v7
    No fix available
    Packages

    kafka-3.7-fips-libs

    Summary

    Published
    9 Sept 2026
    MINI-cgf9-hq7r-xffh
    No fix available
    Packages

    kafka-3.7

    Summary

    Published
    9 Sept 2026
    MINI-frrv-p37j-gp9g
    No fix available
    Packages

    kafka-3.7

    Summary

    Published
    9 Sept 2026
    CVE-2026-87999
    Fix available
    Packages

    Summary

    Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

    Published
    9 Sept 2026
    MINI-hpqx-m49x-gvqw
    No fix available
    Packages

    k3s-fips-1.33, k3s-fips-1.33-multicall

    Summary

    Published
    9 Sept 2026
    MINI-qj35-9mwr-p347
    No fix available
    Packages

    k3s-fips-1.33, k3s-fips-1.33-multicall

    Summary

    Published
    9 Sept 2026
    MINI-gw9x-7vh3-c4pw
    No fix available
    Packages

    k3s-fips-1.32

    Summary

    Published
    9 Sept 2026
    MINI-f6m4-65wv-xrpv
    No fix available
    Packages

    k3s-fips-1.32

    Summary

    Published
    9 Sept 2026
    MINI-jch8-hm5p-g7q3
    No fix available
    Packages

    k3s-1.33, k3s-1.33-multicall, k3s-1.33-static

    Summary

    Published
    9 Sept 2026
    MINI-qcq2-4phh-f699
    No fix available
    Packages

    k3s-1.33, k3s-1.33-multicall, k3s-1.33-static

    Summary

    Published
    9 Sept 2026
    CVE-2026-87998
    Fix available
    Packages

    Summary

    Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion

    Published
    9 Sept 2026
    MINI-qp37-j7cm-2hj9
    No fix available
    Packages

    k3s-1.32, k3s-1.32-static

    Summary

    Published
    9 Sept 2026
    MINI-ffr9-qqqw-g675
    No fix available
    Packages

    k3s-1.32, k3s-1.32-static

    Summary

    Published
    9 Sept 2026
    MINI-x2vx-c6xm-7mc2
    No fix available
    Packages

    istio-cni-fips-1.27, istio-install-cni-fips-1.27, istio-pilot-agent-fips-1.27, istio-pilot-discovery-fips-1.27, istioctl-fips-1.27

    Summary

    Published
    9 Sept 2026
    MINI-vfc8-j2jj-3r6r
    No fix available
    Packages

    istio-cni-fips-1.27, istio-install-cni-fips-1.27, istio-pilot-agent-fips-1.27, istio-pilot-discovery-fips-1.27, istioctl-fips-1.27

    Summary

    Published
    9 Sept 2026
    MINI-8f62-82g7-cfq6
    No fix available
    Packages

    istio-cni-fips-1.26, istio-install-cni-fips-1.26, istio-pilot-agent-fips-1.26, istio-pilot-discovery-fips-1.26, istioctl-fips-1.26

    Summary

    Published
    9 Sept 2026
    MINI-qp4v-8mj6-3pc3
    No fix available
    Packages

    istio-cni-fips-1.26, istio-install-cni-fips-1.26, istio-pilot-agent-fips-1.26, istio-pilot-discovery-fips-1.26, istioctl-fips-1.26

    Summary

    Published
    9 Sept 2026
    MINI-4cwv-r5hf-gggc
    No fix available
    Packages

    istio-cni-fips-1.25, istio-install-cni-fips-1.25, istio-pilot-agent-fips-1.25, istio-pilot-discovery-fips-1.25, istioctl-fips-1.25

    Summary

    Published
    9 Sept 2026
    MINI-8x37-xg65-wqm4
    No fix available
    Packages

    istio-cni-fips-1.25, istio-install-cni-fips-1.25, istio-pilot-agent-fips-1.25, istio-pilot-discovery-fips-1.25, istioctl-fips-1.25

    Summary

    Published
    9 Sept 2026
    MINI-5xm7-5rqx-f6wh
    No fix available
    Packages

    istio-cni-fips-1.24, istio-install-cni-fips-1.24, istio-pilot-agent-fips-1.24, istio-pilot-discovery-fips-1.24, istioctl-fips-1.24

