Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-c3hw-9fhp-jxvc
    Fix available
    Packages

    rke2-runtime-1.36

    Summary

    Published
    3 Sept 2026
    CGA-jh4c-8x7m-8c44
    Fix available
    Packages

    rke2-runtime-1.36

    Summary

    Published
    3 Sept 2026
    UBUNTU-CVE-2026-85396
    No fix available
    Packages

    ruby-zip, ruby-zip, ruby-zip, ruby-zip, ruby-zip, ruby-zip

    Summary

    Published
    3 Sept 2026
    UBUNTU-CVE-2026-85394
    No fix available
    Packages

    python-jose, python-jose

    Summary

    Published
    3 Sept 2026
    UBUNTU-CVE-2026-85393
    No fix available
    Packages

    node-node-forge, node-node-forge

    Summary

    Published
    3 Sept 2026
    UBUNTU-CVE-2026-33630
    No fix available
    Packages

    c-ares, c-ares, c-ares, c-ares, c-ares, c-ares, c-ares

    Summary

    Published
    3 Sept 2026
    CGA-h649-vx3q-gcpx
    Fix available
    Packages

    cluster-api-fips-1.11-capd-manager

    Summary

    Published
    3 Sept 2026
    CGA-fwg6-cwj2-qx7w
    Fix available
    Packages

    cluster-api-fips-1.11-capd-manager

    Summary

    Published
    3 Sept 2026
    CGA-qpx2-vgwr-375x
    Fix available
    Packages

    crossplane-provider-aws-kms-fips

    Summary

    Published
    3 Sept 2026
    CGA-x9fq-p2rh-p2g9
    Fix available
    Packages

    crossplane-provider-aws-kms-fips

    Summary

    Published
    3 Sept 2026
    CGA-8xp6-gjqr-m99w
    Fix available
    Packages

    cert-manager-istio-csr-fips

    Summary

    Published
    3 Sept 2026
    CGA-xcvj-g5mq-wqm9
    Fix available
    Packages

    cert-manager-istio-csr-fips

    Summary

    Published
    3 Sept 2026
    CGA-3wff-74h2-8c68
    Fix available
    Packages

    keda-2.18-admission-webhooks

    Summary

    Published
    3 Sept 2026
    CGA-jc7p-7x63-mhp7
    Fix available
    Packages

    keda-2.18-admission-webhooks

    Summary

    Published
    3 Sept 2026
    CGA-57gx-m4rq-p5j4
    Fix available
    Packages

    kyverno-cleanup-controller-fips-1.19

    Summary

    Published
    3 Sept 2026
    CGA-9r55-2vqq-8h9x
    Fix available
    Packages

    kyverno-cleanup-controller-fips-1.19

    Summary

    Published
    3 Sept 2026
    GHSA-88f2-fpv8-89q2
    Fix available
    Packages

    orval

    Summary

    Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

    Published
    3 Sept 2026
    CGA-34f5-x8wm-jfcq
    Fix available
    Packages

    keda-2.18

    Summary

    Published
    3 Sept 2026
    CGA-jfc6-m7jp-pgfm
    Fix available
    Packages

    keda-2.18

    Summary

    Published
    3 Sept 2026
    CVE-2026-44506
    Fix available
    Packages

    Summary

    Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations

    Published
    3 Sept 2026
    CVE-2026-53728
    Fix available
    Packages

    Summary

    Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage

    Published
    3 Sept 2026
    CGA-5g4j-qhgv-m79j
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-9hr5-869h-3q67
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-8w6j-mgfx-pmqw
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-mm2v-7q6x-h335
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-8wg5-fc82-53fj
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-f523-w36m-2m5v
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-m9f6-hcpm-8wf8
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-87qm-g4r7-xj3x
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-jhr9-3rwh-v5wj
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-c94m-8qx8-6r3v
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-qhvq-48g9-px83
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-q5rf-5q6v-8fgp
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-wcph-hmwp-rq99
    No fix available
    Packages

    eco-java-gradle-2.0

    Summary

    Published
    3 Sept 2026
    CGA-32gv-h737-26jc
    Fix available
    Packages

    redpanda-operator-25.1

    Summary

    Published
    3 Sept 2026
    CGA-2w7r-7p65-6cg2
    Fix available
    Packages

    redpanda-operator-25.1

    Summary

    Published
    3 Sept 2026
    CGA-ffxr-q2rw-x284
    Fix available
    Packages

    envoy-gateway-fips-1.6

    Summary

    Published
    3 Sept 2026
    CGA-fvmg-77q5-9gj7
    Fix available
    Packages

    envoy-gateway-fips-1.6

    Summary

    Published
    3 Sept 2026
    GHSA-w727-8j6c-2rj4
    Fix available
    Packages

    orval

    Summary

    Orval: Import-time RCE via schema default -> zod module-level template literal

    Published
    3 Sept 2026
    CGA-r9f2-6343-p4gv
    Fix available
    Packages

    crossplane-provider-aws-redshift-fips

    Summary

    Published
    3 Sept 2026
    CGA-xxff-6mv5-x9j3
    Fix available
    Packages

    crossplane-provider-aws-redshift-fips

    Summary

    Published
    3 Sept 2026
    CGA-3px9-cjh7-957f
    Fix available
    Packages

    crossplane-provider-aws-datasync

    Summary

    Published
    3 Sept 2026
    CGA-rxw5-m6j3-pxjg
    Fix available
    Packages

    crossplane-provider-aws-datasync

    Summary

    Published
    3 Sept 2026
    CGA-mjqc-wxpw-4fwc
    Fix available
    Packages

    knative-kafka-broker-fips-1.23-controller

    Summary

    Published
    3 Sept 2026
    CGA-pgc8-vc4c-422q
    Fix available
    Packages

    knative-kafka-broker-fips-1.23-controller

    Summary

    Published
    3 Sept 2026
    CGA-4wvg-mqpq-p6hw
    Fix available
    Packages

    kyverno-fips-1.19

    Summary

    Published
    3 Sept 2026
    CGA-fwf2-pwwj-3q54
    Fix available
    Packages

    kyverno-fips-1.19

    Summary

    Published
    3 Sept 2026
    CGA-pfh4-q3m8-jwxr
    Fix available
    Packages

    coder-fips-2.32

    Summary

    Published
    3 Sept 2026
    CGA-fcg4-c3vv-cg4g
    Fix available
    Packages

    coder-fips-2.32

    Summary

    Published
    3 Sept 2026
    CGA-rxvv-xjpp-cx4w
    Fix available
    Packages

    crossplane-provider-azure-purview

    Summary

    Published
    3 Sept 2026