Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| RLSA-2026:18029 |
|
Vulnerability in nginx (RLSA-2026:18029)
vulnerability in nginx (RLSA-2026:18029). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:1.20.1-24.el9_7.3.rocky.0.1` or later.
|
| RLSA-2026:19189 |
|
Vulnerability in python-tornado (RLSA-2026:19189)
vulnerability in python-tornado (RLSA-2026:19189). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:6.5.5-1.el9_7.1` or later.
|
| RLSA-2026:13381 |
|
Vulnerability in openssh (RLSA-2026:13381)
vulnerability in openssh (RLSA-2026:13381). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:8.7p1-49.el9_7.rocky.0.1` or later.
|
| RLSA-2026:13677 |
|
Vulnerability in systemd (RLSA-2026:13677)
vulnerability in systemd (RLSA-2026:13677). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:252-55.el9_7.9.rocky.0.1` or later.
|
| RLSA-2026:1377 |
|
Vulnerability in image-builder (RLSA-2026:1377)
vulnerability in image-builder (RLSA-2026:1377). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:31-2.el9_7.rocky.0.2` or later.
|
| RLSA-2025:20956 |
|
Vulnerability in libtiff (RLSA-2025:20956)
vulnerability in libtiff (RLSA-2025:20956). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.4.0-15.el9_7.2.0.1` or later.
|
| RLSA-2025:22660 |
|
Vulnerability in systemd (RLSA-2025:22660)
vulnerability in systemd (RLSA-2025:22660). Confidential information can be exposed externally. Mitigation: upgrade to `0:252-55.el9_7.7.rocky.0.1` or later.
|
| RLSA-2026:13671 |
|
Vulnerability in image-builder (RLSA-2026:13671)
vulnerability in image-builder (RLSA-2026:13671). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:31-4.el9_7.rocky.0.2` or later.
|
| RLSA-2025:20801 |
|
Vulnerability in libtiff (RLSA-2025:20801)
vulnerability in libtiff (RLSA-2025:20801). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:4.4.0-15.el9_7.2.0.1` or later.
|
| RLSA-2023:2177 |
|
Vulnerability in grafana-pcp (RLSA-2023:2177)
vulnerability in grafana-pcp (RLSA-2023:2177). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:5.1.1-14.el9_7` or later.
|
| RLSA-2026:8456 |
|
Vulnerability in osbuild-composer (RLSA-2026:8456)
vulnerability in osbuild-composer (RLSA-2026:8456). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:101.4-5.el8_10.rocky.0.6` or later.
|
| RLSA-2026:9686 |
|
Vulnerability in java-17-openjdk (RLSA-2026:9686)
vulnerability in java-17-openjdk (RLSA-2026:9686). Confidential information can be exposed externally. Mitigation: upgrade to `1:17.0.19.0.10-1.el8_10` or later.
|
| RLSA-2026:9683 |
|
Vulnerability in java-1.8.0-openjdk (RLSA-2026:9683)
vulnerability in java-1.8.0-openjdk (RLSA-2026:9683). Confidential information can be exposed externally. Mitigation: upgrade to `1:1.8.0.492.b09-1.el8_10` or later.
|
| RLSA-2026:1380 |
|
Vulnerability in osbuild-composer (RLSA-2026:1380)
vulnerability in osbuild-composer (RLSA-2026:1380). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:101.4-2.el8_10.rocky.0.6` or later.
|
| RLSA-2025:7967 |
|
Vulnerability in osbuild-composer (RLSA-2025:7967)
vulnerability in osbuild-composer (RLSA-2025:7967). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:101-3.el8_10.rocky.0.6` or later.
|
| RLSA-2025:22760 |
|
Vulnerability in abrt (RLSA-2025:22760)
vulnerability in abrt (RLSA-2025:22760). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:2.10.9-25.el8_10.rocky.0.1` or later.
|
| RLSA-2026:3898 |
|
Vulnerability in osbuild-composer (RLSA-2026:3898)
vulnerability in osbuild-composer (RLSA-2026:3898). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:101.4-4.el8_10.rocky.0.6` or later.
|
| RLSA-2026:2124 |
|
Vulnerability in osbuild-composer (RLSA-2026:2124)
vulnerability in osbuild-composer (RLSA-2026:2124). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:101.4-3.el8_10.rocky.0.6` or later.
|
| RLSA-2025:9844 |
|
Vulnerability in osbuild-composer (RLSA-2025:9844)
vulnerability in osbuild-composer (RLSA-2025:9844). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:101-4.el8_10.rocky.0.6` or later.
|
| RLSA-2025:19909 |
|
Vulnerability in tigervnc (RLSA-2025:19909)
vulnerability in tigervnc (RLSA-2025:19909). Data can be tampered with by attackers. Mitigation: upgrade to `0:1.15.0-8.el8_10.rocky.0.1` or later.
|
| RLSA-2023:7052 |
|
Vulnerability in libreswan (RLSA-2023:7052)
vulnerability in libreswan (RLSA-2023:7052). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:4.12-2.el8_10.3` or later.
