Open Source Vulnerabilities

react-router

TuxCare security update for react-router (1 CVE)

sanitize-html

TuxCare security update for sanitize-html (2 CVEs)

next

TuxCare security update for next (1 CVE)

Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References

argo-cd-fips-3.6

argo-cd-fips-3.6

nuxt

TuxCare security update for nuxt (2 CVEs)

drupal/change_pwd_page

drupal/scheduler

drupal/reset_password_email_otp

drupal/name

drupal/forum_access

drupal/commerce_escrow

nuxt

TuxCare security update for nuxt (2 CVEs)

drupal/commerce_product_alternative

drupal/basket_paypal

drupal/highlight_js

drupal/rest_api_authentication

drupal/workflow_notifications

drupal/simple_oauth

drupal/s3fs_cors

dra-driver-nvidia-gpu-fips

dra-driver-nvidia-gpu-fips

argo-cd-3.6

argo-cd-3.6

drupal/content_synchronizer

drupal/content_synchronizer

next

TuxCare security update for next (1 CVE)

dra-driver-nvidia-gpu-fips

dra-driver-nvidia-gpu-fips

nuxt

TuxCare security update for nuxt (1 CVE)

undici

TuxCare security update for undici (3 CVEs)

argo-cd-3.6

argo-cd-3.6

undici

TuxCare security update for undici (3 CVEs)

drupal/groupexpro

undici

TuxCare security update for undici (1 CVE)

undici

TuxCare security update for undici (1 CVE)

BIG-HKSCS decoding hang on crafted input

minimatch

TuxCare security update for minimatch (1 CVE)

nodemailer

TuxCare security update for nodemailer (1 CVE)

node-forge

TuxCare security update for node-forge (6 CVEs)

follow-redirects

TuxCare security update for follow-redirects (1 CVE)

next

TuxCare security update for next (2 CVEs)

argo-cd-fips-3.6

argo-cd-fips-3.6

elliptic

TuxCare security update for elliptic (2 CVEs)

brace-expansion

TuxCare security update for brace-expansion (3 CVEs)

github.com/basekick-labs/arc

Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735

brace-expansion

TuxCare security update for brace-expansion (1 CVE)