Open Source Vulnerabilities

rust-keylime

Security update for rust-keylime

rust-keylime

Security update for rust-keylime

389-ds, 389-ds

Security update for 389-ds

MozillaFirefox, MozillaFirefox

Security update for MozillaFirefox

libapr1, libtcnative-1-0, tomcat, libapr1, libtcnative-1-0, tomcat

Security update for libapr1, libtcnative-1-0, tomcat

golang

Distrust compromised intermediate certificates in crypto/x509

grafana

Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise

dotnet

Out-of-Bounds Write in Google Brotli Decoder

dotnet-sdk

Out-of-Bounds Write in Google Brotli Decoder

couchdb

Apache CouchDB: Auth bypass in prefixed _users and _replicator databases

couchdb

Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence values

couchdb

Apache CouchDB: Replicator follows redirects indefinitely

couchdb

Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_session

couchdb

Apache CouchDB: Admin credentials leading to code execution as operating system user

couchdb

Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs

argo-cd

Argo CD: A Kustomize Helm config home can run commands in the repo-server

argo-cd

Argo CD: A Kustomize remote ref can run commands in the repo-server

argo-cd

Argo CD: A Jsonnet import can read files from the repo-server

brotli

Out-of-Bounds Write in Google Brotli Decoder

multer, @rootio/multer

CVE-2026-88932 in multer - Patched by Root

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)

com.fasterxml.jackson.core:jackson-databind

TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)

jaraco.context

GHSA-58pv-8j8x-9vj2 in jaraco.context - Patched by Root

jaraco.context

CVE-2026-23949 in jaraco.context - Patched by Root

github.com/hamba/avro/v2, rootio-github.com/hamba/avro/v2

CVE-2026-46385 in github.com/hamba/avro/v2 - Patched by Root

github.com/hamba/avro/v2, rootio-github.com/hamba/avro/v2

CVE-2026-46384 in github.com/hamba/avro/v2 - Patched by Root

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0

eco-nodejs-20.9.0