Open Source Vulnerabilities

perl-Mozilla-CA

Security update for perl-Mozilla-CA

stgit

Security update for stgit

tailscale

Security update for tailscale

vtk9, vtk9, vtk9

vtk9, vtk9, vtk9

vtk9, vtk9, vtk9

vtk9, vtk9, vtk9

Forge: AES-GCM authentication bypass via unvalidated tagLength option

vtk9, vtk9, vtk9

vtk9, vtk9, vtk9

python-tensorboard

CVE-2026-118778 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-118777 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-118782 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-118776 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-118779 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-118775 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-118780 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-118781 affecting package python-tensorboard 2.16.2-6

node-glob, node-glob, node-glob

python-tensorboard

CVE-2026-118774 affecting package python-tensorboard 2.16.2-6

vtk, vtk

node-node-forge, node-node-forge

node-glob, node-glob, node-glob, node-glob, node-glob, node-glob, node-glob, node-glob

nomad

node-node-forge, node-node-forge

node-node-forge, node-node-forge

node-node-forge, node-node-forge

node-node-forge, node-node-forge

vtk, vtk

vtk9, vtk9, vtk9, vtk9

vtk, vtk

node-node-forge, node-node-forge

node-node-forge, node-node-forge

node-node-forge, node-node-forge

node-node-forge, node-node-forge

vtk, vtk

vtk, vtk

langfuse-3, langfuse-3

react-server-dom-webpack

TuxCare security update for react-server-dom-webpack (2 CVEs)

python311-core, python311, python311-core, python311, python311-core, python311, python311-core

Security update for python311

@parcel/reporter-dev-server

TuxCare security update for @parcel/reporter-dev-server (1 CVE)

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

multer, @rootio/multer

CVE-2026-3520 in multer - Patched by Root

multer, @rootio/multer

CVE-2026-77037 in multer - Patched by Root

multer, @rootio/multer

CVE-2025-7338 in multer - Patched by Root

multer, @rootio/multer

CVE-2026-2359 in multer - Patched by Root

multer, @rootio/multer

CVE-2026-3304 in multer - Patched by Root

multer, @rootio/multer

CVE-2026-5038 in multer - Patched by Root