Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    apache-superset, apache-superset, apache-superset

    Summary

    PyJWT is a JSON Web Token implementation in Python

    Published
    3 Nov 2026
    Packages

    apache-superset, apache-superset, apache-superset

    Summary

    PyJWT is a Python implementation of RFC 7519

    Published
    3 Nov 2026
    Packages

    rabbitmq-cluster-operator

    Summary

    When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request

    Published
    3 Nov 2026
    Packages

    rabbitmq-cluster-operator

    Summary

    malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...

    Published
    3 Nov 2026
    Packages

    rabbitmq-cluster-operator

    Summary

    Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing

    Published
    3 Nov 2026
    Packages

    rabbitmq-cluster-operator

    Summary

    HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently

    Published
    3 Nov 2026
    Packages

    rabbitmq-cluster-operator

    Summary

    HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

    Published
    3 Nov 2026
    Packages

    rabbitmq-messaging-topology-operator

    Summary

    OpenTelemetry-Go is the Go implementation of OpenTelemetry

    Published
    3 Nov 2026
    Packages

    rabbitmq-messaging-topology-operator, rabbitmq-messaging-topology-operator

    Summary

    gRPC-Go is the Go language implementation of gRPC

    Published
    3 Nov 2026
    Packages

    rabbitmq-messaging-topology-operator, rabbitmq-messaging-topology-operator

    Summary

    gRPC-Go is the Go language implementation of gRPC

    Published
    3 Nov 2026
    Packages

    grafana

    Summary

    vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...

    Published
    3 Nov 2026
    Packages

    grafana

    Summary

    Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy

    Published
    3 Nov 2026
    Packages

    sonarqube

    Summary

    Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

    Published
    3 Nov 2026
    Packages

    sonarqube, sonarqube

    Summary

    opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API

    Published
    3 Nov 2026
    SUSE-SU-2026:5053-1
    Fix available
    Packages

    kernel-livepatch-SLE15-SP6_Update_29

    Summary

    Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

    Published
    3 Nov 2026
    CGA-j3hg-g6xx-ppg5
    No fix available
    Packages

    grafana-13.0, grafana-13.0

    Summary

    Published
    3 Nov 2026
    DEBIAN-CVE-2026-120830
    No fix available
    Packages

    libslirp, libslirp, libslirp

    Summary

    Published
    3 Nov 2026
    AZL-112679
    No fix available
    Packages

    libslirp

    Summary

    CVE-2026-120830 affecting package libslirp 4.9.6-1

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-120830
    No fix available
    Packages

    libslirp, libslirp, libslirp, libslirp, libslirp

    Summary

    Published
    3 Nov 2026
    CVE-2026-120833
    Fix available
    Packages

    Summary

    labbench before 0.46.1 Deserialization of Untrusted Data via read() Pickle Auto-Dispatch

    Published
    3 Nov 2026
    Packages

    nuxi

    Summary

    TuxCare security update for nuxi (1 CVE)

    Published
    3 Nov 2026
    Packages

    nuxi

    Summary

    TuxCare security update for nuxi (3 CVEs)

    Published
    3 Nov 2026
    Packages

    nuxi

    Summary

    TuxCare security update for nuxi (1 CVE)

    Published
    3 Nov 2026
    Packages

    nuxi

    Summary

    TuxCare security update for nuxi (3 CVEs)

    Published
    3 Nov 2026
    Packages

    nuxi

    Summary

    TuxCare security update for nuxi (2 CVEs)

    Published
    3 Nov 2026
    Packages

    nuxi

    Summary

    TuxCare security update for nuxi (1 CVE)

