Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    UBUNTU-CVE-2026-45049
    No fix available
    Packages

    openam

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119286
    No fix available
    Packages

    graphql-core, graphql-core, graphql-core, graphql-core

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119285
    No fix available
    Packages

    golang-github-gofiber-fiber, golang-github-gofiber-fiber-v2

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119284
    No fix available
    Packages

    joserfc, joserfc

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119283
    No fix available
    Packages

    joserfc, joserfc

    Summary

    Published
    29 Oct 2026
    CLSA-2026-1793307830
    Fix available
    Packages

    tar

    Summary

    TuxCare security update for tar (11 CVEs)

    Published
    29 Oct 2026
    CGA-mvmw-j462-49mj
    No fix available
    Packages

    gitlab-rails-ce-fips-19.0

    Summary

    Published
    29 Oct 2026
    CGA-66rj-wv97-8j8w
    No fix available
    Packages

    gitlab-rails-ce-fips-19.0

    Summary

    Published
    29 Oct 2026
    CGA-72m6-cvfc-xvvx
    No fix available
    Packages

    gitlab-rails-ce-fips-18.10

    Summary

    Published
    29 Oct 2026
    CVE-2026-119286
    Fix available
    Packages

    Summary

    GraphQL-core: Denial of service via memory leak in aborted validations

    Published
    29 Oct 2026
    CVE-2026-119285
    Fix available
    Packages

    Summary

    Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

    Published
    29 Oct 2026
    CVE-2026-119284
    Fix available
    Packages

    Summary

    joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

    Published
    29 Oct 2026
    CVE-2026-61719
    Fix available
    Packages

    Summary

    WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field

    Published
    29 Oct 2026
    CVE-2026-61707
    Fix available
    Packages

    Summary

    SOCFortress CoPilot: Stored case-report template injection permits backend code execution

    Published
    29 Oct 2026
    CVE-2026-61673
    Fix available
    Packages

    Summary

    WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover

    Published
    29 Oct 2026
    CVE-2026-61671
    Fix available
    Packages

    Summary

    WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes

    Published
    29 Oct 2026
    CVE-2026-61654
    Fix available
    Packages

    Summary

    Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

    Published
    29 Oct 2026
    CVE-2026-61645
    Fix available
    Packages

    Summary

    Docat has Arbitrary File Upload exists in Upload API

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119281
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119280
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119279
    Fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119278
    Fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119277
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119276
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119210
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119209
    Fix available
    Packages

    pypdf, pypdf, pypdf, pypdf2

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119208
    Fix available
    Packages

    pypdf, pypdf, pypdf, pypdf2

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119207
    Fix available
    Packages

    pypdf, pypdf, pypdf, pypdf2

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119206
    Fix available
    Packages

    pypdf, pypdf, pypdf, pypdf2

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119205
    Fix available
    Packages

    pypdf, pypdf, pypdf, pypdf2

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119204
    Fix available
    Packages

    pypdf, pypdf, pypdf, pypdf2

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-119203
    Fix available
    Packages

    pypdf, pypdf, pypdf, pypdf2

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119204
    No fix available
    Packages

    pypdf, pypdf, pypdf

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119281
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119280
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119279
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119278
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119277
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119276
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119210
    No fix available
    Packages

    mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java, mariadb-connector-java

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119209
    No fix available
    Packages

    pypdf, pypdf, pypdf

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119208
    No fix available
    Packages

    pypdf, pypdf, pypdf

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119207
    No fix available
    Packages

    pypdf, pypdf, pypdf

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119206
    No fix available
    Packages

    pypdf, pypdf, pypdf

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119205
    No fix available
    Packages

    pypdf, pypdf, pypdf

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-119203
    No fix available
    Packages

    pypdf, pypdf, pypdf

    Summary

    Published
    29 Oct 2026
    CVE-2026-45049
    Fix available
    Packages

    Summary

    OpenAM Session Hijacking via CDSSO

    Published
    29 Oct 2026
    CVE-2026-119283
    Fix available
    Packages

    Summary

    joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption

    Published
    29 Oct 2026
    CVE-2026-119282
    Fix available
    Packages

    Summary

    Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle

    Published
    29 Oct 2026
    CGA-498h-853j-852r
    No fix available
    Packages

    containerd-1, containerd-1

    Summary

    Published
    29 Oct 2026