Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-69mh-gvh4-8gp7
    Fix available
    Packages

    github.com/siyuan-note/siyuan/kernel

    Summary

    SiYuan: Full-content disclosure of publish-disabled documents via getHeading*Transaction endpoints (publish mode): reader-reachable rendered DOM with no publish-access check

    Published
    3 Sept 2026
    CGA-cc25-5q23-c9mv
    No fix available
    Packages

    external-secrets-operator-fips-2.1

    Summary

    Published
    3 Sept 2026
    CGA-2366-2wrp-6w9j
    No fix available
    Packages

    external-secrets-operator-fips-2.1

    Summary

    Published
    3 Sept 2026
    CGA-pw6m-p7wc-69hv
    Fix available
    Packages

    keda-2.18-metrics-apiserver

    Summary

    Published
    3 Sept 2026
    CGA-79ph-w4qc-287m
    Fix available
    Packages

    keda-2.18-metrics-apiserver

    Summary

    Published
    3 Sept 2026
    Packages

    node-csv-parse

    Summary

    Published
    3 Sept 2026
    AZL-99084
    No fix available
    Packages

    colord

    Summary

    CVE-2026-85062 affecting package colord 1.4.6-1

    Published
    3 Sept 2026
    DEBIAN-CVE-2026-84185
    No fix available
    Packages

    python-jwcrypto, python-jwcrypto

    Summary

    Published
    3 Sept 2026
    CGA-mp2h-vg6r-j2q4
    Fix available
    Packages

    crossplane-provider-aws-mq-fips

    Summary

    Published
    3 Sept 2026
    CGA-473g-62fg-xwm3
    Fix available
    Packages

    crossplane-provider-aws-mq-fips

    Summary

    Published
    3 Sept 2026
    UBUNTU-CVE-2026-85063
    No fix available
    Packages

    node-csv-parse

    Summary

    Published
    3 Sept 2026
    UBUNTU-CVE-2026-85458
    No fix available
    Packages

    ipe, xpdf, ipe, xpdf, ipe, ipe, xpdf, ipe, xpdf, ipe, xpdf

    Summary

    Published
    3 Sept 2026
    UBUNTU-CVE-2026-84185
    No fix available
    Packages

    python-jwcrypto, python-jwcrypto, python-jwcrypto, python-jwcrypto, python-jwcrypto, python-jwcrypto

    Summary

    Published
    3 Sept 2026
    CGA-c7hm-wjm2-6jp8
    Fix available
    Packages

    cilium-1.20-operator-aws

    Summary

    Published
    3 Sept 2026
    CGA-px2g-6qhp-h8r5
    Fix available
    Packages

    cilium-1.20-operator-aws

    Summary

    Published
    3 Sept 2026
    CGA-prcw-4wc4-f72f
    Fix available
    Packages

    cilium-1.20-operator-aws

    Summary

    Published
    3 Sept 2026
    Packages

    org.springframework.integration:spring-integration, org.springframework.integration:spring-integration-amqp, org.springframework.integration:spring-integration-bom, org.springframework.integration:spring-integration-camel, org.springframework.integration:spring-integration-cassandra, org.springframework.integration:spring-integration-core, org.springframework.integration:spring-integration-debezium, org.springframework.integration:spring-integration-event, org.springframework.integration:spring-integration-feed, org.springframework.integration:spring-integration-file, org.springframework.integration:spring-integration-ftp, org.springframework.integration:spring-integration-graphql, org.springframework.integration:spring-integration-groovy, org.springframework.integration:spring-integration-hazelcast, org.springframework.integration:spring-integration-http, org.springframework.integration:spring-integration-ip, org.springframework.integration:spring-integration-jdbc, org.springframework.integration:spring-integration-jms, org.springframework.integration:spring-integration-jmx, org.springframework.integration:spring-integration-jpa, org.springframework.integration:spring-integration-kafka, org.springframework.integration:spring-integration-mail, org.springframework.integration:spring-integration-mongodb, org.springframework.integration:spring-integration-mqtt, org.springframework.integration:spring-integration-r2dbc, org.springframework.integration:spring-integration-redis, org.springframework.integration:spring-integration-rsocket, org.springframework.integration:spring-integration-scripting, org.springframework.integration:spring-integration-sftp, org.springframework.integration:spring-integration-smb, org.springframework.integration:spring-integration-stomp, org.springframework.integration:spring-integration-stream, org.springframework.integration:spring-integration-syslog, org.springframework.integration:spring-integration-test, org.springframework.integration:spring-integration-test-support, org.springframework.integration:spring-integration-webflux, org.springframework.integration:spring-integration-websocket, org.springframework.integration:spring-integration-ws, org.springframework.integration:spring-integration-xml, org.springframework.integration:spring-integration-xmpp, org.springframework.integration:spring-integration-zeromq, org.springframework.integration:spring-integration-zip, org.springframework.integration:spring-integration-zookeeper

    Summary

    TuxCare security update for org.springframework.integration (1 CVE)

