Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2026-119653
    Fix available
    Packages

    Summary

    Nging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path

    Published
    30 Oct 2026
    CVE-2026-119652
    No fix available
    Packages

    Summary

    HuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure

    Published
    30 Oct 2026
    CVE-2026-119651
    No fix available
    Packages

    Summary

    HuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion

    Published
    30 Oct 2026
    CVE-2026-119650
    No fix available
    Packages

    Summary

    HuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController

    Published
    30 Oct 2026
    CVE-2026-119649
    No fix available
    Packages

    Summary

    Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check

    Published
    30 Oct 2026
    CVE-2026-119648
    No fix available
    Packages

    Summary

    BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail

    Published
    30 Oct 2026
    CVE-2026-119647
    Fix available
    Packages

    Summary

    RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}

    Published
    30 Oct 2026
    CVE-2026-119646
    Fix available
    Packages

    Summary

    Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API

    Published
    30 Oct 2026
    CVE-2026-119645
    No fix available
    Packages

    Summary

    ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc

    Published
    30 Oct 2026
    CVE-2026-119644
    No fix available
    Packages

    Summary

    Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints

    Published
    30 Oct 2026
    UBUNTU-CVE-2026-119600
    No fix available
    Packages

    tcpflow, tcpflow, tcpflow, tcpflow, tcpflow, tcpflow, tcpflow, tcpflow

    Summary

    Published
    30 Oct 2026
    UBUNTU-CVE-2026-119601
    No fix available
    Packages

    afflib, afflib, afflib, afflib, afflib, afflib, afflib

    Summary

    Published
    30 Oct 2026
    UBUNTU-CVE-2026-115683
    No fix available
    Packages

    epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser, epiphany-browser

    Summary

    Published
    30 Oct 2026
    UBUNTU-CVE-2026-119528
    No fix available
    Packages

    gimp, gimp, gimp, gimp, gimp, gimp, gimp

    Summary

    Published
    30 Oct 2026
    UBUNTU-CVE-2026-119602
    No fix available
    Packages

    clamav, libmspack, libmspack, libmspack, libmspack, libmspack, libmspack, libmspack, libmspack

    Summary

    Published
    30 Oct 2026
    CGA-64jj-pqh6-w3ww
    Fix available
    Packages

    opensearch-dashboards-2-fips-alerting-dashboards-plugin

    Summary

    Published
    30 Oct 2026
    CGA-3pc6-hvxq-jvvp
    Fix available
    Packages

    ruff, ruff

    Summary

    Published
    30 Oct 2026
    CGA-9mfv-f729-pwpv
    Fix available
    Packages

    ruff, ruff

    Summary

    Published
    30 Oct 2026
    CGA-h676-h429-wmmm
    Fix available
    Packages

    ruff, ruff

    Summary

    Published
    30 Oct 2026
    CGA-ccr2-jv7r-636q
    Fix available
    Packages

    ruff, ruff

    Summary

    Published
    30 Oct 2026
    CGA-634m-f2xr-9c2q
    No fix available
    Packages

    commercial-gitlab-rails-ee-19.4

    Summary

    Published
    30 Oct 2026
    CGA-fcmv-qv6m-xx8r
    No fix available
    Packages

    commercial-gitlab-rails-ee-19.4

    Summary

    Published
    30 Oct 2026
    CGA-m8c3-h6f7-35fj
    No fix available
    Packages

    commercial-gitlab-rails-ee-19.4

    Summary

    Published
    30 Oct 2026
    CVE-2026-100355
    Fix available
    Packages

    Summary

    Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard

    Published
    30 Oct 2026
    CGA-99q8-5jfg-cgxq
    No fix available
    Packages

    gitlab-rails-ce-fips-18.9

    Summary

    Published
    30 Oct 2026
    CGA-2rhg-66wc-p682
    No fix available
    Packages

    gitlab-rails-ce-fips-18.9

    Summary

    Published
    30 Oct 2026
    CGA-xh2c-c9mx-pxv7
    No fix available
    Packages

    gitlab-rails-ce-fips-18.9

    Summary

    Published
    30 Oct 2026
    Packages

    highcharts

    Summary

    TuxCare security update for highcharts (2 CVEs)

    Published
    30 Oct 2026
    CGA-qh57-rwq9-hp68
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-r6p8-qc8p-rq9x
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-r98r-h47r-gfjf
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-jq5q-2847-qf72
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-922f-fg9g-pc4w
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-4r24-9q58-gqq7
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-pcg5-cq8f-5c2g
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-2ff6-g6r8-gr8v
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    Packages

    tar

    Summary

    TuxCare security update for tar (2 CVEs)

    Published
    30 Oct 2026
    CGA-fm8m-qm4r-cxvm
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-mq8p-w547-6pfc
    Fix available
    Packages

    opensearch-dashboards-3-fips-alerting-dashboards-plugin

    Summary

    Published
    30 Oct 2026
    CGA-hg7g-fmfj-949m
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-336p-jmrw-8v4q
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-394f-jh7w-26gq
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-7f7q-pwmf-hg29
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-7jcr-2c3x-c83f
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-2m8h-xf3q-v7v3
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-76rx-g8gv-vpgc
    No fix available
    Packages

    airflow-2

    Summary

    Published
    30 Oct 2026
    CGA-qf5q-35vv-hh47
    Fix available
    Packages

    opensearch-dashboards-3-fips

    Summary

    Published
    30 Oct 2026
    CGA-v38p-c743-gf3c
    Fix available
    Packages

    kayenta-fips-2026.4

    Summary

    Published
    30 Oct 2026
    CGA-h34g-x757-72jc
    Fix available
    Packages

    kayenta-fips-2026.4

    Summary

    Published
    30 Oct 2026
    CGA-8h24-rj2m-r4qc
    Fix available
    Packages

    kayenta-fips-2026.4

    Summary

    Published
    30 Oct 2026