Open Source Vulnerabilities
OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]
aiohttp
TuxCare security update for aiohttp (1 CVE)
python
tar filter allows writing outside destination via empty-named symlink
python
tar filter allows writing outside destination via empty-named symlink
python-min
tar filter allows writing outside destination via empty-named symlink
python-min
tar filter allows writing outside destination via empty-named symlink
@ai-sdk/openai
TuxCare security update for @ai-sdk/openai (1 CVE)
@ai-sdk/openai
TuxCare security update for @ai-sdk/openai (1 CVE)
mlflow
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
mlflow
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
libpython
tar filter allows writing outside destination via empty-named symlink
libpython
tar filter allows writing outside destination via empty-named symlink
body-parser, @rootio/body-parser
CVE-2026-111181 in body-parser - Patched by Root
body-parser/ @rootio/body-parser
CVE-2026-111181 in body-parser - Patched by Root
body-parser, @rootio/body-parser
CVE-2026-12590 in body-parser - Patched by Root
body-parser/ @rootio/body-parser
CVE-2026-12590 in body-parser - Patched by Root
gcc-toolset-15-gcc
Moderate: gcc-toolset-15-gcc security update
gcc-toolset-15-gcc
Moderate: gcc-toolset-15-gcc security update
brotli
Important: brotli security update
xdg-dbus-proxy
Important: xdg-dbus-proxy security update
emacs
Important: emacs security update
thunderbird
Important: thunderbird security, bug fix, and enhancement update
thunderbird
Important: thunderbird security, bug fix, and enhancement update
libXrender
Important: libXrender security update
yggdrasil
Important: yggdrasil security update
kernel
Important: kernel security, bug fix, and enhancement update
kernel
Important: kernel security, bug fix, and enhancement update
libXtst
Important: libXtst security update
python-urllib3
Important: python-urllib3 security update
org.springframework.boot:spring-boot-actuator, org.springframework.boot:spring-boot-actuator-autoconfigure, org.springframework.boot:spring-boot-devtools, org.springframework.boot:spring-boot-starter-actuator
TuxCare security update for org.springframework.boot (2 CVEs)
org.springframework.boot:spring-boot-actuator/ org.springframework.boot:spring-boot-actuator-autoconfigure/ org.springframework.boot:spring-boot-devtools/ org.springframework.boot:spring-boot-starter-actuator
TuxCare security update for org.springframework.boot (2 CVEs)
java-25-openjdk
Important: java-25-openjdk security update
podman
Important: podman security update
kernel
Important: kernel security, bug fix, and enhancement update
kernel
Important: kernel security, bug fix, and enhancement update
buildah
Important: buildah security update
skopeo
Important: skopeo security update
brotli
Important: brotli security update
xdg-dbus-proxy
Important: xdg-dbus-proxy security update
org.apache.tomcat:tomcat-catalina, io.root.org.apache.tomcat:tomcat-catalina
CVE-2024-52316 in org.apache.tomcat:tomcat-catalina - Patched by Root
org.apache.tomcat:tomcat-catalina/ io.root.org.apache.tomcat:tomcat-catalina
CVE-2024-52316 in org.apache.tomcat:tomcat-catalina - Patched by Root