|
| RLSA-2025:11324 |
|
Vulnerability in cloud-init (RLSA-2025:11324)
vulnerability in cloud-init (RLSA-2025:11324). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:23.4-7.el8_10.10.0.2` or later.
|
| RLSA-2026:6473 |
|
Vulnerability in python3 (RLSA-2026:6473)
vulnerability in python3 (RLSA-2026:6473). Confidential information can be exposed externally. Mitigation: upgrade to `0:3.6.8-75.el8_10.rocky.0` or later.
|
| RLSA-2026:4648 |
|
Vulnerability in grub2 (RLSA-2026:4648)
vulnerability in grub2 (RLSA-2026:4648). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1:2.02-170.el8_10.1.rocky.0.1` or later.
|
| RLSA-2026:3042 |
|
Vulnerability in openssl (RLSA-2026:3042)
vulnerability in openssl (RLSA-2026:3042). Confidential information can be exposed externally. Mitigation: upgrade to `1:1.1.1k-15.el8_10` or later.
|
| RLSA-2026:1631 |
|
Vulnerability in python3 (RLSA-2026:1631)
vulnerability in python3 (RLSA-2026:1631). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:3.6.8-72.el8_10.rocky.0` or later.
|
| RLSA-2026:2128 |
|
Vulnerability in python3 (RLSA-2026:2128)
vulnerability in python3 (RLSA-2026:2128). Data can be tampered with by attackers. Mitigation: upgrade to `0:3.6.8-73.el8_10.rocky.0` or later.
|
| RLSA-2025:3367 |
|
Vulnerability in grub2 (RLSA-2025:3367)
vulnerability in grub2 (RLSA-2025:3367). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1:2.02-162.el8_10.rocky.0.1` or later.
|
| RLSA-2026:11077 |
|
Vulnerability in python3 (RLSA-2026:11077)
vulnerability in python3 (RLSA-2026:11077). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:3.6.8-76.el8_10.rocky.0` or later.
|
| RLSA-2025:14560 |
|
Vulnerability in python3 (RLSA-2025:14560)
vulnerability in python3 (RLSA-2025:14560). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:3.6.8-71.el8_10.rocky.0` or later.
|
| RLSA-2025:10128 |
|
Vulnerability in python3 (RLSA-2025:10128)
vulnerability in python3 (RLSA-2025:10128). Confidential information can be exposed externally. Mitigation: upgrade to `0:3.6.8-70.el8_10.rocky.0` or later.
|
| CVE-2026-9089 |
|
Vulnerability in connectwise (CVE-2026-9089)
vulnerability in connectwise (CVE-2026-9089). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39531 |
|
SQL Injection in sqli (CVE-2026-39531)
SQL injection in sqli (CVE-2026-39531). Confidential information can be exposed externally.
|
| MAL-2026-4227 |
|
Vulnerability in lognest (MAL-2026-4227)
vulnerability in lognest (MAL-2026-4227). Risk of unauthorized operations or information disclosure. Exploitable via ``_check.py``.
|
| GHSA-6677-qmcf-whxp |
|
Vulnerability in tailwindcss-themers (GHSA-6677-qmcf-whxp)
vulnerability in tailwindcss-themers (GHSA-6677-qmcf-whxp). Risk of unauthorized operations or information disclosure.
|
| GHSA-79mj-3g96-g96c |
|
Vulnerability in tailwindcss-theme-custom (GHSA-79mj-3g96-g96c)
vulnerability in tailwindcss-theme-custom (GHSA-79mj-3g96-g96c). Risk of unauthorized operations or information disclosure.
|
| ROOT-APP-GOBINARY-CVE-2026-33223 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33223)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33215 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33215)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33215). Confidential information can be exposed externally. Mitigation: upgrade to `v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33249 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33249)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33249). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33219 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33219)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33219). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33246 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33246)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33246). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33222 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33222)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33222). Data can be tampered with by attackers. Mitigation: upgrade to `v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| ROOT-APP-GOBINARY-CVE-2026-33248 |
|
Vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33248)
vulnerability in rootio-github.com/nats-io/nats-server/v2 (ROOT-APP-GOBINARY-CVE-2026-33248). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `v2.12.3-root.io.2, v2.12.3-root.io.3` or later.
|
| MINI-36fj-mw96-vrqf |
|
MINI-36fj-mw96-vrqf |
| MINI-78fr-p4hp-jcxj |
|
MINI-78fr-p4hp-jcxj |
| MINI-3638-p33p-666c |
|
MINI-3638-p33p-666c |
| MINI-5cg6-jqch-vrjx |
|
MINI-5cg6-jqch-vrjx |
| MINI-2ccr-f9x5-89jq |
|
MINI-2ccr-f9x5-89jq |
| MINI-3868-wv7j-jmq3 |
|
MINI-3868-wv7j-jmq3 |
| MINI-38vm-g7jv-v4hw |
|
MINI-38vm-g7jv-v4hw |