Open Source Vulnerabilities

tempo

Security fix for GO-2026-5932 applied in: tempo 3.1.1-r2

apache-superset, apache-superset

Pillow is a Python imaging library

apache-superset, apache-superset

Security fix for GHSA-2g87-pp6c-29x5 applied in: apache-superset 2021.36.5-r0, apache-superset 2021.38.2-r0

apache-superset, apache-superset

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

apache-superset, apache-superset

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

apache-superset, apache-superset

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

apache-superset, apache-superset

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

apache-superset, apache-superset

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

apache-superset, apache-superset

Pillow is a Python imaging library

apache-superset, apache-superset, apache-superset

dnspython is a DNS toolkit for Python

apache-superset, apache-superset

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

apache-superset

This affects the package celery before 5

apache-superset, apache-superset

Pillow is a Python imaging library

apache-superset, apache-superset

Pillow is a Python imaging library

apache-superset, apache-superset

Pillow is a Python imaging library

apache-superset

Pillow is a Python imaging library

keda

Prometheus is an open-source monitoring system and time series database

keda

Prometheus is an open-source monitoring system and time series database

keda

Prometheus is an open-source monitoring system and time series database

miniforge3, miniforge3

urllib3 is an HTTP client library for Python

miniforge3, miniforge3

urllib3 is an HTTP client library for Python

miniforge3, miniforge3

urllib3 is an HTTP client library for Python

miniforge3, miniforge3

Security fix for GHSA-6v7p-g79w-8964 applied in: miniforge3 26.7.2.1-r0

miniforge3, miniforge3

MessagePack is the serializer implementation for Python msgpack

miniforge3, miniforge3

MessagePack is the serializer implementation for Python msgpack

aws-sdk

TuxCare security update for aws-sdk (1 CVE)

eco-java-gradle-8.14.1

eco-java-gradle-8.13

eco-java-gradle-7.6.5

org.xmlunit:xmlunit-core

TuxCare security update for org.xmlunit:xmlunit-core (1 CVE)

py3.12-torch-2.7-cuda-12.8

laspy LAS File lasreader.py memory allocation

py3.13-torch-2.6-cuda-12.4

py3.10-torch-2.7-cuda-12.8

eco-java-gradle-7.6.6

eco-java-gradle-8.14.4

express

TuxCare security update for express (2 CVEs)

eco-java-gradle-9.3.0

eco-java-gradle-8.14

py3.11-torch-2.7-cuda-12.8

tpm2.0-tools

tpm2.0-tools-5.8-1.1 on GA media

scribus

scribus-1.6.7-1.1 on GA media

rsync

rsync-3.5.2-1.1 on GA media

qt6-qt5compat

libQt6Core5Compat6-6.12.0-2.1 on GA media

qt6-httpserver

libQt6HttpServer6-6.12.0-2.1 on GA media

python-tornado6

python313-tornado6-6.6-1.1 on GA media

python-autobahn

python313-autobahn-26.11.1-1.1 on GA media

proftpd

proftpd-1.3.9e-1.1 on GA media

mongo-c-driver

bson-devel-2.5.8-1.1 on GA media

java-25-openj9

java-25-openj9-25.0.5.0-1.1 on GA media