Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| MAL-2026-5137 |
|
Vulnerability in @redhat-cloud-services/frontend-components-translations (MAL-2026-5137)
vulnerability in @redhat-cloud-services/frontend-components-translations (MAL-2026-5137). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-cxfw-p322-rfrv |
|
Vulnerability in @redhat-cloud-services/frontend-components-config-utilities (GHSA-cxfw-p322-rfrv)
vulnerability in @redhat-cloud-services/frontend-components-config-utilities (GHSA-cxfw-p322-rfrv). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5135 |
|
Vulnerability in @redhat-cloud-services/frontend-components-advisor-components (MAL-2026-5135)
vulnerability in @redhat-cloud-services/frontend-components-advisor-components (MAL-2026-5135). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-c3mv-fjj4-2542 |
|
Vulnerability in @redhat-cloud-services/eslint-config-redhat-cloud-services (GHSA-c3mv-fjj4-2542)
vulnerability in @redhat-cloud-services/eslint-config-redhat-cloud-services (GHSA-c3mv-fjj4-2542). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-28hc-2275-h287 |
|
Vulnerability in @redhat-cloud-services/entitlements-client (GHSA-28hc-2275-h287)
vulnerability in @redhat-cloud-services/entitlements-client (GHSA-28hc-2275-h287). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5134 |
|
Vulnerability in @redhat-cloud-services/config-manager-client (MAL-2026-5134)
vulnerability in @redhat-cloud-services/config-manager-client (MAL-2026-5134). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5133 |
|
Vulnerability in @redhat-cloud-services/compliance-client (MAL-2026-5133)
vulnerability in @redhat-cloud-services/compliance-client (MAL-2026-5133). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-942v-f47r-w9c3 |
|
Vulnerability in @redhat-cloud-services/chrome (GHSA-942v-f47r-w9c3)
vulnerability in @redhat-cloud-services/chrome (GHSA-942v-f47r-w9c3). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5148 |
|
Vulnerability in @redhat-cloud-services/vulnerabilities-client (MAL-2026-5148)
vulnerability in @redhat-cloud-services/vulnerabilities-client (MAL-2026-5148). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-8xj2-9c64-m64h |
|
Vulnerability in @redhat-cloud-services/types (GHSA-8xj2-9c64-m64h)
vulnerability in @redhat-cloud-services/types (GHSA-8xj2-9c64-m64h). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-9wp8-557p-2hvf |
|
Vulnerability in @redhat-cloud-services/topological-inventory-client (GHSA-9wp8-557p-2hvf)
vulnerability in @redhat-cloud-services/topological-inventory-client (GHSA-9wp8-557p-2hvf). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5147 |
|
Vulnerability in @redhat-cloud-services/tsc-transform-imports (MAL-2026-5147)
vulnerability in @redhat-cloud-services/tsc-transform-imports (MAL-2026-5147). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5146 |
|
Vulnerability in @redhat-cloud-services/remediations-client (MAL-2026-5146)
vulnerability in @redhat-cloud-services/remediations-client (MAL-2026-5146). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-2p99-xvqh-j893 |
|
Vulnerability in @redhat-cloud-services/rbac-client (GHSA-2p99-xvqh-j893)
vulnerability in @redhat-cloud-services/rbac-client (GHSA-2p99-xvqh-j893). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-mj98-cgm5-6xrr |
|
Vulnerability in @redhat-cloud-services/quickstarts-client (GHSA-mj98-cgm5-6xrr)
vulnerability in @redhat-cloud-services/quickstarts-client (GHSA-mj98-cgm5-6xrr). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-8x4g-q845-wpfc |
|
Vulnerability in @redhat-cloud-services/integrations-client (GHSA-8x4g-q845-wpfc)
vulnerability in @redhat-cloud-services/integrations-client (GHSA-8x4g-q845-wpfc). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5143 |
|
Vulnerability in @redhat-cloud-services/javascript-clients-shared (MAL-2026-5143)
vulnerability in @redhat-cloud-services/javascript-clients-shared (MAL-2026-5143). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5145 |
|
Vulnerability in @redhat-cloud-services/patch-client (MAL-2026-5145)
vulnerability in @redhat-cloud-services/patch-client (MAL-2026-5145). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5144 |
|
Vulnerability in @redhat-cloud-services/notifications-client (MAL-2026-5144)
vulnerability in @redhat-cloud-services/notifications-client (MAL-2026-5144). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5139 |
|
Vulnerability in @redhat-cloud-services/hcc-kessel-mcp (MAL-2026-5139)
vulnerability in @redhat-cloud-services/hcc-kessel-mcp (MAL-2026-5139). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5142 |
|
Vulnerability in @redhat-cloud-services/insights-client (MAL-2026-5142)
vulnerability in @redhat-cloud-services/insights-client (MAL-2026-5142). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5140 |
|
Vulnerability in @redhat-cloud-services/hcc-pf-mcp (MAL-2026-5140)
vulnerability in @redhat-cloud-services/hcc-pf-mcp (MAL-2026-5140). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| MAL-2026-5141 |
|
Vulnerability in @redhat-cloud-services/host-inventory-client (MAL-2026-5141)
vulnerability in @redhat-cloud-services/host-inventory-client (MAL-2026-5141). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| ALSA-2026:22305 |
|
Vulnerability in apcu-panel (ALSA-2026:22305)
vulnerability in apcu-panel (ALSA-2026:22305). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.23-1.module_el8.10.0+3796+30ed3ef7` or later.
