Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-33g4-hpr6-xcg2
    Fix available
    Packages

    crossplane-provider-aws-ecr-fips

    Summary

    Published
    3 Sept 2026
    CGA-gv39-fcmg-424p
    Fix available
    Packages

    crossplane-provider-aws-quicksight-fips

    Summary

    Published
    3 Sept 2026
    CGA-9m5g-7p23-g9cf
    Fix available
    Packages

    crossplane-provider-aws-quicksight-fips

    Summary

    Published
    3 Sept 2026
    GHSA-528h-pc64-c93x
    Fix available
    Packages

    stream-json

    Summary

    stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

    Published
    3 Sept 2026
    CGA-799m-5x24-9799
    Fix available
    Packages

    crossplane-provider-aws-kms-fips

    Summary

    Published
    3 Sept 2026
    CGA-qpx9-j2fj-mf4g
    Fix available
    Packages

    crossplane-provider-aws-kms-fips

    Summary

    Published
    3 Sept 2026
    Packages

    systemd

    Summary

    Security update for systemd

    Published
    3 Sept 2026
    CGA-c8qj-w38h-365m
    Fix available
    Packages

    kube-conformance-1.34

    Summary

    Published
    3 Sept 2026
    CGA-hc3h-xx7r-jx9v
    Fix available
    Packages

    kube-conformance-1.34

    Summary

    Published
    3 Sept 2026
    Packages

    google-cloud-sap-agent

    Summary

    Security update for google-cloud-sap-agent

    Published
    3 Sept 2026
    CGA-hf68-8cpv-cfvr
    Fix available
    Packages

    crossplane-aws-monolith-fips

    Summary

    Published
    3 Sept 2026
    CGA-725j-55rg-rx25
    Fix available
    Packages

    crossplane-aws-monolith-fips

    Summary

    Published
    3 Sept 2026
    CGA-hrgf-966j-5qj4
    Fix available
    Packages

    crossplane-provider-aws-ds

    Summary

    Published
    3 Sept 2026
    CGA-5fpw-m8v4-mjqf
    Fix available
    Packages

    crossplane-provider-aws-ds

    Summary

    Published
    3 Sept 2026
    CGA-7w2j-4r24-63f2
    Fix available
    Packages

    crossplane-provider-aws-route53resolver-fips

    Summary

    Published
    3 Sept 2026
    CGA-h889-r78g-r344
    Fix available
    Packages

    crossplane-provider-aws-route53resolver-fips

    Summary

    Published
    3 Sept 2026
    GHSA-vh22-h7hf-www7
    Fix available
    Packages

    github.com/siyuan-note/siyuan/kernel

    Summary

    SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write

    Published
    3 Sept 2026
    CVE-2026-85061
    Fix available
    Packages

    Summary

    MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium, libskia

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    Packages

    chromium, chromium, chromium

    Summary

    Published
    3 Sept 2026
    CGA-3xr6-xrwh-gfm3
    Fix available
    Packages

    crossplane-provider-aws-cloudwatch

    Summary

    Published
    3 Sept 2026
    CGA-q7xm-qj53-5m5x
    Fix available
    Packages

    crossplane-provider-aws-cloudwatch

    Summary

    Published
    3 Sept 2026
    CVE-2026-71429
    Fix available
    Packages

    Summary

    stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)

    Published
    3 Sept 2026
    GHSA-6c5v-hqjr-5xxp
    Fix available
    Packages

    github.com/rabbitmq/amqp091-go

    Summary

    amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload

    Published
    3 Sept 2026
    CGA-8cmp-283q-pp37
    Fix available
    Packages

    crossplane-provider-family-azure, crossplane-provider-family-azure

    Summary

    Published
    3 Sept 2026
    CGA-v6f5-7x9f-jcgw
    Fix available
    Packages

    crossplane-provider-aws-detective

    Summary

    Published
    3 Sept 2026
    CGA-8w2r-7rwj-whh2
    Fix available
    Packages

    crossplane-provider-aws-detective

    Summary

    Published
    3 Sept 2026
    CGA-j878-xx9v-887v
    Fix available
    Packages

    crossplane-provider-family-azure, crossplane-provider-family-azure

    Summary

    Published
    3 Sept 2026
    Packages

    fuse-overlayfs

    Summary

    Security update for fuse-overlayfs

    Published
    3 Sept 2026
    Packages

    fuse-overlayfs

    Summary

    Security update for fuse-overlayfs

    Published
    3 Sept 2026
    CGA-rqc2-cf4v-3859
    Fix available
    Packages

    gcp-compute-persistent-disk-csi-driver-fips-1.25

    Summary

    Published
    3 Sept 2026
    CGA-px96-jvh7-wgqv
    Fix available
    Packages

    gcp-compute-persistent-disk-csi-driver-fips-1.25

    Summary

    Published
    3 Sept 2026
    CGA-829m-ph7m-qwh5
    Fix available
    Packages

    keda-2.18-admission-webhooks

    Summary

    Published
    3 Sept 2026
    CGA-g8rm-q6fg-3fwr
    Fix available
    Packages

    keda-2.18-admission-webhooks

    Summary

    Published
    3 Sept 2026
    CGA-64gp-895r-739v
    Fix available
    Packages

    crossplane-provider-aws-mq-fips

    Summary

    Published
    3 Sept 2026
    CGA-8hw6-8hqq-q399
    Fix available
    Packages

    crossplane-provider-aws-mq-fips

    Summary

    Published
    3 Sept 2026
    GHSA-jxwj-j7wr-gfrw
    Fix available
    Packages

    sanitize-html

    Summary

    ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close

    Published
    3 Sept 2026
    CGA-xgvm-8c4c-39hx
    Fix available
    Packages

    crossplane-provider-aws-appconfig

    Summary

    Published
    3 Sept 2026
    CGA-rq5g-pfwv-wgwh
    Fix available
    Packages

    crossplane-provider-aws-appconfig

    Summary

    Published
    3 Sept 2026
    CGA-g5hh-242w-6hr3
    Fix available
    Packages

    crossplane-provider-aws-globalaccelerator

    Summary

    Published
    3 Sept 2026