Open Source Vulnerabilities
linux-lts, linux-lts, linux-lts
CVE-2026-99108 does not affect BellSoft software
CVE-2026-99107 does not affect BellSoft software
CVE-2026-99104 does not affect BellSoft software
CVE-2026-99102 does not affect BellSoft software
CVE-2026-99101 does not affect BellSoft software
CVE-2026-99194 does not affect BellSoft software
CVE-2026-99129 does not affect BellSoft software
linux-lts, linux-lts, linux-lts
Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
Events Made Easy <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parameter
Cool FormKit Lite <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Form Field custom_id Parameter
glib-networking, glib-networking, glib-networking
glib-networking
CVE-2026-103963 affecting package glib-networking for versions less than 2.78.0-3
glib-networking
CVE-2026-103963 affecting package glib-networking for versions less than 2.78.0-3
glib-networking, glib-networking, glib-networking, glib-networking, glib-networking, glib-networking, glib-networking
glib-networking/ glib-networking/ glib-networking/ glib-networking/ glib-networking/ glib-networking/ glib-networking
debootstrap
CVE-2026-114538 affecting package debootstrap 1.0.128+nmu2-1
debootstrap
CVE-2026-114538 affecting package debootstrap 1.0.128+nmu2-1
cloud-sql-proxy-2.27, cloud-sql-proxy-2.27
cloud-sql-proxy-2.27, cloud-sql-proxy-2.27
cloud-sql-proxy-2.27, cloud-sql-proxy-2.27
commercial-gitlab-rails-ee-19.1
commercial-gitlab-rails-ee-19.1
commercial-gitlab-rails-ee-19.1
Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192
Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192
Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194
Entity Reference Manager (Merge entities) - Critical - Access bypass - SA-CONTRIB-2026-194
MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195
MathJax: LaTeX for Drupal - Critical - Cross site scripting - SA-CONTRIB-2026-195
Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197
Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197
Actstream - Critical - Access bypass - SA-CONTRIB-2026-198
Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199
Inline Entity Form Dialog - Moderately critical - Access bypass - SA-CONTRIB-2026-199
Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201
Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201
Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202
Gutenberg - Moderately critical - Access bypass - SA-CONTRIB-2026-202
Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203
Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203
Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204
Leaflet - Moderately critical - Cross site scripting - SA-CONTRIB-2026-204
