Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-mc8m-rr6c-r5qr
    Fix available
    Packages

    @payloadcms/storage-vercel-blob, @payloadcms/storage-vercel-blob

    Summary

    @payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter

    Published
    4 Nov 2026
    Packages

    laravel/framework

    Summary

    TuxCare security update for laravel/framework (1 CVE)

    Published
    4 Nov 2026
    Packages

    elliptic

    Summary

    TuxCare security update for elliptic (2 CVEs)

    Published
    4 Nov 2026
    Packages

    next

    Summary

    TuxCare security update for next (1 CVE)

    Published
    4 Nov 2026
    Packages

    next

    Summary

    TuxCare security update for next (4 CVEs)

    Published
    4 Nov 2026
    USN-9000-1
    Fix available
    Packages

    twisted, twisted, twisted, twisted

    Summary

    twisted vulnerability

    Published
    4 Nov 2026
    Packages

    minimatch

    Summary

    TuxCare security update for minimatch (1 CVE)

    Published
    4 Nov 2026
    CGA-jgq7-7rmq-4rjf
    Fix available
    Packages

    argo-cd-3.6-compat

    Summary

    Published
    4 Nov 2026
    CGA-xjfg-26qm-637w
    No fix available
    Packages

    argo-cd-3.6-compat

    Summary

    Published
    4 Nov 2026
    MGASA-2026-0573
    Fix available
    Packages

    minetest

    Summary

    Updated minetest package fixes security vulnerabilities

    Published
    4 Nov 2026
    DEBIAN-CVE-2026-122032
    No fix available
    Packages

    spip, spip

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    freerdp2, freerdp3, freerdp3

    Summary

    Published
    4 Nov 2026
    Packages

    apt, apt, apt

    Summary

    Published
    4 Nov 2026
    Packages

    apt

    Summary

    Published
    4 Nov 2026
    Packages

    jackson-dataformat-cbor, jackson-dataformat-cbor, jackson-dataformats-binary

    Summary

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-8927 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2025-0725 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2025-9086 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-10536 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-11856 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-8924 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-12064 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-13608 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-18924 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-19931 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-5773 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-6276 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-80230 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-80231 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-82209 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-8286 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-8932 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-9079 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    curl, rootio-curl

    Summary

    CVE-2026-9547 in curl - Patched by Root

    Published
    4 Nov 2026
    Packages

    org.springframework.boot:spring-boot, org.springframework.boot:spring-boot-actuator-autoconfigure, org.springframework.boot:spring-boot-autoconfigure, org.springframework.boot:spring-boot-loader

    Summary

    TuxCare security update for org.springframework.boot (5 CVEs)

    Published
    4 Nov 2026
    GHSA-3cgg-c5pp-57h6
    Fix available
    Packages

    odf-kit

    Summary

    odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values

    Published
    4 Nov 2026