Open Source Vulnerabilities

wireshark, wireshark

Security update for wireshark

wireshark, wireshark

Security update for wireshark

emacs, emacs

Security update for emacs

aws-nitro-enclaves-cli, aws-nitro-enclaves-cli

Security update for aws-nitro-enclaves-cli

redis7, redis7

Security update for redis7

redis, redis

Security update for redis

go.etcd.io/etcd/server/v3, rootio-go.etcd.io/etcd/server/v3

CVE-2026-73499 in go.etcd.io/etcd/server/v3 - Patched by Root

org.apache.httpcomponents.core5:httpcore5, org.apache.httpcomponents.core5:httpcore5-h2, org.apache.httpcomponents.core5:httpcore5-parent, org.apache.httpcomponents.core5:httpcore5-reactive, org.apache.httpcomponents.core5:httpcore5-testing

TuxCare security update for org.apache.httpcomponents.core5 (2 CVEs)

org.bouncycastle:bcjmail-jdk15to18, org.bouncycastle:bcjmail-jdk18on, org.bouncycastle:bcmail-jdk15to18, org.bouncycastle:bcmail-jdk18on, org.bouncycastle:bcpg-jdk15to18, org.bouncycastle:bcpg-jdk18on, org.bouncycastle:bcpkix-jdk15to18, org.bouncycastle:bcpkix-jdk18on, org.bouncycastle:bcprov-ext-jdk15to18, org.bouncycastle:bcprov-ext-jdk18on, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bctls-jdk15to18, org.bouncycastle:bctls-jdk18on, org.bouncycastle:bcutil-jdk15to18, org.bouncycastle:bcutil-jdk18on

TuxCare security update for org.bouncycastle (4 CVEs)

openstack-tempest-2025.1

openstack-tempest-2025.1

node-min

node

kibana

Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring

elk

Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring

elasticsearch

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

composer

Composer: Perforce source URL permits P4PORT `rsh:` command execution

openstack-tempest-2025.1

openstack-tempest-2025.1

projeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization

org.apache.commons:commons-configuration2

TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)

org.apache.commons:commons-lang3

TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)

commons-beanutils:commons-beanutils

TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

io.airlift:aircompressor

TuxCare security update for io.airlift:aircompressor (1 CVE)

commons-beanutils:commons-beanutils

TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)

apache-zookeeper

In Eclipse Jetty, the HTTP/1

commons-io:commons-io

TuxCare security update for commons-io:commons-io (1 CVE)

projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgery

FluentCMS PermissionManager.cs GetAccessible authorization

nodejs

sfturing ssm_pro Order Endpoint OrderController.java cross site scripting

sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization

sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization

sfturing hosp_order Order Controller OrderController.java authorization

sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change

FastAdmin User Controller User.php login cross site scripting

liufee FeehiCMS Cookie Validation main-local.php hard-coded key

liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery

liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

openagents-org openagents http.py test_default_model server-side request forgery

bluez, bluez, bluez, bluez, bluez, bluez

exiv2, exiv2, exiv2, exiv2, exiv2, exiv2

exiv2, exiv2, exiv2, exiv2, exiv2, exiv2

gfs2-utils, gfs2-utils, gfs2-utils, gfs2-utils, gfs2-utils, gfs2-utils

policykit-1, policykit-1, policykit-1, policykit-1, policykit-1, policykit-1, policykit-1