Open Source Vulnerabilities

moment

org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-core, org.springframework:spring-expression, org.springframework:spring-framework-bom, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc, org.springframework:spring-websocket

TuxCare security update for org.springframework (17 CVEs)

org.springframework:spring-beans, org.springframework:spring-core, org.springframework:spring-expression, org.springframework:spring-webmvc

TuxCare security update for org.springframework (7 CVEs)

next, @rootio/next

CVE-2026-94482 in next - Patched by Root

next, @rootio/next

GHSA-2464-fhr4-w9xw in next - Patched by Root

next, @rootio/next

CVE-2026-94543 in next - Patched by Root

next, @rootio/next

CVE-2026-94484 in next - Patched by Root

next, @rootio/next

AIKIDO-2026-104277 in next - Patched by Root

dnspython

TuxCare security update for dnspython (1 CVE)

pillow

TuxCare security update for pillow (1 CVE)

fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses

kernel-livepatch-SLE15-SP7-RT_Update_19

Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

kgraft-patch-SLE12-SP5_Update_82

Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

mariadb

debezium-connector-ibmi-3.5, debezium-connector-ibmi-3.5

debezium-connector-ibmi-3.5, debezium-connector-ibmi-3.5

debezium-connector-ibmi-3.5, debezium-connector-ibmi-3.5

debezium-connector-ibmi-3.5, debezium-connector-ibmi-3.5

debezium-connector-ibmi-3.5, debezium-connector-ibmi-3.5

pillow

TuxCare security update for pillow (1 CVE)

httpclient

AIKIDO-2026-932465 in httpclient - Patched by Root

next, @rootio/next

GHSA-q4gf-8mx6-v5v3 in next - Patched by Root

next, @rootio/next

CVE-2026-75604 in next - Patched by Root

next, @rootio/next

CVE-2026-44573 in next - Patched by Root

next, @rootio/next

CVE-2026-64645 in next - Patched by Root

next, @rootio/next

CVE-2026-44578 in next - Patched by Root

next, @rootio/next

GHSA-8h8q-6873-q5fj in next - Patched by Root

next, @rootio/next

CVE-2026-64649 in next - Patched by Root

next, @rootio/next

GHSA-5j59-xgg2-r9c4 in next - Patched by Root

next, @rootio/next

CVE-2026-64641 in next - Patched by Root

next, @rootio/next

GHSA-h25m-26qc-wcjf in next - Patched by Root

next, @rootio/next

AIKIDO-2026-553733 in next - Patched by Root

next, @rootio/next

GHSA-2xp9-vwfh-vxw4 in next - Patched by Root

@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape

gitpython

TuxCare security update for gitpython (1 CVE)

@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers

nginx, rootio-nginx

CVE-2026-15176 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-1642 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-27651 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-27654 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-32647 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-42533 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-42945 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-42946 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-56434 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-97629 in nginx - Patched by Root

nginx, rootio-nginx

CVE-2026-60005 in nginx - Patched by Root

@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal

django

TuxCare security update for django (3 CVEs)

django

TuxCare security update for django (6 CVEs)