Open Source Vulnerabilities

libvirt, libvirt, libvirt, libvirt, libvirt

Security update for libvirt

file-roller

Security update for file-roller

java-21-openjdk, java-21-openjdk, java-21-openjdk

Security update for java-21-openjdk

openexr, openexr

Security update for openexr

libvirt, libvirt, libvirt, libvirt, libvirt, libvirt

Security update for libvirt

openexr, openexr, openexr, openexr, openexr, openexr, openexr, openexr, openexr, openexr, openexr

Security update for openexr

java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk, java-17-openjdk

Security update for java-17-openjdk

webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4

Security update for webkit2gtk3

libidn

Security update for libidn

java-25-openjdk

Security update for java-25-openjdk

java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk, java-1_8_0-openjdk

Security update for java-1_8_0-openjdk

dracut, dracut, dracut

Security update for dracut

gegl

Security update for gegl

wireshark, wireshark

Security update for wireshark

wireshark, wireshark

Security update for wireshark

emacs, emacs

Security update for emacs

aws-nitro-enclaves-cli, aws-nitro-enclaves-cli

Security update for aws-nitro-enclaves-cli

redis7, redis7

Security update for redis7

redis, redis

Security update for redis

go.etcd.io/etcd/server/v3, rootio-go.etcd.io/etcd/server/v3

CVE-2026-73499 in go.etcd.io/etcd/server/v3 - Patched by Root

org.apache.httpcomponents.core5:httpcore5, org.apache.httpcomponents.core5:httpcore5-h2, org.apache.httpcomponents.core5:httpcore5-parent, org.apache.httpcomponents.core5:httpcore5-reactive, org.apache.httpcomponents.core5:httpcore5-testing

TuxCare security update for org.apache.httpcomponents.core5 (2 CVEs)

org.bouncycastle:bcjmail-jdk15to18, org.bouncycastle:bcjmail-jdk18on, org.bouncycastle:bcmail-jdk15to18, org.bouncycastle:bcmail-jdk18on, org.bouncycastle:bcpg-jdk15to18, org.bouncycastle:bcpg-jdk18on, org.bouncycastle:bcpkix-jdk15to18, org.bouncycastle:bcpkix-jdk18on, org.bouncycastle:bcprov-ext-jdk15to18, org.bouncycastle:bcprov-ext-jdk18on, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bctls-jdk15to18, org.bouncycastle:bctls-jdk18on, org.bouncycastle:bcutil-jdk15to18, org.bouncycastle:bcutil-jdk18on

TuxCare security update for org.bouncycastle (4 CVEs)

openstack-tempest-2025.1

openstack-tempest-2025.1

node-min

node

kibana

Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring

elk

Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring

elasticsearch

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

composer

Composer: Perforce source URL permits P4PORT `rsh:` command execution

openstack-tempest-2025.1

openstack-tempest-2025.1

projeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization

org.apache.commons:commons-configuration2

TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)

org.apache.commons:commons-lang3

TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)

commons-beanutils:commons-beanutils

TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

commons-beanutils:commons-beanutils

TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)

apache-zookeeper

In Eclipse Jetty, the HTTP/1

commons-io:commons-io

TuxCare security update for commons-io:commons-io (1 CVE)

projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgery

FluentCMS PermissionManager.cs GetAccessible authorization

nodejs

FastAdmin User Controller User.php login cross site scripting

liufee FeehiCMS Cookie Validation main-local.php hard-coded key

liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

openagents-org openagents http.py test_default_model server-side request forgery