Open Source Vulnerabilities
ID
Packages
Summary
Published
Attributes
CVE-2026-120415
Fix available
Packages
Summary
undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping
Published
6 Nov 2026undici vulnerable to cross-origin credential disclosure via array-of-tuples headers bypassing redirect stripping
6 Nov 2026
Fix available
CGA-hg4f-4gxj-2637
No fix available
Packages
mattermost-11.1, mattermost-11.1
Summary
Published
6 Nov 2026CGA-pmx2-85jm-7q5x
No fix available
Packages
mattermost-11.1, mattermost-11.1
Summary
Published
6 Nov 2026CGA-h8mr-p4pq-7f5q
No fix available
Packages
mattermost-11.1, mattermost-11.1
Summary
Published
6 Nov 2026CGA-gcc2-v9h7-h3g8
No fix available
Packages
mattermost-11.1, mattermost-11.1
Summary
Published
6 Nov 2026CGA-g664-5pwp-2g85
No fix available
Packages
keda-fips-2.17-metrics-apiserver
Summary
Published
6 Nov 2026CGA-q2fv-cvcf-m6qx
No fix available
Packages
keda-fips-2.17-metrics-apiserver
Summary
Published
6 Nov 2026CGA-f3r8-83f3-vm8c
No fix available
Packages
keda-fips-2.16-metrics-apiserver
Summary
Published
6 Nov 2026CGA-vx64-p365-4pf7
No fix available
Packages
keda-fips-2.16-metrics-apiserver
Summary
Published
6 Nov 2026
