Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-w9m4-976m-3m2j
    Fix available
    Packages

    kayenta-2026.4

    Summary

    Published
    2 Nov 2026
    CGA-c6wg-hvvx-w23f
    Fix available
    Packages

    kayenta-2026.4

    Summary

    Published
    2 Nov 2026
    CGA-r69w-hq76-5x6q
    Fix available
    Packages

    kayenta-2026.4

    Summary

    Published
    2 Nov 2026
    CGA-g5q2-2mcv-2rfj
    Fix available
    Packages

    kayenta-2026.4

    Summary

    Published
    2 Nov 2026
    CGA-5m9c-gwrv-w474
    Fix available
    Packages

    kayenta-2026.4

    Summary

    Published
    2 Nov 2026
    SUSE-SU-2026:5005-1
    Fix available
    Packages

    suseconnect-ng, suseconnect-ng, suseconnect-ng

    Summary

    Security update for suseconnect-ng

    Published
    2 Nov 2026
    ECHO-e409-9c6a-8c59
    Fix available
    Packages

    gcc-14, gnu-gcc-13, gnu-gcc-14, gnu-gcc-15, gnu-gcc-16

    Summary

    Published
    2 Nov 2026
    ECHO-46c0-ef4d-c992
    Fix available
    Packages

    gcc-12, gcc-14, gnu-gcc-12, gnu-gcc-13, gnu-gcc-14, gnu-gcc-15, gnu-gcc-16

    Summary

    Published
    2 Nov 2026
    ECHO-2f1c-5633-7d2d
    Fix available
    Packages

    gcc-12, gcc-14, gnu-gcc-12, gnu-gcc-13, gnu-gcc-14, gnu-gcc-15, gnu-gcc-16

    Summary

    Published
    2 Nov 2026
    CVE-2026-120324
    Fix available
    Packages

    Summary

    Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversal

    Published
    2 Nov 2026
    CVE-2026-120317
    Fix available
    Packages

    Summary

    http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity

    Published
    2 Nov 2026
    CVE-2026-120316
    Fix available
    Packages

    Summary

    http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution

    Published
    2 Nov 2026
    CVE-2026-120315
    Fix available
    Packages

    Summary

    LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile

    Published
    2 Nov 2026
    CVE-2026-120314
    Fix available
    Packages

    Summary

    Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations

    Published
    2 Nov 2026
    CVE-2026-120313
    Fix available
    Packages

    Summary

    Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath

    Published
    2 Nov 2026
    CVE-2026-120312
    Fix available
    Packages

    Summary

    Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name

    Published
    2 Nov 2026
    CVE-2026-120311
    Fix available
    Packages

    Summary

    Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID

    Published
    2 Nov 2026
    CVE-2026-120310
    Fix available
    Packages

    Summary

    Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Response

    Published
    2 Nov 2026
    CVE-2026-120309
    Fix available
    Packages

    Summary

    Nuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParam

    Published
    2 Nov 2026
    CVE-2026-120323
    Fix available
    Packages

    Summary

    samanhappy MCPHub passthroughHeaders.ts information disclosure

    Published
    2 Nov 2026
    CVE-2026-120320
    Fix available
    Packages

    Summary

    jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization

    Published
    2 Nov 2026
    OSV-2026-1481
    Fix available
    Packages

    ndpi

    Summary

    Heap-buffer-overflow in ndpi_search_l2tp

    Published
    2 Nov 2026
    ECHO-5e6b-229a-8e4f
    Fix available
    Packages

    asteval

    Summary

    Published
    2 Nov 2026
    ECHO-b4b1-c4c9-a28a
    Fix available
    Packages

    asteval

    Summary

    Published
    2 Nov 2026
    ECHO-71be-8fa4-9e08
    Fix available
    Packages

    @intlify/core-base, @intlify/shared, vue-i18n

    Summary

    Published
    2 Nov 2026
    ECHO-fdb7-6f0e-a94a
    Fix available
    Packages

    @intlify/core-base, vue-i18n

    Summary

    Published
    2 Nov 2026
    ECHO-c263-5d82-881e
    Fix available
    Packages

    @modelcontextprotocol/server

    Summary

    Published
    2 Nov 2026
    ECHO-1917-fd3a-73c9
    Fix available
    Packages

    uv

    Summary

    Published
    2 Nov 2026
    ECHO-a78b-ec11-b9e5
    Fix available
    Packages

    uv

    Summary

    Published
    2 Nov 2026
    ALSA-2026:93436
    Fix available
    Packages

    bpftool, kernel, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-devel, kernel-doc, kernel-headers, kernel-modules, kernel-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-modules, kernel-zfcpdump-modules-extra, perf, python3-perf

    Summary

    Important: kernel security update

    Published
    2 Nov 2026
    ALSA-2026:93438
    Fix available
    Packages

    libXi, libXi-devel

    Summary

    Important: libXi security update

    Published
    2 Nov 2026
    ALSA-2026:93441
    Fix available
    Packages

    libXi, libXi-devel

    Summary

    Important: libXi security update

    Published
    2 Nov 2026
    ALSA-2026:93442
    Fix available
    Packages

    pipewire, pipewire-alsa, pipewire-devel, pipewire-gstreamer, pipewire-jack-audio-connection-kit, pipewire-jack-audio-connection-kit-devel, pipewire-jack-audio-connection-kit-libs, pipewire-libs, pipewire-module-x11, pipewire-plugin-libcamera, pipewire-pulseaudio, pipewire-utils

