Open Source Vulnerabilities
socket.io
TuxCare security update for socket.io (2 CVEs)
prismjs
TuxCare security update for prismjs (6 CVEs)
Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key
MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing
MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing
ms
TuxCare security update for ms (1 CVE)
MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths
MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths
MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths
MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths
MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication
MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication
MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths
MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths
MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets
MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets
MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files
MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files
pypdf: Possible large memory usage when parsing cross-reference streams
pypdf: Possible large memory usage when parsing cross-reference streams
msgpack5
TuxCare security update for msgpack5 (7 CVEs)
pypdf: Possible long runtimes/large memory usage for encrypted PDF files
pypdf: Possible long runtimes/large memory usage for encrypted PDF files
pypdf: Possible large memory usage for exceptions in strict mode
pypdf: Possible large memory usage for exceptions in strict mode
pypdf: Possible long runtimes when retrieving page labels
pypdf: Possible infinite loop when cloning dictionaries
pypdf: Possible large memory usage when parsing page tree
pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search
pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search
js-yaml
TuxCare security update for js-yaml (1 CVE)
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
Nuxt dev server exposes generated appSecret through Vite file serving
Nuxt dev server exposes generated appSecret through Vite file serving
@faker-js/faker
TuxCare security update for @faker-js/faker (1 CVE)
@faker-js/faker
TuxCare security update for @faker-js/faker (1 CVE)
python-tensorboard
CVE-2026-119190 affecting package python-tensorboard 2.16.2-6
python-tensorboard
CVE-2026-119190 affecting package python-tensorboard 2.16.2-6
python-tensorboard
CVE-2026-119191 affecting package python-tensorboard 2.16.2-6
python-tensorboard
CVE-2026-119191 affecting package python-tensorboard 2.16.2-6
python-pyasn1
CVE-2026-119194 affecting package python-pyasn1 0.4.8-3
python-pyasn1
CVE-2026-119194 affecting package python-pyasn1 0.4.8-3
python-pyasn1
CVE-2026-119197 affecting package python-pyasn1 0.4.8-3
python-pyasn1
CVE-2026-119197 affecting package python-pyasn1 0.4.8-3
