Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    MINI-4hq4-mqqh-rv75
    No fix available
    Packages

    istio-cni-1.22, istio-install-cni-1.22, istio-pilot-agent-1.22, istio-pilot-discovery-1.22, istioctl-1.22

    Summary

    Published
    9 Sept 2026
    MINI-mw7f-x9mg-vmwf
    No fix available
    Packages

    istio-cni-1.22, istio-install-cni-1.22, istio-pilot-agent-1.22, istio-pilot-discovery-1.22, istioctl-1.22

    Summary

    Published
    9 Sept 2026
    CVE-2026-87996
    Fix available
    Packages

    Summary

    Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader

    Published
    9 Sept 2026
    MINI-c32g-42w7-588q
    No fix available
    Packages

    influxd

    Summary

    Published
    9 Sept 2026
    MINI-ffxx-ffcq-xggp
    No fix available
    Packages

    influxd

    Summary

    Published
    9 Sept 2026
    CVE-2026-87995
    Fix available
    Packages

    Summary

    Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin

    Published
    9 Sept 2026
    MINI-8rc9-793j-2q6c
    No fix available
    Packages

    hubble-fips

    Summary

    Published
    9 Sept 2026
    MINI-vc8w-9q5j-xf5f
    No fix available
    Packages

    hubble-fips

    Summary

    Published
    9 Sept 2026
    MINI-cmf8-9wc5-6q4c
    No fix available
    Packages

    hubble

    Summary

    Published
    9 Sept 2026
    MINI-r3q4-7xcm-h7wv
    No fix available
    Packages

    hubble

    Summary

    Published
    9 Sept 2026
    CVE-2026-87994
    Fix available
    Packages

    Summary

    Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint

    Published
    9 Sept 2026
    MINI-4rv6-22r6-mjmr
    No fix available
    Packages

    headlamp-0.34-fips

    Summary

    Published
    9 Sept 2026
    MINI-g2v4-2gjq-85p9
    No fix available
    Packages

    headlamp-0.34-fips

    Summary

    Published
    9 Sept 2026
    MINI-mp59-53c3-mmmg
    No fix available
    Packages

    headlamp-0.34

    Summary

    Published
    9 Sept 2026
    MINI-5f4h-qf5f-p45m
    No fix available
    Packages

    headlamp-0.34

    Summary

    Published
    9 Sept 2026
    CVE-2026-87017
    Fix available
    Packages

    Summary

    Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends

    Published
    9 Sept 2026
    MINI-454q-m44w-g2w4
    No fix available
    Packages

    harbor-fips-2.12, harbor-fips-2.12-jobservice, harbor-fips-2.12-registryctl

    Summary

    Published
    9 Sept 2026
    MINI-6jqf-w9qh-76p2
    No fix available
    Packages

    harbor-fips-2.12, harbor-fips-2.12-jobservice, harbor-fips-2.12-registryctl

    Summary

    Published
    9 Sept 2026
    MINI-5wgf-33gr-m7f7
    No fix available
    Packages

    harbor-2.12, harbor-2.12-jobservice, harbor-2.12-registryctl

    Summary

    Published
    9 Sept 2026
    MINI-qh54-9j2h-hxrw
    No fix available
    Packages

    harbor-2.12, harbor-2.12-jobservice, harbor-2.12-registryctl

    Summary

    Published
    9 Sept 2026
    MINI-frmw-jggx-wfw9
    No fix available
    Packages

    harbor-2.11, harbor-2.11-jobservice, harbor-2.11-registryctl

    Summary

    Published
    9 Sept 2026
    MINI-mvx4-fv87-wf2j
    No fix available
    Packages

    harbor-2.11, harbor-2.11-jobservice, harbor-2.11-registryctl

    Summary

    Published
    9 Sept 2026
    Packages

    @unhead/dom, @unhead/schema, @unhead/shared, @unhead/ssr, @unhead/vue, unhead

    Summary

    TuxCare security update for 6 packages (2 CVEs)

