Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2026-107846
    Fix available
    Packages

    Summary

    bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list

    Published
    4 Nov 2026
    CVE-2026-102345
    Fix available
    Packages

    Summary

    Zammad: Stored XSS in ticket article rendering in the new Vue-based interface

    Published
    4 Nov 2026
    CVE-2026-113782
    Fix available
    Packages

    Summary

    ESP-IDF: Stack-Based Out-of-Bounds Write in Thread Border Router ND6 Option Parsing

    Published
    4 Nov 2026
    CGA-5f32-hr3h-qrqr
    Fix available
    Packages

    vgpu-device-manager-fips

    Summary

    Published
    4 Nov 2026
    CGA-qjjw-jp64-7v59
    Fix available
    Packages

    grafana-operator-fips

    Summary

    Published
    4 Nov 2026
    CGA-vg23-45cp-v547
    Fix available
    Packages

    grafana-operator-fips

    Summary

    Published
    4 Nov 2026
    CGA-x6hm-2qcr-9vvj
    Fix available
    Packages

    grafana-operator-fips

    Summary

    Published
    4 Nov 2026
    CGA-wmx2-45j4-7wxq
    Fix available
    Packages

    grafana-operator-fips

    Summary

    Published
    4 Nov 2026
    CGA-2794-995r-cr3f
    Fix available
    Packages

    prometheus-3.15

    Summary

    Published
    4 Nov 2026
    CGA-r7f7-rc4m-8hrj
    Fix available
    Packages

    prometheus-3.15

    Summary

    Published
    4 Nov 2026
    CGA-6289-8vp8-7524
    Fix available
    Packages

    prometheus-3.15

    Summary

    Published
    4 Nov 2026
    CGA-h58v-jfm9-x6c6
    Fix available
    Packages

    prometheus-3.15

    Summary

    Published
    4 Nov 2026
    CGA-6jfc-ch2h-q5cj
    Fix available
    Packages

    prometheus-3.15

    Summary

    Published
    4 Nov 2026
    CGA-7x5g-ff3v-rpqj
    Fix available
    Packages

    prometheus-3.15

    Summary

    Published
    4 Nov 2026
    CGA-x2mf-38cj-rrp9
    Fix available
    Packages

    prometheus-3.15

    Summary

    Published
    4 Nov 2026
    CGA-7x7f-wjj5-7fmm
    Fix available
    Packages

    prometheus-3.15

    Summary

    Published
    4 Nov 2026
    CGA-vcfr-w2f3-rxp6
    Fix available
    Packages

    prometheus-fips-3.15

    Summary

    Published
    4 Nov 2026
    CGA-cf27-69g9-jj53
    Fix available
    Packages

    prometheus-fips-3.15

    Summary

    Published
    4 Nov 2026
    CGA-jjq6-f8w2-9mjf
    Fix available
    Packages

    prometheus-fips-3.15

    Summary

    Published
    4 Nov 2026
    CGA-hw82-rm3x-jrqj
    Fix available
    Packages

    prometheus-fips-3.15

    Summary

    Published
    4 Nov 2026
    CGA-388f-77rq-c9mg
    Fix available
    Packages

    prometheus-fips-3.15

    Summary

    Published
    4 Nov 2026
    CGA-9qx9-x8jj-prh7
    Fix available
    Packages

    prometheus-fips-3.15

    Summary

    Published
    4 Nov 2026
    CGA-hqmr-9x29-3w7j
    Fix available
    Packages

    prometheus-fips-3.15

    Summary

    Published
    4 Nov 2026
    CGA-v45p-p5gg-mv2g
    Fix available
    Packages

    prometheus-fips-3.15

    Summary

    Published
    4 Nov 2026
    CGA-3wp3-q4gx-v85j
    Fix available
    Packages

    kube-state-metrics, kube-state-metrics

    Summary

    Published
    4 Nov 2026
    CGA-vr2g-6h42-5xr5
