Open Source Vulnerabilities

go.etcd.io/etcd/server/v3, rootio-go.etcd.io/etcd/server/v3

CVE-2026-73499 in go.etcd.io/etcd/server/v3 - Patched by Root

org.apache.httpcomponents.core5:httpcore5, org.apache.httpcomponents.core5:httpcore5-h2, org.apache.httpcomponents.core5:httpcore5-parent, org.apache.httpcomponents.core5:httpcore5-reactive, org.apache.httpcomponents.core5:httpcore5-testing

TuxCare security update for org.apache.httpcomponents.core5 (2 CVEs)

org.bouncycastle:bcjmail-jdk15to18, org.bouncycastle:bcjmail-jdk18on, org.bouncycastle:bcmail-jdk15to18, org.bouncycastle:bcmail-jdk18on, org.bouncycastle:bcpg-jdk15to18, org.bouncycastle:bcpg-jdk18on, org.bouncycastle:bcpkix-jdk15to18, org.bouncycastle:bcpkix-jdk18on, org.bouncycastle:bcprov-ext-jdk15to18, org.bouncycastle:bcprov-ext-jdk18on, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bctls-jdk15to18, org.bouncycastle:bctls-jdk18on, org.bouncycastle:bcutil-jdk15to18, org.bouncycastle:bcutil-jdk18on

TuxCare security update for org.bouncycastle (4 CVEs)

openstack-tempest-2025.1

openstack-tempest-2025.1

node-min

node

kibana

Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring

elk

Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring

elasticsearch

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

composer

Composer: Perforce source URL permits P4PORT `rsh:` command execution

openstack-tempest-2025.1

openstack-tempest-2025.1

projeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization

org.apache.commons:commons-configuration2

TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)

org.apache.commons:commons-lang3

TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)

commons-beanutils:commons-beanutils

TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

commons-beanutils:commons-beanutils

TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)

apache-zookeeper

In Eclipse Jetty, the HTTP/1

commons-io:commons-io

TuxCare security update for commons-io:commons-io (1 CVE)

projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgery

FluentCMS PermissionManager.cs GetAccessible authorization

nodejs

FastAdmin User Controller User.php login cross site scripting

liufee FeehiCMS Cookie Validation main-local.php hard-coded key

liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

openagents-org openagents http.py test_default_model server-side request forgery

exiv2, exiv2, exiv2, exiv2, exiv2, exiv2

exiv2, exiv2, exiv2, exiv2, exiv2, exiv2

gfs2-utils, gfs2-utils, gfs2-utils, gfs2-utils, gfs2-utils, gfs2-utils

bluez, bluez, bluez, bluez, bluez, bluez

policykit-1, policykit-1, policykit-1, policykit-1, policykit-1, policykit-1, policykit-1

kimi-code

kimi-code-0.41.0-1.1 on GA media

GraphicsMagick

GraphicsMagick-1.3.48-2.1 on GA media

gh

gh-2.100.0-1.1 on GA media

NetworkManager

NetworkManager-1.56.1-4.1 on GA media

amazon-ssm-agent

amazon-ssm-agent-3.3.5226.0-1.1 on GA media

cadvisor

cadvisor-0.60.5-3.1 on GA media

curl

curl-8.22.0-1.1 on GA media

distribution

distribution-registry-3.1.1-6.1 on GA media

google-guest-agent

google-guest-agent-20260903.00-1.1 on GA media

hauler

hauler-2.1.0-3.1 on GA media

insighttoolkit

insighttoolkit-devel-5.4.7-1.1 on GA media

jsoup

jsoup-1.23.2-1.1 on GA media

kernel-source

kernel-devel-7.2.3-1.1 on GA media

keybase-client

kbfs-6.6.3-4.1 on GA media