    Published
    3 Sept 2026
    CGA-7hmg-wx84-p4xm
    Fix available
    Packages

    crossplane-provider-aws-resourcegroups

    Summary

    Published
    3 Sept 2026
    CGA-5xx7-rgpq-54wg
    Fix available
    Packages

    crossplane-provider-aws-resourcegroups

    Summary

    Published
    3 Sept 2026
    CGA-c9c9-vc35-423v
    Fix available
    Packages

    grafana-fips-13.0

    Summary

    Published
    3 Sept 2026
    CGA-4fpg-wr74-wh8x
    Fix available
    Packages

    grafana-fips-13.0

    Summary

    Published
    3 Sept 2026
    CGA-mrf6-7mjp-x88g
    Fix available
    Packages

    gcp-compute-persistent-disk-csi-driver-fips-1.25

    Summary

    Published
    3 Sept 2026
    CGA-cv6q-wc46-c8gr
    Fix available
    Packages

    gcp-compute-persistent-disk-csi-driver-fips-1.25

    Summary

    Published
    3 Sept 2026
    CGA-p6r4-cr7g-2r7q
    Fix available
    Packages

    crossplane-provider-aws-mwaa-fips

    Summary

    Published
    3 Sept 2026
    CGA-hxpf-r6wh-r9q9
    Fix available
    Packages

    kyverno-background-controller-fips-1.19

    Summary

    Published
    3 Sept 2026
    CGA-37f8-4x46-977c
    Fix available
    Packages

    crossplane-provider-aws-mwaa-fips

    Summary

    Published
    3 Sept 2026
    CGA-qhvq-x4mr-fmqc
    Fix available
    Packages

    kyverno-background-controller-fips-1.19

    Summary

    Published
    3 Sept 2026
    CGA-92c2-2rjj-4vg5
    Fix available
    Packages

    crossplane-aws-glacier-fips

    Summary

    Published
    3 Sept 2026
    CGA-v7rp-hr4p-qjg6
    Fix available
    Packages

    crossplane-aws-glacier-fips

    Summary

    Published
    3 Sept 2026
    CGA-397q-35vw-phqh
    Fix available
    Packages

    kyverno-reports-controller-fips-1.19

    Summary

    Published
    3 Sept 2026
    CGA-h8p3-8jq5-25p7
    Fix available
    Packages

    kyverno-reports-controller-fips-1.19

    Summary

    Published
    3 Sept 2026
    CGA-9vqp-334q-jfm7
    No fix available
    Packages

    external-secrets-operator-fips-2.1

    Summary

    Published
    3 Sept 2026
    CGA-r883-9vxc-vq4c
    Fix available
    Packages

    crossplane-provider-aws-emrserverless-fips

    Summary

    Published
    3 Sept 2026
    CGA-4q55-7gwq-q2c2
    No fix available
    Packages

    external-secrets-operator-fips-2.1

    Summary

    Published
    3 Sept 2026
    CGA-hv53-p5qp-qjwq
    Fix available
    Packages

    crossplane-provider-aws-emrserverless-fips

    Summary

    Published
    3 Sept 2026
    CGA-wjqq-q6cq-qqqj
    Fix available
    Packages

    crossplane-provider-aws-amplify-fips

    Summary

    Published
    3 Sept 2026
    CGA-g96x-62hw-c28r
    Fix available
    Packages

    crossplane-provider-aws-amplify-fips

    Summary

    Published
    3 Sept 2026
    GHSA-fph3-ghq9-vw66
    Fix available
    Packages

    github.com/siyuan-note/siyuan/kernel

    Summary

    SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-write asset-content DB

    Published
    3 Sept 2026
    CGA-9cvr-xmmv-q83g
    Fix available
    Packages

    crossplane-provider-aws-appintegrations-fips

    Summary

    Published
    3 Sept 2026
    CGA-5fqp-69fw-65w9
    Fix available
    Packages

    crossplane-provider-aws-appintegrations-fips

    Summary

    Published
    3 Sept 2026
    CGA-856m-6hpx-mm39
    Fix available
    Packages

    crossplane-aws-monolith-fips

    Summary

    Published
    3 Sept 2026
    CGA-5r8p-x4vp-grxp
    Fix available
    Packages

    crossplane-aws-monolith-fips

    Summary

    Published
    3 Sept 2026
    GHSA-82x6-q7mm-w9cf
    Fix available
    Packages

    toml

    Summary

    toml-node: Uncontrolled Recursion

    Published
    3 Sept 2026
    GHSA-v5mp-jgw5-2x6j
    Fix available
    Packages

    toml

    Summary

    toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization

    Published
    3 Sept 2026
    CGA-c3gg-vrp9-95qx
    Fix available
    Packages

    crossplane-provider-aws-imagebuilder-fips

    Summary

    Published
    3 Sept 2026
    CGA-564x-2675-p2fp
    Fix available
    Packages

    crossplane-provider-aws-imagebuilder-fips

    Summary

    Published
    3 Sept 2026
    CGA-gwjg-6v49-943v
    Fix available
    Packages

    keda-2.18

    Summary

    Published
    3 Sept 2026
    CGA-crx7-jc7r-g5fw
    Fix available
    Packages

    keda-2.18

    Summary

    Published
    3 Sept 2026
    CGA-c296-2r65-xfxj
    Fix available
    Packages

    rpk-26.1.17

    Summary

    Published
    3 Sept 2026
    CGA-37rh-4fwm-7xh5
    Fix available
    Packages

    rpk-26.1.17

    Summary

    Published
    3 Sept 2026