    Summary

    Moderate: pipewire security update

    Published
    2 Nov 2026
    CVE-2026-106806
    Fix available
    Packages

    Summary

    Published
    2 Nov 2026
    ALSA-2026:93596
    Fix available
    Packages

    opentelemetry-collector

    Summary

    Important: opentelemetry-collector security update

    Published
    2 Nov 2026
    ALSA-2026:93617
    Fix available
    Packages

    opentelemetry-collector

    Summary

    Important: opentelemetry-collector security update

    Published
    2 Nov 2026
    ALSA-2026:93440
    Fix available
    Packages

    python3-jwt

    Summary

    Important: python-jwt security update

    Published
    2 Nov 2026
    ALSA-2026:93443
    Fix available
    Packages

    thunderbird

    Summary

    Important: thunderbird security, bug fix, and enhancement update

    Published
    2 Nov 2026
    ALSA-2026:93461
    Fix available
    Packages

    libblkid, libblkid-devel, libfdisk, libfdisk-devel, libmount, libmount-devel, libsmartcols, libsmartcols-devel, libuuid, libuuid-devel, python3-libmount, util-linux, util-linux-core, uuidd

    Summary

    Important: util-linux security update

    Published
    2 Nov 2026
    ALSA-2026:93464
    Fix available
    Packages

    podman, podman-docker, podman-remote, podman-tests

    Summary

    Moderate: podman security update

    Published
    2 Nov 2026
    ALSA-2026:93439
    Fix available
    Packages

    libXi, libXi-devel

    Summary

    Important: libXi security update

    Published
    2 Nov 2026
    ALSA-2026:93592
    Fix available
    Packages

    freerdp, freerdp-devel, freerdp-libs, libwinpr, libwinpr-devel

    Summary

    Important: freerdp security update

    Published
    2 Nov 2026
    ALSA-2026:93930
    Fix available
    Packages

    kernel, kernel-64k, kernel-64k-core, kernel-64k-debug, kernel-64k-debug-core, kernel-64k-debug-modules, kernel-64k-debug-modules-core, kernel-64k-debug-modules-extra, kernel-64k-modules, kernel-64k-modules-core, kernel-64k-modules-extra, kernel-abi-stablelists, kernel-core, kernel-debug, kernel-debug-core, kernel-debug-modules, kernel-debug-modules-core, kernel-debug-modules-extra, kernel-debug-uki-virt, kernel-modules, kernel-modules-core, kernel-modules-extra, kernel-tools, kernel-tools-libs, kernel-uki-virt, kernel-uki-virt-addons, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-modules, kernel-zfcpdump-modules-core, kernel-zfcpdump-modules-extra

    Summary

    Moderate: kernel security update

    Published
    2 Nov 2026
    ALSA-2026:93924
    Fix available
    Packages

    qt5-qtbase, qt5-qtbase-common, qt5-qtbase-devel, qt5-qtbase-examples, qt5-qtbase-gui, qt5-qtbase-mysql, qt5-qtbase-odbc, qt5-qtbase-postgresql, qt5-qtbase-private-devel, qt5-qtbase-static

    Summary

    Important: qt5-qtbase security update

    Published
    2 Nov 2026
    ALSA-2026:93925
    Fix available
    Packages

    bind, bind-chroot, bind-devel, bind-export-devel, bind-export-libs, bind-libs, bind-libs-lite, bind-license, bind-lite-devel, bind-pkcs11, bind-pkcs11-devel, bind-pkcs11-libs, bind-pkcs11-utils, bind-sdb, bind-sdb-chroot, bind-utils, python3-bind

    Summary

    Important: bind security, bug fix, and enhancement update

    Published
    2 Nov 2026
    ALSA-2026:94011
    Fix available
    Packages

    bind9.16, bind9.16-chroot, bind9.16-devel, bind9.16-dnssec-utils, bind9.16-doc, bind9.16-libs, bind9.16-license, bind9.16-utils, python3-bind9.16

    Summary

    Important: bind9.16 security update

    Published
    2 Nov 2026
    ALSA-2026:93437
    Fix available
    Packages

    kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-extra

    Summary

    Important: kernel-rt security update

    Published
    2 Nov 2026
    ALSA-2026:93627
    Fix available
    Packages

    wireshark, wireshark-cli, wireshark-devel

    Summary

    Important: wireshark security update

    Published
    2 Nov 2026
    ALSA-2026:93670
    Fix available
    Packages

    kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-extra

    Summary

    Important: kernel-rt bug fix and enhancement update

    Published
    2 Nov 2026
    ALSA-2026:93469
    Fix available
    Packages

    tomcat, tomcat-admin-webapps, tomcat-docs-webapp, tomcat-el-3.0-api, tomcat-jsp-2.3-api, tomcat-lib, tomcat-servlet-4.0-api, tomcat-webapps

    Summary

    Important: tomcat security update

    Published
    2 Nov 2026