Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-6rcm-pwfr-cqq8
    Fix available
    Packages

    metaflow-service-fips

    Summary

    Published
    30 Oct 2026
    Packages

    amazon-cloudwatch-agent, melange, promxy, promxy

    Summary

    Security fix for GHSA-x744-4wpc-v9h2 applied in: amazon-cloudwatch-agent 1.300065.0-r1, melange 0.55.0-r1, promxy 0.0.96-r2, promxy 0.0.96-r3

    Published
    30 Oct 2026
    CGA-rgwh-jrp5-qc2v
    Fix available
    Packages

    metaflow-service

    Summary

    Published
    30 Oct 2026
    CGA-h4g5-25p2-jrp9
    Fix available
    Packages

    metaflow-service

    Summary

    Published
    30 Oct 2026
    Packages

    kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache-fips

    Summary

    quic-go is an implementation of the QUIC protocol in Go

    Published
    30 Oct 2026
    Packages

    kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache-fips

    Summary

    quic-go is an implementation of the QUIC protocol in Go

    Published
    30 Oct 2026
    SUSE-SU-2026:4954-1
    Fix available
    Packages

    curl, curl, curl, curl, curl, curl, curl, curl, curl, curl, curl

    Summary

    Security update for curl

    Published
    30 Oct 2026
    CGA-fqhc-3344-g74p
    Fix available
    Packages

    mcp-atlassian

    Summary

    Published
    30 Oct 2026
    CGA-4f57-94j8-7j9h
    Fix available
    Packages

    mcp-atlassian

    Summary

    Published
    30 Oct 2026
    CGA-7485-9mgc-c5h8
    Fix available
    Packages

    locust-fips

    Summary

    Published
    30 Oct 2026
    CGA-753m-5mm4-q4f9
    Fix available
    Packages

    locust-fips

    Summary

    Published
    30 Oct 2026
    Packages

    litestream, litestream, litestream, litestream, ip-masq-agent, kubernetes-dns-node-cache-fips

    Summary

    tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing

    Published
    30 Oct 2026
    Packages

    litestream, litestream, litestream, litestream, ip-masq-agent, kubernetes-dns-node-cache-fips

    Summary

    Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component

    Published
    30 Oct 2026
    Packages

    litestream, litestream, litestream, litestream, ip-masq-agent, postgres-operator, kubernetes-dns-node-cache-fips

    Summary

    attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing

    Published
    30 Oct 2026
    CGA-qr67-jjq4-wgrh
    Fix available
    Packages

    locust

    Summary

    Published
    30 Oct 2026
    CGA-93xm-5985-qp28
    Fix available
    Packages

    locust

    Summary

    Published
    30 Oct 2026
    CGA-px87-4w26-93jp
    Fix available
    Packages

    localstack

    Summary

    Published
    30 Oct 2026
    CGA-jc9c-6g9h-8ggg
    Fix available
    Packages

    localstack

    Summary

    Published
    30 Oct 2026
    Packages

    litestream, litestream, litestream, litestream, kubernetes-dns-node-cache-fips

    Summary

    SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be re...

    Published
    30 Oct 2026
    Packages

    litestream, litestream, litestream, litestream, kubernetes-dns-node-cache-fips

    Summary

    Applications and libraries which misuse connection

    Published
    30 Oct 2026
    Packages

    kubernetes-dns-node-cache-fips

    Summary

    quic-go is an implementation of the QUIC protocol in Go

    Published
    30 Oct 2026
    CGA-97xp-j5fj-pjf5
    Fix available
    Packages

    lakekeeper

    Summary

    Published
    30 Oct 2026
    CGA-g6ww-hw89-9pf4
    Fix available
    Packages

    lakekeeper

    Summary

    Published
    30 Oct 2026
    Packages

    kubernetes-dns-node-cache-fips

    Summary

    CoreDNS is a DNS server that chains plugins

    Published
    30 Oct 2026
    Packages

    kubernetes-dns-node-cache-fips

    Summary

    CoreDNS is a DNS server that chains plugins

    Published
    30 Oct 2026
    Packages

    kubernetes-dns-node-cache-fips

    Summary

    CoreDNS is a DNS server that chains plugins

    Published
    30 Oct 2026
    Packages

    litestream, litestream, litestream, litestream, ip-masq-agent, kserve-rest-proxy, kubernetes-dns-node-cache-fips

    Summary

    Security fix for GHSA-qxp5-gwg8-xv66 applied in: litestream 0.3.14-r2, litestream 0.3.14-r3, ip-masq-agent 2.12.0-r1, kserve-rest-proxy 0.12.0-r0, kubernetes-dns-node-cache-fips 1.25.0-r1

    Published
    30 Oct 2026
    CGA-36pv-62qr-pvr2
    Fix available
    Packages

    label-studio

    Summary

    Published
    30 Oct 2026
    CGA-w4wg-x629-46m6
    Fix available
    Packages

    label-studio

    Summary

    Published
    30 Oct 2026
    CGA-h6pq-5rq8-x97g
    Fix available
    Packages

    kubeflow-pipelines-visualization-server, kubeflow-pipelines-visualization-server

    Summary

    Published
    30 Oct 2026
    CGA-9v2x-hwgp-qvmx
    Fix available
    Packages

    kubeflow-jupyter-web-app, kubeflow-jupyter-web-app

    Summary

    Published
    30 Oct 2026
    CGA-2xfr-q8cv-2h45
    Fix available
    Packages

    kubeflow-jupyter-web-app, kubeflow-jupyter-web-app

    Summary

    Published
    30 Oct 2026
    CGA-8vgw-xv68-wjf6
    Fix available
    Packages

    kubeflow-tensorboard-web-app

    Summary

    Published
    30 Oct 2026
    CGA-p3hr-cq9q-3gqv
    Fix available
    Packages

    kubeflow-tensorboard-web-app

    Summary

    Published
    30 Oct 2026
    SUSE-SU-2026:4953-1
    Fix available
    Packages

    gnutls

    Summary

    Security update for gnutls

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-119722
    No fix available
    Packages

    blender, blender, blender

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-119721
    No fix available
    Packages

    blender, blender, blender

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-119720
    No fix available
    Packages

    blender, blender, blender

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-119719
    No fix available
    Packages

    blender, blender, blender

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-119718
    No fix available
    Packages

    blender, blender, blender

    Summary

    Published
    30 Oct 2026
    CGA-742w-c4hc-r6wc
    Fix available
    Packages

    kserve-pmmlserver-fips

    Summary

    Published
    30 Oct 2026
    CGA-pm6v-mxpm-gj89
    Fix available
    Packages

    kserve-pmmlserver-fips

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-105454
    No fix available
    Packages

    request-tracker5, request-tracker5, request-tracker5

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-104067
    No fix available
    Packages

    scribus, scribus, scribus

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-104066
    No fix available
    Packages

    scribus, scribus, scribus

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-104065
    No fix available
    Packages

    scribus, scribus, scribus

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-104064
    No fix available
    Packages

    scribus, scribus, scribus

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-104063
    No fix available
    Packages

    scribus, scribus, scribus

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-104062
    No fix available
    Packages

    scribus, scribus, scribus

    Summary

    Published
    30 Oct 2026
    DEBIAN-CVE-2026-104061
    No fix available
    Packages

    scribus, scribus, scribus

    Summary

    Published
    30 Oct 2026