    Summary

    Published
    9 Sept 2026
    MINI-f3vq-v5j5-5w5h
    No fix available
    Packages

    istio-cni-fips-1.24, istio-install-cni-fips-1.24, istio-pilot-agent-fips-1.24, istio-pilot-discovery-fips-1.24, istioctl-fips-1.24

    Summary

    Published
    9 Sept 2026
    CVE-2026-87997
    Fix available
    Packages

    Summary

    Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions

    Published
    9 Sept 2026
    MINI-6fq4-25jf-cp56
    No fix available
    Packages

    istio-cni-fips-1.23, istio-install-cni-fips-1.23, istio-pilot-agent-fips-1.23, istio-pilot-discovery-fips-1.23, istioctl-fips-1.23

    Summary

    Published
    9 Sept 2026
    MINI-9r54-5jmp-2m45
    No fix available
    Packages

    istio-cni-fips-1.23, istio-install-cni-fips-1.23, istio-pilot-agent-fips-1.23, istio-pilot-discovery-fips-1.23, istioctl-fips-1.23

    Summary

    Published
    9 Sept 2026
    MINI-6wqx-4rvx-fgpv
    No fix available
    Packages

    istio-cni-fips-1.22, istio-install-cni-fips-1.22, istio-pilot-agent-fips-1.22, istio-pilot-discovery-fips-1.22, istioctl-fips-1.22

    Summary

    Published
    9 Sept 2026
    MINI-q3fx-fqrw-6v8f
    No fix available
    Packages

    istio-cni-fips-1.22, istio-install-cni-fips-1.22, istio-pilot-agent-fips-1.22, istio-pilot-discovery-fips-1.22, istioctl-fips-1.22

    Summary

    Published
    9 Sept 2026
    MINI-wx9j-3jw6-3pmf
    No fix available
    Packages

    istio-cni-1.27, istio-install-cni-1.27, istio-pilot-agent-1.27, istio-pilot-discovery-1.27, istioctl-1.27

    Summary

    Published
    9 Sept 2026
    MINI-x452-8687-rmqm
    No fix available
    Packages

    istio-cni-1.27, istio-install-cni-1.27, istio-pilot-agent-1.27, istio-pilot-discovery-1.27, istioctl-1.27

    Summary

    Published
    9 Sept 2026
    MINI-8gq5-hvc2-63rj
    No fix available
    Packages

    istio-cni-1.26, istio-install-cni-1.26, istio-pilot-agent-1.26, istio-pilot-discovery-1.26, istioctl-1.26

    Summary

    Published
    9 Sept 2026
    MINI-ff9c-wc9p-qccm
    No fix available
    Packages

    istio-cni-1.26, istio-install-cni-1.26, istio-pilot-agent-1.26, istio-pilot-discovery-1.26, istioctl-1.26

    Summary

    Published
    9 Sept 2026
    MINI-6j7p-wv45-qcwx
    No fix available
    Packages

    istio-cni-1.25, istio-install-cni-1.25, istio-pilot-agent-1.25, istio-pilot-discovery-1.25, istioctl-1.25

    Summary

    Published
    9 Sept 2026
    MINI-rp63-wvp7-5hf4
    No fix available
    Packages

    istio-cni-1.25, istio-install-cni-1.25, istio-pilot-agent-1.25, istio-pilot-discovery-1.25, istioctl-1.25

    Summary

    Published
    9 Sept 2026
    MINI-5jxp-mv3q-9mc3
    No fix available
    Packages

    istio-cni-1.24, istio-install-cni-1.24, istio-pilot-agent-1.24, istio-pilot-discovery-1.24, istioctl-1.24

    Summary

    Published
    9 Sept 2026
    MINI-vcgr-2984-vwxx
    No fix available
    Packages

    istio-cni-1.24, istio-install-cni-1.24, istio-pilot-agent-1.24, istio-pilot-discovery-1.24, istioctl-1.24

    Summary

    Published
    9 Sept 2026
    MINI-558h-3p4c-5fcg
    No fix available
    Packages

    istio-cni-1.23, istio-install-cni-1.23, istio-pilot-agent-1.23, istio-pilot-discovery-1.23, istioctl-1.23

    Summary

    Published
    9 Sept 2026
    MINI-vh4f-mrwx-xg2j
    No fix available
    Packages

    istio-cni-1.23, istio-install-cni-1.23, istio-pilot-agent-1.23, istio-pilot-discovery-1.23, istioctl-1.23

    Summary

    Published
    9 Sept 2026