Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-59rf-x38h-vj6q
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-69qc-g5xg-jw2w
    Fix available
    Packages

    kyverno-reports-controller-1.16, kyverno-reports-controller-1.16

    Summary

    Published
    3 Sept 2026
    CGA-7762-7wj9-96vh
    Fix available
    Packages

    crossplane-2.1-crank, crossplane-2.1-crank

    Summary

    Published
    3 Sept 2026
    CGA-v9vm-x6w4-fmv3
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-wfg7-vh6w-8vg5
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-6mq2-hv3m-734r
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-g978-c5j5-q932
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-g9xr-r52j-9fc8
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-xpx2-2h2c-cjc8
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-pmrw-4935-wgr6
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-69ch-77v9-fj3q
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    CGA-7wx6-7cvj-x995
    No fix available
    Packages

    eco-java-gradle

    Summary

    Published
    3 Sept 2026
    GHSA-653q-5476-x79g
    Fix available
    Packages

    orval

    Summary

    Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

    Published
    3 Sept 2026
    DEBIAN-CVE-2026-84968
    No fix available
    Packages

    php-mongodb, php-mongodb, php-mongodb

    Summary

    Published
    3 Sept 2026
    CGA-h89r-cchx-2wq9
    Fix available
    Packages

    envoy-gateway-fips-1.6-egctl

    Summary

    Published
    3 Sept 2026
    CGA-6ffm-69rr-c62c
    Fix available
    Packages

    envoy-gateway-fips-1.6-egctl

    Summary

    Published
    3 Sept 2026
    UBUNTU-CVE-2026-84968
    No fix available
    Packages

    php-mongodb, php-mongodb, php-mongodb, php-mongodb, php-mongodb, php-mongodb

    Summary

    Published
    3 Sept 2026
    CGA-9cf6-h3qj-c2wm
    Fix available
    Packages

    rke2-runtime-1.36

    Summary

    Published
    3 Sept 2026
    CGA-9wrq-qhj9-8mfv
    Fix available
    Packages

    rke2-runtime-1.36

    Summary

    Published
    3 Sept 2026
    CVE-2026-49456
    Fix available
    Packages

    Summary

    Waku: Open Redirect via `unstable_redirect` Helper

    Published
    3 Sept 2026
    CVE-2026-49455
    Fix available
    Packages

    Summary

    Waku: Cross-Origin CSRF on RSC Server Action Dispatch

    Published
    3 Sept 2026
    Packages

    org.springframework:spring, org.springframework:spring-aop, org.springframework:spring-aspects, org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-context-indexer, org.springframework:spring-context-support, org.springframework:spring-core, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-instrument, org.springframework:spring-jcl, org.springframework:spring-jdbc, org.springframework:spring-jms, org.springframework:spring-messaging, org.springframework:spring-orm, org.springframework:spring-oxm, org.springframework:spring-r2dbc, org.springframework:spring-test, org.springframework:spring-tx, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket

    Summary

    TuxCare security update for org.springframework (4 CVEs)

    Published
    3 Sept 2026
    MINI-hpjh-v6c4-5p9w
    No fix available
    Packages

    loki-fips-3.5, loki-fips-3.5-canary, loki-fips-3.5-logcli, loki-fips-3.5-promtail

    Summary

    Published
    3 Sept 2026
    MINI-vx3h-rr5x-4ccg
    No fix available
    Packages

    loki-fips-3.5, loki-fips-3.5-canary, loki-fips-3.5-logcli, loki-fips-3.5-promtail

    Summary

    Published
    3 Sept 2026
    MINI-jf3r-w64g-68mh
    No fix available
    Packages

    loki-fips-3.4, loki-fips-3.4-canary, loki-fips-3.4-logcli, loki-fips-3.4-promtail

    Summary

    Published
    3 Sept 2026
    MINI-x79w-7xj8-r3jg
    No fix available
    Packages

    loki-fips-3.4, loki-fips-3.4-canary, loki-fips-3.4-logcli, loki-fips-3.4-promtail