    Published
    3 Nov 2026
    RLSA-2026:85930
    Fix available
    Packages

    python-urllib3

    Summary

    Important: python-urllib3 security update

    Published
    3 Nov 2026
    SUSE-SU-2026:5052-1
    Fix available
    Packages

    kgraft-patch-SLE12-SP5_Update_83

    Summary

    Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

    Published
    3 Nov 2026
    RLSA-2026:85917
    Fix available
    Packages

    perl, perl-Algorithm-Diff, perl-Algorithm-Diff, perl-Algorithm-Diff, perl-Algorithm-Diff, perl-Archive-Tar, perl-Archive-Zip, perl-Archive-Zip, perl-autodie, perl-autodie, perl-bignum, perl-bignum, perl-bignum, perl-Carp, perl-Carp, perl-Carp, perl-Compress-Bzip2, perl-Compress-Bzip2, perl-Compress-Raw-Bzip2, perl-Compress-Raw-Bzip2, perl-Compress-Raw-Lzma, perl-Compress-Raw-Lzma, perl-Compress-Raw-Zlib, perl-Compress-Raw-Zlib, perl-Config-Perl-V, perl-Config-Perl-V, perl-Config-Perl-V, perl-constant, perl-constant, perl-constant, perl-constant, perl-CPAN, perl-CPAN, perl-CPAN-DistnameInfo, perl-CPAN-DistnameInfo, perl-CPAN-DistnameInfo, perl-CPAN-DistnameInfo, perl-CPAN-DistnameInfo, perl-CPAN-DistnameInfo, perl-CPAN-DistnameInfo, perl-CPAN-DistnameInfo, perl-CPAN-DistnameInfo, perl-CPAN-Meta, perl-CPAN-Meta, perl-CPAN-Meta, perl-CPAN-Meta, perl-CPAN-Meta-Requirements, perl-CPAN-Meta-Requirements, perl-CPAN-Meta-Requirements, perl-CPAN-Meta-Requirements, perl-CPAN-Meta-YAML, perl-CPAN-Meta-YAML, perl-CPAN-Meta-YAML, perl-CPAN-Meta-YAML, perl-Data-Dumper, perl-Data-Dumper, perl-Data-Dumper, perl-Data-OptList, perl-Data-OptList, perl-Data-OptList, perl-Data-OptList, perl-Data-Section, perl-Data-Section, perl-Data-Section, perl-DB_File, perl-DB_File, perl-Devel-PPPort, perl-Devel-PPPort, perl-Devel-Size, perl-Devel-Size, perl-Devel-Size, perl-Digest, perl-Digest, perl-Digest-MD5, perl-Digest-MD5, perl-Digest-SHA, perl-Digest-SHA, perl-Digest-SHA, perl-Digest-SHA, perl-Encode, perl-Encode, perl-Encode-Locale, perl-Encode-Locale, perl-Encode-Locale, perl-Encode-Locale, perl-Encode-Locale, perl-Encode-Locale, perl-Env, perl-Env, perl-Env, perl-Env, perl-experimental, perl-experimental, perl-Exporter, perl-Exporter, perl-ExtUtils-CBuilder, perl-ExtUtils-CBuilder, perl-ExtUtils-Install, perl-ExtUtils-Install, perl-ExtUtils-MakeMaker, perl-ExtUtils-MakeMaker, perl-ExtUtils-Manifest, perl-ExtUtils-Manifest, perl-ExtUtils-ParseXS, perl-ExtUtils-ParseXS, perl-ExtUtils-ParseXS, perl-Fedora-VSP, perl-Fedora-VSP, perl-Fedora-VSP, perl-Fedora-VSP, perl-File-Fetch, perl-File-Fetch, perl-File-HomeDir, perl-File-HomeDir, perl-File-HomeDir, perl-File-Path, perl-File-Path, perl-File-Path, perl-File-Temp, perl-File-Temp, perl-File-Which, perl-File-Which, perl-File-Which, perl-Filter, perl-Filter, perl-Filter-Simple, perl-Filter-Simple, perl-generators, perl-generators, perl-Getopt-Long, perl-Getopt-Long, perl-HTTP-Tiny, perl-HTTP-Tiny, perl-Importer, perl-Importer, perl-Importer, perl-inc-latest, perl-inc-latest, perl-inc-latest, perl-inc-latest, perl-IO-Compress, perl-IO-Compress