|
| ALSA-2026:22143 |
|
Vulnerability in apcu-panel (ALSA-2026:22143)
vulnerability in apcu-panel (ALSA-2026:22143). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.23-1.module_el9.4.0+65+49ff6472` or later.
|
| ALSA-2026:22142 |
|
Vulnerability in apcu-panel (ALSA-2026:22142)
vulnerability in apcu-panel (ALSA-2026:22142). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.1.23-1.module_el9.6.0+151+5f31e576` or later.
|
| UBUNTU-CVE-2026-43514 |
|
Vulnerability in tomcat6 (UBUNTU-CVE-2026-43514)
vulnerability in tomcat6 (UBUNTU-CVE-2026-43514). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-9516 |
|
Vulnerability in libcpanel-json-xs-perl (UBUNTU-CVE-2026-9516)
vulnerability in libcpanel-json-xs-perl (UBUNTU-CVE-2026-9516). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-9334 |
|
Vulnerability in libcpanel-json-xs-perl (UBUNTU-CVE-2026-9334)
vulnerability in libcpanel-json-xs-perl (UBUNTU-CVE-2026-9334). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-47187 |
|
[Unknown description] |
| UBUNTU-CVE-2026-48827 |
|
Vulnerability in mina (UBUNTU-CVE-2026-48827)
vulnerability in mina (UBUNTU-CVE-2026-48827). Confidential information can be exposed externally.
|
| UBUNTU-CVE-2026-48711 |
|
[Unknown description] |
| UBUNTU-CVE-2026-48501 |
|
Vulnerability in golang-github-cli-go-gh (UBUNTU-CVE-2026-48501)
vulnerability in golang-github-cli-go-gh (UBUNTU-CVE-2026-48501). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `2.93.0` or later.
|
| UBUNTU-CVE-2026-46599 |
|
Vulnerability in golang-golang-x-image (UBUNTU-CVE-2026-46599)
vulnerability in golang-golang-x-image (UBUNTU-CVE-2026-46599). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-46527 |
|
Vulnerability in cpp-httplib (UBUNTU-CVE-2026-46527)
vulnerability in cpp-httplib (UBUNTU-CVE-2026-46527). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.44.0` or later.
|
| UBUNTU-CVE-2026-45700 |
|
Vulnerability in freerdp (UBUNTU-CVE-2026-45700)
vulnerability in freerdp (UBUNTU-CVE-2026-45700). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.26.0` or later.
|
| UBUNTU-CVE-2026-45372 |
|
Vulnerability in cpp-httplib (UBUNTU-CVE-2026-45372)
vulnerability in cpp-httplib (UBUNTU-CVE-2026-45372). Data can be tampered with by attackers. Mitigation: upgrade to `0.44.0` or later.
|
| UBUNTU-CVE-2026-49390 |
|
[Unknown description] |
| UBUNTU-CVE-2026-49389 |
|
[Unknown description] |
| UBUNTU-CVE-2026-49388 |
|
[Unknown description] |
| UBUNTU-CVE-2026-49387 |
|
[Unknown description] |
| UBUNTU-CVE-2026-45352 |
|
Vulnerability in cpp-httplib (UBUNTU-CVE-2026-45352)
vulnerability in cpp-httplib (UBUNTU-CVE-2026-45352). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.43.4` or later.
|
| UBUNTU-CVE-2026-45149 |
|
Vulnerability in node-brace-expansion (UBUNTU-CVE-2026-45149)
vulnerability in node-brace-expansion (UBUNTU-CVE-2026-45149). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.0.6` or later.
|
| UBUNTU-CVE-2026-44836 |
|
Vulnerability in ruby-view-component (UBUNTU-CVE-2026-44836)
vulnerability in ruby-view-component (UBUNTU-CVE-2026-44836). Confidential information can be exposed externally. Mitigation: upgrade to `4.9.0` or later.
|
| UBUNTU-CVE-2026-44421 |
|
Vulnerability in freerdp (UBUNTU-CVE-2026-44421)
vulnerability in freerdp (UBUNTU-CVE-2026-44421). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.26.0` or later.
|
| UBUNTU-CVE-2026-44825 |
|
Vulnerability in lucene-solr (UBUNTU-CVE-2026-44825)
vulnerability in lucene-solr (UBUNTU-CVE-2026-44825). Successful exploitation can lead to full system takeover.
|
| UBUNTU-CVE-2026-44420 |
|
Vulnerability in freerdp (UBUNTU-CVE-2026-44420)
vulnerability in freerdp (UBUNTU-CVE-2026-44420). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.26.0` or later.
|
| UBUNTU-CVE-2026-44422 |
|
Vulnerability in freerdp (UBUNTU-CVE-2026-44422)
vulnerability in freerdp (UBUNTU-CVE-2026-44422). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.26.0` or later.
|
| UBUNTU-CVE-2026-44240 |
|
Vulnerability in node-proxy-agents (UBUNTU-CVE-2026-44240)
vulnerability in node-proxy-agents (UBUNTU-CVE-2026-44240). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.3.1` or later.
|
| UBUNTU-CVE-2026-43513 |
|
Vulnerability in tomcat6 (UBUNTU-CVE-2026-43513)
vulnerability in tomcat6 (UBUNTU-CVE-2026-43513). Confidential information can be exposed externally. Mitigation: upgrade to `6.0.39-1ubuntu0.1+esm3` or later.
|