    Published
    9 Sept 2026
    CVE-2026-87016
    Fix available
    Packages

    Summary

    Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

    Published
    9 Sept 2026
    MINI-5pxq-j68v-35jc
    No fix available
    Packages

    grafana-fips-12.3

    Summary

    Published
    9 Sept 2026
    MINI-c8m4-93qp-rxr9
    No fix available
    Packages

    grafana-fips-12.3

    Summary

    Published
    9 Sept 2026
    MINI-ggjm-4996-9x4g
    No fix available
    Packages

    grafana-fips-12.2

    Summary

    Published
    9 Sept 2026
    MINI-659q-q7jq-5cf4
    No fix available
    Packages

    grafana-fips-12.2

    Summary

    Published
    9 Sept 2026
    MINI-gmf3-7854-29c5
    No fix available
    Packages

    grafana-fips-12.1

    Summary

    Published
    9 Sept 2026
    MINI-qcc3-f2q9-gc6c
    No fix available
    Packages

    grafana-fips-12.1

    Summary

    Published
    9 Sept 2026
    MINI-cg8h-vh6f-w5ph
    No fix available
    Packages

    grafana-fips-12.0

    Summary

    Published
    9 Sept 2026
    MINI-22gp-qhp3-rmh8
    No fix available
    Packages

    grafana-fips-12.0

    Summary

    Published
    9 Sept 2026
    MINI-3qmp-vvf2-3jhv
    No fix available
    Packages

    grafana-fips-11.6

    Summary

    Published
    9 Sept 2026
    MINI-68r5-whf5-w3q3
    No fix available
    Packages

    grafana-fips-11.6

    Summary

    Published
    9 Sept 2026
    DEBIAN-CVE-2026-79516
    No fix available
    Packages

    libstb, libstb, libstb

    Summary

    Published
    9 Sept 2026
    DEBIAN-CVE-2026-79515
    No fix available
    Packages

    libstb, libstb, libstb

    Summary

    Published
    9 Sept 2026
    MINI-m49h-p6w2-j955
    No fix available
    Packages

    grafana-fips-11.5

    Summary

    Published
    9 Sept 2026
    MINI-xc42-w6hw-78f8
    No fix available
    Packages

    grafana-fips-11.5

    Summary

    Published
    9 Sept 2026
    MINI-hj28-cmw8-qr5m
    No fix available
    Packages

    grafana-fips-11.4

    Summary

    Published
    9 Sept 2026
    MINI-695r-c4f3-p7jf
    No fix available
    Packages

    grafana-fips-11.4

    Summary

    Published
    9 Sept 2026
    MINI-jrc2-5hmf-8fpr
    No fix available
    Packages

    grafana-12.3

    Summary

    Published
    9 Sept 2026
    MINI-m9f4-5vwf-hjmm
    No fix available
    Packages

    grafana-12.3

    Summary

    Published
    9 Sept 2026
    MINI-7pp5-ghqg-429h
    No fix available
    Packages

    grafana-12.2

    Summary

    Published
    9 Sept 2026
    MINI-q5h9-3m44-95c2
    No fix available
    Packages

    grafana-12.2

    Summary

    Published
    9 Sept 2026
    MINI-gm5h-jw39-hq2v
    No fix available
    Packages

    grafana-12.1

    Summary

    Published
    9 Sept 2026
    MINI-g36m-mp2c-68pr
    No fix available
    Packages

    grafana-12.1

    Summary

    Published
    9 Sept 2026
    MINI-qh8m-fj3f-mmwc
    No fix available
    Packages

    grafana-12.0

    Summary

    Published
    9 Sept 2026
    MINI-vr7v-c9fq-74r9
    No fix available
    Packages

    grafana-12.0

    Summary

    Published
    9 Sept 2026
    MINI-q8qq-jg37-qxp7
    No fix available
    Packages

    grafana-11.6

    Summary

    Published
    9 Sept 2026
    MINI-qf97-hmmx-h384
    No fix available
    Packages

    grafana-11.6

    Summary

    Published
    9 Sept 2026