-Lzma, perl-IO-Compress-Lzma, perl-IO-Socket-IP, perl-IO-Socket-IP, perl-IPC-Cmd, perl-IPC-Cmd, perl-IPC-Cmd, perl-IPC-System-Simple, perl-IPC-System-Simple, perl-IPC-SysV, perl-IPC-SysV, perl-JSON-PP, perl-JSON-PP, perl-JSON-PP, perl-libnet, perl-libnet, perl-Locale-Maketext, perl-Locale-Maketext, perl-Locale-Maketext, perl-local-lib, perl-local-lib, perl-local-lib, perl-Math-BigInt, perl-Math-BigInt, perl-Math-BigInt, perl-Math-BigInt-FastCalc, perl-Math-BigInt-FastCalc, perl-Math-BigInt-FastCalc, perl-Math-BigRat, perl-Math-BigRat, perl-Math-BigRat, perl-Math-BigRat, perl-MIME-Base64, perl-MIME-Base64, perl-MIME-Base64, perl-MIME-Base64, perl-Module-Build, perl-Module-Build, perl-Module-CoreList, perl-Module-CoreList, perl-Module-Load, perl-Module-Load, perl-Module-Load-Conditional, perl-Module-Load-Conditional, perl-Module-Metadata, perl-Module-Metadata, perl-Module-Metadata, perl-MRO-Compat, perl-MRO-Compat, perl-MRO-Compat, perl-MRO-Compat, perl-Object-HashBase, perl-Object-HashBase, perl-Package-Generator, perl-Package-Generator, perl-Package-Generator, perl-Package-Generator, perl-Params-Check, perl-Params-Check, perl-Params-Check, perl-Params-Check, perl-Params-Util, perl-Params-Util, perl-parent, perl-parent, perl-PathTools, perl-PathTools, perl-PathTools, perl-perlfaq, perl-perlfaq, perl-PerlIO-via-QuotedPrint, perl-PerlIO-via-QuotedPrint, perl-Perl-OSType, perl-Perl-OSType, perl-Perl-OSType, perl-Perl-OSType, perl-Pod-Checker, perl-Pod-Checker, perl-Pod-Escapes, perl-Pod-Escapes, perl-Pod-Escapes, perl-Pod-Escapes, perl-podlators, perl-podlators, perl-Pod-Parser, perl-Pod-Parser, perl-Pod-Parser, perl-Pod-Parser, perl-Socket, perl-Socket, perl-Pod-Perldoc, perl-Pod-Perldoc, perl-Pod-Simple, perl-Pod-Simple, perl-Pod-Usage, perl-Pod-Usage, perl-Scalar-List-Utils, perl-Scalar-List-Utils, perl-Software-License, perl-Software-License, perl-Software-License, perl-Storable, perl-Storable, perl-Sub-Exporter, perl-Sub-Exporter, perl-Sub-Install, perl-Sub-Install, perl-Sub-Install, perl-Sub-Install, perl-Sys-Syslog, perl-Sys-Syslog, perl-Sys-Syslog, perl-Term-ANSIColor, perl-Term-ANSIColor, perl-Term-Cap, perl-Term-Cap, perl-Term-Cap, perl-Term-Cap, perl-Term-Table, perl-Term-Table, perl-Term-Table, perl-Test-Harness, perl-Test-Harness, perl-Test-Harness, perl-Test-Harness, perl-Test-Simple, perl-Test-Simple, perl-Text-Balanced, perl-Text-Balanced, perl-Text-Diff, perl-Text-Diff, perl-Text-Diff, perl-Text-Glob, perl-Text-Glob, perl-Text-Glob, perl-Text-Glob, perl-Text-ParseWords, perl-Text-ParseWords, perl-Text-ParseWords, perl-Text-ParseWords, perl-Text-Tabs+Wrap, perl-Text-Tabs+Wrap, perl-Text-Tabs+Wrap, perl-Text-Tabs+Wrap, perl-Text-Template, perl-Text-Template, perl-Text-Template, perl-Thread-Queue, perl-Thread-Queue, perl-threads, perl-threads, perl-threads-shared, perl-threads-shared, perl-Time-HiRes, perl-Time-HiRes, perl-Time-Local, perl-Time-Local, perl-Unicode-Collate, perl-Unicode-Collate, perl-Unicode-Normalize, perl-Unicode-Normalize, perl-URI, perl-version, perl-version

