Open Source Vulnerabilities

docker-compose

CVE-2026-121520 affecting package docker-compose 2.27.0-16

docker-buildx

CVE-2026-121520 affecting package docker-buildx 0.14.0-19

kore, kore, kore, kore, kore, kore

docker.io, docker.io, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app

debezium-connector-db2-3.5, debezium-connector-db2-3.5

debezium-connector-db2-3.5, debezium-connector-db2-3.5

debezium-connector-db2-3.5, debezium-connector-db2-3.5

debezium-connector-db2-3.5, debezium-connector-db2-3.5

debezium-connector-db2-3.5, debezium-connector-db2-3.5

kafka-4.4-openjdk-17

kafka-4.4-openjdk-17

kafka-4.4-openjdk-17

Umami Record API Endpoint route.ts authorization

NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creation

blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens

ZaneOps 1.14.0 before 1.15.2 Cross-Workspace Information Disclosure via ReviewPreviewEnvDeployAPIView

Bagisto before 2.4.5 Stored XSS via RMA Conversation Attachment Upload

RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment

RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report

emailflare before commit cf31f33 Missing Authorization via Inbox Compose Endpoint

emailflare before commit cf31f33 Missing Authorization via /api/keys Routes

SourceHut meta.sr.ht 0.56.11 before 0.89.0 Registration Authorization Bypass via /register/step2

Kore before 4.3.0 Integer Underflow Memory Exhaustion via http_header_recv()

ArcReel Provider Test-Connection Endpoint test server-side request forgery

debezium-connector-db2-3.5, debezium-connector-db2-3.5

debezium-connector-db2-3.5, debezium-connector-db2-3.5

debezium-connector-db2-3.5, debezium-connector-db2-3.5

debezium-connector-db2-3.5, debezium-connector-db2-3.5

debezium-connector-db2-3.5, debezium-connector-db2-3.5

kafka-4.4-openjdk-25

kafka-4.4-openjdk-25

kafka-4.4-openjdk-25

scientific

Superlinear encoding of numbers with large coefficients

scientific

Out-of-bounds read in Eq and Ord on numbers with extreme exponents

miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access control

kafka-4.4-openjdk-25

kafka-4.4-openjdk-25

kafka-4.4-openjdk-25

org.springframework.boot:spring-boot-autoconfigure

TuxCare security update for org.springframework.boot:spring-boot-autoconfigure (1 CVE)

docker-buildx, docker-buildx

docker-buildx, docker-buildx

chromium, chromium, chromium

chromium, chromium, chromium

docker.io, docker.io, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app

docker.io, docker.io, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app

docker.io, docker.io, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app, docker.io, docker.io-app

kafka-fips-4.4

kafka-fips-4.4

kafka-fips-4.4

miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication