Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    org.jsoup:jsoup

    Summary

    TuxCare security update for org.jsoup:jsoup (1 CVE)

    Published
    3 Nov 2026
    Packages

    org.apache.httpcomponents.core5:httpcore5

    Summary

    TuxCare security update for org.apache.httpcomponents.core5:httpcore5 (1 CVE)

    Published
    3 Nov 2026
    Packages

    org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-util

    Summary

    TuxCare security update for 3 packages (2 CVEs)

    Published
    3 Nov 2026
    Packages

    io.netty:netty-codec, io.netty:netty-resolver-dns, io.netty:netty-transport-sctp

    Summary

    TuxCare security update for io.netty (4 CVEs)

    Published
    3 Nov 2026
    Packages

    io.undertow:undertow-core

    Summary

    TuxCare security update for io.undertow:undertow-core (1 CVE)

    Published
    3 Nov 2026
    Packages

    org.springframework.kafka:spring-kafka

    Summary

    TuxCare security update for org.springframework.kafka:spring-kafka (2 CVEs)

    Published
    3 Nov 2026
    Packages

    org.springframework.amqp:spring-amqp

    Summary

    TuxCare security update for org.springframework.amqp:spring-amqp (2 CVEs)

    Published
    3 Nov 2026
    Packages

    gh

    Summary

    Security update for gh

    Published
    3 Nov 2026
    CVE-2026-39379
    Fix available
    Packages

    Summary

    GeoNetwork: Reflected XSS through client-side template injection

    Published
    3 Nov 2026
    Packages

    org.assertj:assertj-core

    Summary

    TuxCare security update for org.assertj:assertj-core (1 CVE)

    Published
    3 Nov 2026
    CVE-2026-46487
    Fix available
    Packages

    Summary

    GeoNetwork: ACL bypass on Elasticsearch search when request body omits query field

    Published
    3 Nov 2026
    CVE-2026-121652
    Fix available
    Packages

    Summary

    Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Published
    3 Nov 2026
    Packages

    org.apache.logging.log4j:log4j-api, org.apache.logging.log4j:log4j-core

    Summary

    TuxCare security update for org.apache.logging.log4j (2 CVEs)

    Published
    3 Nov 2026
    CGA-j35h-8hv3-v8mf
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-8fvv-wqmp-r9xg
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-mpw2-x9h9-j76j
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-f4hh-4xmw-hx6r
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-fgwr-4hh2-vxgg
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CVE-2026-63198
    Fix available
    Packages

    Summary

    traQ: Privilege escalation by OAuth prompt=none request

    Published
    3 Nov 2026
    CGA-f62m-rqmw-qj45
    Fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-ch74-58c5-72mv
    Fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-9hq5-88rm-h869
    Fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-3c2m-cjgx-r9pj
    Fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-3qvw-4v3w-hrqm
    Fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-hw4r-84qg-8hvf
    No fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-7g9g-694f-vx2c
    Fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-fg75-2pwr-wg36
    No fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-cmg7-f59r-hm8q
    No fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    CGA-367j-m65q-q94h
    No fix available
    Packages

    kgateway-2.5

    Summary

    Published
    3 Nov 2026
    Packages

    org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-tribes

    Summary

    TuxCare security update for 5 packages (8 CVEs)

    Published
    3 Nov 2026
    Packages

    io.netty:netty-codec-dns, io.netty:netty-codec-http2, io.netty:netty-codec-mqtt, io.netty:netty-transport-native-epoll, io.netty:netty-transport-native-kqueue

    Summary

    TuxCare security update for io.netty (4 CVEs)

    Published
    3 Nov 2026
    Packages

    org.springframework.security:spring-security-web

    Summary

    TuxCare security update for org.springframework.security:spring-security-web (1 CVE)

    Published
    3 Nov 2026
    CGA-rq5x-pq45-6wc9
    Fix available
    Packages

    filebeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-pcqx-589h-w932
    Fix available
    Packages

    filebeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-v28v-65hg-hp67
    No fix available
    Packages

    filebeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-rmjq-pf5q-jgxc
    Fix available
    Packages

    filebeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-pmv5-c7gp-x7q4
    Fix available
    Packages

    filebeat-9.5

    Summary

    Published
    3 Nov 2026
    CVE-2026-63197
    Fix available
    Packages

    Summary

    traQ: XSS in the User Uploaded File Retrieval API

    Published
    3 Nov 2026
    CGA-7fp3-85pj-g9w2
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-2v5g-329h-3r95
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-h9v4-252q-jjxv
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-x55v-gh52-ch6m
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-8x3r-766x-fx4w
    No fix available
    Packages

    auditbeat-9.5

    Summary

    Published
    3 Nov 2026
    Packages

    org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-util

    Summary

    TuxCare security update for 4 packages (2 CVEs)

    Published
    3 Nov 2026
    CVE-2026-63417
    Fix available
    Packages

    Summary

    Logging Redactor: PII data in str/repr of non primitive objects was not being redacted

    Published
    3 Nov 2026
    Packages

    rqlite

    Summary

    Security update for rqlite

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-63418
    No fix available
    Packages

    monitoring-plugins, monitoring-plugins, monitoring-plugins, monitoring-plugins, monitoring-plugins, monitoring-plugins, monitoring-plugins

    Summary

    Published
    3 Nov 2026
    DEBIAN-CVE-2026-121263
    No fix available
    Packages

    phpmyadmin-motranslator, phpmyadmin-motranslator, phpmyadmin-motranslator

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-121263
    No fix available
    Packages

    phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin, phpmyadmin

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-121627
    No fix available
    Packages

    buku, buku, buku, buku, buku, buku

    Summary

    Published
    3 Nov 2026