    Summary

    Moderate: perl:5.32 security update

    Published
    3 Nov 2026
    ECHO-87c7-d44b-cae1
    Fix available
    Packages

    @hono/node-server

    Summary

    Published
    3 Nov 2026
    CVE-2026-120830
    Fix available
    Packages

    Summary

    Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure

    Published
    3 Nov 2026
    Packages

    tftp

    Summary

    tftp-5.4-1.1 on GA media

    Published
    3 Nov 2026
    Packages

    tesseract-ocr

    Summary

    libtesseract5-5.5.4-2.1 on GA media

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-18204
    No fix available
    Packages

    qemu, qemu, qemu, qemu, qemu, qemu, qemu, qemu-hwe, qemu, qemu-hwe

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-18410
    No fix available
    Packages

    qemu, qemu, qemu, qemu, qemu, qemu, qemu, qemu-hwe, qemu, qemu-hwe

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-18609
    No fix available
    Packages

    qemu, qemu, qemu, qemu, qemu, qemu, qemu, qemu-hwe, qemu, qemu-hwe

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-97889
    No fix available
    Packages

    qemu, qemu, qemu, qemu, qemu, qemu, qemu, qemu-hwe, qemu, qemu-hwe

    Summary

    Published
    3 Nov 2026
    ALSA-2026:94485
    Fix available
    Packages

    cockpit, cockpit-bridge, cockpit-doc, cockpit-system, cockpit-ws

    Summary

    Moderate: cockpit security, bug fix, and enhancement update

    Published
    3 Nov 2026
    ALSA-2026:94500
    Fix available
    Packages

    fence-agents-aliyun, fence-agents-all, fence-agents-amt-ws, fence-agents-apc, fence-agents-apc-snmp, fence-agents-aws, fence-agents-azure-arm, fence-agents-bladecenter, fence-agents-cisco-ucs, fence-agents-common, fence-agents-compute, fence-agents-drac5, fence-agents-gce, fence-agents-hpblade, fence-agents-ibm-powervs, fence-agents-ibm-vpc, fence-agents-ibmblade, fence-agents-ifmib, fence-agents-ilo-moonshot, fence-agents-ilo-mp, fence-agents-kdump, fence-agents-kubevirt, fence-agents-lpar, fence-agents-mpath, fence-agents-nutanix-ahv, fence-agents-openstack, fence-agents-redfish, fence-agents-rhevm, fence-agents-rsa, fence-agents-scsi, fence-agents-virsh, fence-agents-vmware-rest, fence-virt, fence-virtd-libvirt, fence-virtd-multicast, fence-virtd-serial, ha-cloud-support

    Summary

    Critical: fence-agents security update

    Published
    3 Nov 2026
    ALSA-2026:94501
    Fix available
    Packages

    fence-agents-aliyun, fence-agents-all, fence-agents-amt-ws, fence-agents-apc, fence-agents-apc-snmp, fence-agents-aws, fence-agents-azure-arm, fence-agents-bladecenter, fence-agents-brocade, fence-agents-cisco-mds, fence-agents-cisco-ucs, fence-agents-common, fence-agents-drac5, fence-agents-eaton-snmp, fence-agents-emerson, fence-agents-eps, fence-agents-gce, fence-agents-heuristics-ping, fence-agents-hpblade, fence-agents-ibm-powervs, fence-agents-ibm-vpc, fence-agents-ibmblade, fence-agents-ifmib, fence-agents-ilo-moonshot, fence-agents-ilo-mp, fence-agents-ilo-ssh, fence-agents-ilo2, fence-agents-intelmodular, fence-agents-ipdu, fence-agents-ipmilan, fence-agents-kdump, fence-agents-kubevirt, fence-agents-lpar, fence-agents-mpath, fence-agents-nutanix-ahv, fence-agents-openstack, fence-agents-redfish, fence-agents-rhevm, fence-agents-rsa, fence-agents-rsb, fence-agents-sbd, fence-agents-scsi, fence-agents-virsh, fence-agents-vmware-rest, fence-agents-vmware-soap, fence-agents-wti, fence-agents-zvm, fence-virt, fence-virtd, fence-virtd-cpg, fence-virtd-libvirt, fence-virtd-multicast, fence-virtd-serial, fence-virtd-tcp, ha-cloud-support

    Summary

    Critical: fence-agents security update

    Published
    3 Nov 2026
    ALSA-2026:94510
    Fix available
    Packages

    freerdp, freerdp-devel, freerdp-libs, libwinpr, libwinpr-devel

    Summary

    Important: freerdp security update

    Published
    3 Nov 2026
    ALSA-2026:94514
    Fix available
    Packages

    freerdp, freerdp-devel, freerdp-libs, freerdp-server, libwinpr, libwinpr-devel

    Summary

    Important: freerdp security, bug fix, and enhancement update

    Published
    3 Nov 2026
    ALSA-2026:94519
    Fix available
    Packages

    raptor2, raptor2-devel

    Summary

    Important: raptor2 security update

    Published
    3 Nov 2026
    ALSA-2026:94533
    Fix available
    Packages

    cockpit, cockpit-bridge, cockpit-doc, cockpit-packagekit, cockpit-storaged, cockpit-system, cockpit-ws, cockpit-ws-selinux

    Summary

    Important: cockpit security update

    Published
    3 Nov 2026
    ALSA-2026:94630
    Fix available
    Packages

    dpdk, dpdk-devel, dpdk-doc, dpdk-tools

    Summary

    Important: dpdk security update

    Published
    3 Nov 2026
    ALSA-2026:94749
    Fix available
    Packages

    python3-dns

    Summary

    Important: python-dns security update

    Published
    3 Nov 2026
    Packages

    afflib

    Summary

    afflib-devel-3.7.23-1.1 on GA media

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-115698
    No fix available
    Packages

    iwd, iwd, iwd, iwd, iwd

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-114418
    No fix available
    Packages

    phodav, phodav, phodav, phodav, phodav, phodav

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-114417
    No fix available
    Packages

    phodav, phodav, phodav, phodav, phodav, phodav

    Summary

    Published
    3 Nov 2026