Open Source Vulnerabilities

ingress-nginx-controller-1.15, ingress-nginx-controller-1.15

ingress-nginx-controller-1.15, ingress-nginx-controller-1.15

ingress-nginx-controller-fips-1.15

ingress-nginx-controller-fips-1.15

ingress-nginx-controller-1.15, ingress-nginx-controller-1.15

ingress-nginx-controller-1.15, ingress-nginx-controller-1.15

@ai-sdk/provider-utils

TuxCare security update for @ai-sdk/provider-utils (1 CVE)

OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login

ai

TuxCare security update for ai (1 CVE)

kernel-64kb, kernel-default, kernel-default-base, kernel-source, kernel-zfcpdump, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-default, kernel-default, kernel-livepatch-SLE15-SP7_Update_23, kernel-azure, kernel-default, kernel-default

Security update for the Linux Kernel

pillow

TuxCare security update for pillow (2 CVEs)

kernel-default, kernel-livepatch-SLE15-SP6_Update_33, kernel-default, kernel-64kb, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms, kernel-zfcpdump, kernel-default, kernel-default-base, kernel-docs, kernel-obs-build, kernel-source, kernel-syms

Security update for the Linux Kernel

markdown-it, @rootio/markdown-it

CVE-2026-111758 in markdown-it - Patched by Root

markdown-it, @rootio/markdown-it

CVE-2026-111759 in markdown-it - Patched by Root

Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name

libsoup, libsoup

Security update for libsoup

libsoup

Security update for libsoup

@modelcontextprotocol/client

TuxCare security update for @modelcontextprotocol/client (1 CVE)

protobufjs

TuxCare security update for protobufjs (1 CVE)

@opentelemetry/core

TuxCare security update for @opentelemetry/core (1 CVE)

nodemailer

TuxCare security update for nodemailer (1 CVE)

qemu, qemu, qemu

qemu, qemu, qemu

qemu, qemu, qemu

qemu, qemu, qemu

qemu, qemu, qemu

qemu, qemu, qemu

qemu, qemu, qemu

go.opentelemetry.io/otel/sdk, rootio-go.opentelemetry.io/otel/sdk

CVE-2026-39883 in go.opentelemetry.io/otel/sdk - Patched by Root

Everest Forms <= 3.6.2 - Unauthenticated Sensitive Information Exposure via Smart-Tag Injection in Smart-Tag Injection in Form Field Values ({post_meta key=...})

LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization

policykit-1

kernel-default, kernel-docs, kernel-ec2, kernel-source, kernel-syms, kernel-trace, kernel-xen

Security update for the Linux Kernel

gitlab

Incorrect Authorization in GitLab

gitlab

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab

gitlab

Use of Incorrectly-Resolved Name or Reference in GitLab

gitlab

Authorization Bypass Through User-Controlled Key in GitLab

gitlab

Incorrect Authorization in GitLab

gitlab

Use of Less Trusted Source in GitLab

gitlab

Improper Cleanup on Thrown Exception in GitLab

gitlab

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab

gitlab

Integer Overflow or Wraparound in GitLab

gitlab

Insertion of Sensitive Information Into Sent Data in GitLab

gitlab

Use of Cache Containing Sensitive Information in GitLab

gitlab

Incorrect Authorization in GitLab

docker

docker security update

freerdp

freerdp security update

freerdp

freerdp security update

freerdp

freerdp security update

freerdp

freerdp security update