Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-jh67-pggr-39q8
    Fix available
    Packages

    commercial-gitlab-cng-ee-19.4

    Summary

    Published
    29 Oct 2026
    CGA-46w5-jwq9-frqg
    No fix available
    Packages

    terraform-1.9

    Summary

    Published
    29 Oct 2026
    CGA-94qf-hf3q-9ffc
    Fix available
    Packages

    commercial-gitlab-cng-ee-19.4

    Summary

    Published
    29 Oct 2026
    CGA-5pqg-rwwp-xq8c
    Fix available
    Packages

    commercial-gitlab-cng-ee-19.3

    Summary

    Published
    29 Oct 2026
    CGA-9rrh-x34f-5qg3
    Fix available
    Packages

    commercial-gitlab-cng-ee-19.3

    Summary

    Published
    29 Oct 2026
    CGA-gm57-86mv-gff8
    Fix available
    Packages

    commercial-gitlab-cng-ee-19.2

    Summary

    Published
    29 Oct 2026
    CGA-p6rq-v384-j98q
    Fix available
    Packages

    commercial-gitlab-cng-ee-19.2

    Summary

    Published
    29 Oct 2026
    CGA-2xm6-jg99-6xg6
    Fix available
    Packages

    commercial-gitlab-cng-ee-19.1

    Summary

    Published
    29 Oct 2026
    CGA-rh98-q7wj-ww83
    Fix available
    Packages

    commercial-gitlab-cng-ee-19.1

    Summary

    Published
    29 Oct 2026
    CGA-qgvw-fc33-j629
    Fix available
    Packages

    cof-corretto-27

    Summary

    Published
    29 Oct 2026
    CGA-cx8h-mrh6-f9r4
    Fix available
    Packages

    cof-corretto-27

    Summary

    Published
    29 Oct 2026
    CGA-x9vr-3f79-pmpv
    Fix available
    Packages

    cof-corretto-26

    Summary

    Published
    29 Oct 2026
    CGA-fvfg-qmrv-36wg
    Fix available
    Packages

    cof-corretto-26

    Summary

    Published
    29 Oct 2026
    CGA-49cx-2hf2-2xvm
    Fix available
    Packages

    cof-corretto-25

    Summary

    Published
    29 Oct 2026
    CGA-ffvh-8xhm-6xfv
    Fix available
    Packages

    cof-corretto-25

    Summary

    Published
    29 Oct 2026
    CGA-6gj7-j3jm-fm44
    Fix available
    Packages

    cof-corretto-21

    Summary

    Published
    29 Oct 2026
    CGA-c9gf-vcvf-33jw
    Fix available
    Packages

    cof-corretto-21

    Summary

    Published
    29 Oct 2026
    CGA-hg26-3rj5-8h4f
    Fix available
    Packages

    cof-corretto-17

    Summary

    Published
    29 Oct 2026
    CGA-hmpx-4mv6-h9mq
    Fix available
    Packages

    cof-corretto-17

    Summary

    Published
    29 Oct 2026
    CLSA-2026-1793274225
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

    Published
    29 Oct 2026
    CGA-7jx4-gqrg-6pp2
    No fix available
    Packages

    terraform-1.12

    Summary

    Published
    29 Oct 2026
    CLSA-2026-1793274003
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

    Published
    29 Oct 2026
    SUSE-SU-2026:4937-1
    Fix available
    Packages

    kernel-default, kernel-default-base, kernel-source, kernel-default, kernel-default-base, kernel-source, kernel-default, kernel-livepatch-SLE15-SP4_Update_61, kernel-default, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-zfcpdump, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms

    Summary

    Security update for the Linux Kernel

    Published
    29 Oct 2026
    CVE-2026-119028
    Fix available
    Packages

    Summary

    oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values

    Published
    29 Oct 2026
    CVE-2026-119027
    Fix available
    Packages

    Summary

    oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension

    Published
    29 Oct 2026
    SUSE-SU-2026:4936-1
    Fix available
    Packages

    kernel-default, kernel-default-base, kernel-source, kernel-default, kernel-livepatch-SLE15-SP5_Update_47, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-zfcpdump, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms

    Summary

    Security update for the Linux Kernel

    Published
    29 Oct 2026
    CLSA-2026-1793273384
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)

    Published
    29 Oct 2026
    CLSA-2026-1793273322
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

    Published
    29 Oct 2026
    CVE-2026-115821
    Fix available
    Packages

    Summary

    NewsmanApp <= 3.7.29 - Unauthenticated Stored Cross-Site Scripting via 'billing_first_name' and 'billing_last_name' Parameters

    Published
    29 Oct 2026
    CVE-2026-92086
    No fix available
    Packages

    Summary

    MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter

    Published
    29 Oct 2026
    CVE-2026-109216
    No fix available
    Packages

    Summary

    Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys

    Published
    29 Oct 2026
    CLSA-2026-1793273163
    Fix available
    Packages

    com.fasterxml.jackson.core:jackson-databind

    Summary

    TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

    Published
    29 Oct 2026
    CVE-2026-119025
    Fix available
    Packages

    Summary

    open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows

    Published
    29 Oct 2026
    CLSA-2026-1793272846
    Fix available
    Packages

    @opentelemetry/propagator-jaeger

    Summary

    TuxCare security update for @opentelemetry/propagator-jaeger (1 CVE)

    Published
    29 Oct 2026
    ROOT-APP-NUGET-CVE-2026-84008
    Fix available
    Packages

    System.Security.Cryptography.Pkcs, Rootio.System.Security.Cryptography.Pkcs

    Summary

    CVE-2026-84008 in System.Security.Cryptography.Pkcs - Patched by Root

    Published
    29 Oct 2026
    CLSA-2026-1793272798
    Fix available
    Packages

    @ai-sdk/provider-utils

    Summary

    TuxCare security update for @ai-sdk/provider-utils (1 CVE)

    Published
    29 Oct 2026
    CLSA-2026-1793272717
    Fix available
    Packages

    @opentelemetry/propagator-jaeger

    Summary

    TuxCare security update for @opentelemetry/propagator-jaeger (1 CVE)

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-115942
    No fix available
    Packages

    qpid-proton, qpid-proton, qpid-proton

    Summary

    Published
    29 Oct 2026
    AZL-111745
    No fix available
    Packages

    qpid-proton

    Summary

    CVE-2026-115942 affecting package qpid-proton 0.40.0-15

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-114230
    No fix available
    Packages

    qpid-proton, qpid-proton, qpid-proton

    Summary

    Published
    29 Oct 2026
    AZL-111742
    No fix available
    Packages

    qpid-proton

    Summary

    CVE-2026-114230 affecting package qpid-proton 0.40.0-15

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-105042
    No fix available
    Packages

    qpid-proton, qpid-proton, qpid-proton

    Summary

    Published
    29 Oct 2026
    DEBIAN-CVE-2026-105031
    No fix available
    Packages

    qpid-proton, qpid-proton, qpid-proton

    Summary

    Published
    29 Oct 2026
    AZL-111751
    No fix available
    Packages

    qpid-proton

    Summary

    CVE-2026-105042 affecting package qpid-proton 0.40.0-15

    Published
    29 Oct 2026
    AZL-111748
    No fix available
    Packages

    qpid-proton

    Summary

    CVE-2026-105031 affecting package qpid-proton 0.40.0-15

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-115942
    No fix available
    Packages

    qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-114230
    No fix available
    Packages

    qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton

    Summary

    Published
    29 Oct 2026
    UBUNTU-CVE-2026-105042
    No fix available
    Packages

    qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton, qpid-proton

    Summary

    Published
    29 Oct 2026
    CGA-76v4-rfm8-gch7
    Fix available
    Packages

    ingress-nginx-controller-fips-1.15

    Summary

    Published
    29 Oct 2026
    CGA-62gw-53g5-cgc5
    Fix available
    Packages

    ingress-nginx-controller-fips-1.15

    Summary

    Published
    29 Oct 2026