    Summary

    Published
    3 Sept 2026
    GHSA-6437-gxhq-pqv8
    Fix available
    Packages

    orval

    Summary

    Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

    Published
    3 Sept 2026
    CGA-crwp-hqrv-3cfg
    Fix available
    Packages

    opentelemetry-collector-k8s-fips

    Summary

    Published
    3 Sept 2026
    CGA-hghv-g6rf-4cvm
    Fix available
    Packages

    opentelemetry-collector-k8s-fips

    Summary

    Published
    3 Sept 2026
    MINI-6jf8-j8xg-2mm9
    No fix available
    Packages

    loki-3.5, loki-3.5-canary, loki-3.5-logcli, loki-3.5-promtail

    Summary

    Published
    3 Sept 2026
    MINI-wj7h-2924-2529
    No fix available
    Packages

    loki-3.5, loki-3.5-canary, loki-3.5-logcli, loki-3.5-promtail

    Summary

    Published
    3 Sept 2026
    MINI-98f7-8j8g-7fr8
    No fix available
    Packages

    loki-3.4, loki-3.4-canary, loki-3.4-logcli, loki-3.4-promtail

    Summary

    Published
    3 Sept 2026
    MINI-jcjj-4vvw-52r9
    No fix available
    Packages

    loki-3.4, loki-3.4-canary, loki-3.4-logcli, loki-3.4-promtail

    Summary

    Published
    3 Sept 2026
    MINI-5qcr-xj6w-xpv8
    No fix available
    Packages

    logcli, loki, loki-canary, promtail

    Summary

    Published
    3 Sept 2026
    MINI-ff64-4h2x-58jx
    No fix available
    Packages

    logcli, loki, loki-canary, promtail

    Summary

    Published
    3 Sept 2026
    MINI-f5mx-wvqh-vvwx
    No fix available
    Packages

    logto-1.39

    Summary

    Published
    3 Sept 2026
    MINI-j2x3-8jf9-w7mr
    No fix available
    Packages

    logto-1.39

    Summary

    Published
    3 Sept 2026
    MINI-m2mq-mgv5-mq9h
    No fix available
    Packages

    logto-1.39

    Summary

    Published
    3 Sept 2026
    MINI-m99c-f493-6w9v
    No fix available
    Packages

    logto-1.39

    Summary

    Published
    3 Sept 2026
    MINI-wm59-c8vv-gfq4
    No fix available
    Packages

    logto-1.39

    Summary

    Published
    3 Sept 2026
    MINI-8497-x9jj-x597
    No fix available
    Packages

    logstash-9.3, logstash-9.3-with-output-opensearch

    Summary

    Published
    3 Sept 2026
    CVE-2026-85028
    Fix available
    Packages

    Summary

    Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

    Published
    3 Sept 2026
    MINI-vvxw-6wqp-6c28
    No fix available
    Packages

    logstash-9.2, logstash-9.2-with-output-opensearch

    Summary

    Published
    3 Sept 2026
    MINI-g6fm-x62h-338v
    No fix available
    Packages

    logstash-9.1, logstash-9.1-with-output-opensearch

    Summary

    Published
    3 Sept 2026
    MINI-crm6-r22w-vq2x
    No fix available
    Packages

    logstash-9.0, logstash-9.0-with-output-opensearch

    Summary

    Published
    3 Sept 2026
    MINI-gvg5-h778-pc73
    No fix available
    Packages

    logstash-9, logstash-9-with-output-opensearch

    Summary

    Published
    3 Sept 2026
    MINI-3qgm-rhmq-5jh9
    No fix available
    Packages

    logstash-8.18, logstash-8.18-with-output-opensearch

    Summary

    Published
    3 Sept 2026
    MINI-j2x4-55jq-c48h
    No fix available
    Packages

    logstash-8, logstash-8-with-output-opensearch

    Summary

    Published
    3 Sept 2026
    MGASA-2026-0372
    Fix available
    Packages

    python-gitpython

    Summary

    Updated python-gitpython packages fix security vulnerabilities

    Published
    3 Sept 2026
    MGASA-2026-0373
    Fix available
    Packages

    libopenmpt, libopenmpt

    Summary

    Updated libopenmpt packages fix security vulnerabilities

    Published
    3 Sept 2026