    Fix available
    Packages

    kube-state-metrics, kube-state-metrics

    Summary

    Published
    4 Nov 2026
    CGA-gmj8-8rf8-m6f7
    Fix available
    Packages

    kube-state-metrics, kube-state-metrics

    Summary

    Published
    4 Nov 2026
    CGA-h3q6-8938-v52g
    Fix available
    Packages

    k8s-sidecar, k8s-sidecar

    Summary

    Published
    4 Nov 2026
    CGA-xj3f-rr53-x263
    Fix available
    Packages

    kube-state-metrics, kube-state-metrics

    Summary

    Published
    4 Nov 2026
    CGA-8gw2-2325-5xp8
    Fix available
    Packages

    k8s-sidecar, k8s-sidecar

    Summary

    Published
    4 Nov 2026
    CGA-ffhc-6779-567j
    Fix available
    Packages

    keda-fips-2.21-metrics-apiserver

    Summary

    Published
    4 Nov 2026
    CGA-45w5-97jv-h7fg
    Fix available
    Packages

    keda-fips-2.21-metrics-apiserver

    Summary

    Published
    4 Nov 2026
    CGA-9qjq-gcq5-7f62
    Fix available
    Packages

    keda-fips-2.21-metrics-apiserver

    Summary

    Published
    4 Nov 2026
    CGA-v6pr-qw58-rgch
    Fix available
    Packages

    keda-fips-2.21-metrics-apiserver

    Summary

    Published
    4 Nov 2026
    CGA-2hq7-9qxq-gvcg
    Fix available
    Packages

    keda-fips-2.21

    Summary

    Published
    4 Nov 2026
    CGA-w3v3-c5gm-62p9
    Fix available
    Packages

    keda-fips-2.21

    Summary

    Published
    4 Nov 2026
    CGA-p4rw-h2hg-r9j3
    Fix available
    Packages

    keda-fips-2.21

    Summary

    Published
    4 Nov 2026
    CGA-x2wp-j8c8-87px
    Fix available
    Packages

    keda-fips-2.21

    Summary

    Published
    4 Nov 2026
    CGA-23f9-3p6g-c3qq
    No fix available
    Packages

    keda-fips-2.21-metrics-apiserver

    Summary

    Published
    4 Nov 2026
    CGA-93pc-9rpv-wf9f
    No fix available
    Packages

    keda-fips-2.21-metrics-apiserver

    Summary

    Published
    4 Nov 2026
    CGA-j5c7-jmg9-g5vm
    No fix available
    Packages

    keda-fips-2.21-metrics-apiserver

    Summary

    Published
    4 Nov 2026
    CGA-wq4q-72q3-c494
    No fix available
    Packages

    keda-fips-2.21-metrics-apiserver

    Summary

    Published
    4 Nov 2026
    CGA-3vq9-xj74-xvvm
    No fix available
    Packages

    keda-fips-2.21

    Summary

    Published
    4 Nov 2026
    CGA-4cjg-m8p2-53rm
    No fix available
    Packages

    keda-fips-2.21

    Summary

    Published
    4 Nov 2026
    Packages

    webkit2gtk, rootio-webkit2gtk

    Summary

    CVE-2026-79020 in webkit2gtk - Patched by Root

    Published
    4 Nov 2026
    Packages

    node-forge

    Summary

    TuxCare security update for node-forge (8 CVEs)

    Published
    4 Nov 2026
    CVE-2026-82033
    Fix available
    Packages

    Summary

    DeepSeek Harness Unauthenticated RPC Command Execution

    Published
    4 Nov 2026
    Packages

    nodemailer

    Summary

    TuxCare security update for nodemailer (1 CVE)

    Published
    4 Nov 2026
    Packages

    minimatch

    Summary

    TuxCare security update for minimatch (1 CVE)

    Published
    4 Nov 2026
    Packages

    follow-redirects

    Summary

    TuxCare security update for follow-redirects (1 CVE)

    Published
    4 Nov 2026