Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| DEBIAN-CVE-2026-41888 |
|
Vulnerability in docker-registry (DEBIAN-CVE-2026-41888)
vulnerability in docker-registry (DEBIAN-CVE-2026-41888). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /v2/`. Mitigation: upgrade to `3.1.1` or later.
|
| CVE-2026-42572 |
|
Vulnerability in github.com/hatchet-dev/hatchet (CVE-2026-42572)
vulnerability in github.com/hatchet-dev/hatchet (CVE-2026-42572). Confidential information can be exposed externally. Exploitable via `GET /api/v1/stable/dags/tasks`. Mitigation: upgrade to `0.83.39` or later.
|
| CVE-2026-41888 |
|
Authorization Flaw in github.com/distribution/distribution/v3 (CVE-2026-41888)
vulnerability in github.com/distribution/distribution/v3 (CVE-2026-41888). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /v2/`. Mitigation: upgrade to `3.1.1` or later.
|
| UBUNTU-CVE-2026-44544 |
|
Vulnerability in gittuf (UBUNTU-CVE-2026-44544)
vulnerability in gittuf (UBUNTU-CVE-2026-44544). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.14.0` or later.
|
| UBUNTU-CVE-2026-46470 |
|
Vulnerability in gst-plugins-good1.0 (UBUNTU-CVE-2026-46470)
vulnerability in gst-plugins-good1.0 (UBUNTU-CVE-2026-46470). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.20.3-0ubuntu1.6` or later.
|
| UBUNTU-CVE-2026-46469 |
|
Vulnerability in gst-plugins-good1.0 (UBUNTU-CVE-2026-46469)
vulnerability in gst-plugins-good1.0 (UBUNTU-CVE-2026-46469). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.20.3-0ubuntu1.6` or later.
|
| UBUNTU-CVE-2026-44283 |
|
Vulnerability in etcd (UBUNTU-CVE-2026-44283)
vulnerability in etcd (UBUNTU-CVE-2026-44283). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.44` or later.
|
| UBUNTU-CVE-2026-41888 |
|
Vulnerability in docker-registry (UBUNTU-CVE-2026-41888)
vulnerability in docker-registry (UBUNTU-CVE-2026-41888). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /v2/`. Mitigation: upgrade to `3.1.1` or later.
|
| RLSA-2026:16196 |
|
Vulnerability in kernel-rt (RLSA-2026:16196)
vulnerability in kernel-rt (RLSA-2026:16196). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.124.1.rt7.465.el8_10` or later.
|
| RLSA-2026:17533 |
|
Vulnerability in gimp (RLSA-2026:17533)
vulnerability in gimp (RLSA-2026:17533). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:2.8.22-26.module+el8.10.0+40033+6fd27379.3` or later.
|
| RLSA-2026:16875 |
|
Vulnerability in git-lfs (RLSA-2026:16875)
vulnerability in git-lfs (RLSA-2026:16875). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:3.4.1-10.el8_10` or later.
|
| RLSA-2026:16252 |
|
Vulnerability in jq (RLSA-2026:16252)
vulnerability in jq (RLSA-2026:16252). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.6-12.el8_10` or later.
|
| RLSA-2026:16799 |
|
Vulnerability in krb5 (RLSA-2026:16799)
vulnerability in krb5 (RLSA-2026:16799). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.18.2-34.el8_10` or later.
|
| RLSA-2026:16195 |
|
Vulnerability in kernel (RLSA-2026:16195)
vulnerability in kernel (RLSA-2026:16195). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.124.1.el8_10` or later.
|
| ECHO-63fc-2f8a-5391 |
|
ECHO-63fc-2f8a-5391 |
| ECHO-c9b4-8303-30f9 |
|
ECHO-c9b4-8303-30f9 |
| ECHO-1169-1a51-1552 |
|
ECHO-1169-1a51-1552 |
| ECHO-07c3-3f85-b9ea |
|
ECHO-07c3-3f85-b9ea |
| ECHO-c17a-46ab-75a9 |
|
ECHO-c17a-46ab-75a9 |
| ECHO-a6f1-a1c7-a609 |
|
ECHO-a6f1-a1c7-a609 |
| ECHO-848c-5472-d56d |
|
ECHO-848c-5472-d56d |
| ECHO-4419-6a8c-5fc6 |
|
ECHO-4419-6a8c-5fc6 |
| ECHO-63b9-137e-93f1 |
|
ECHO-63b9-137e-93f1 |
| ECHO-e69f-5ef2-55d4 |
|
ECHO-e69f-5ef2-55d4 |
| ECHO-b729-aa9a-e866 |
|
ECHO-b729-aa9a-e866 |
| CGA-wh4q-hcx2-j928 |
|
CGA-wh4q-hcx2-j928 |
| CGA-rp2j-pmmh-7mqc |
|
CGA-rp2j-pmmh-7mqc |
| CGA-q4qr-pvx7-f4wj |
|
CGA-q4qr-pvx7-f4wj |
| CGA-p2f4-4jq3-89hr |
|
CGA-p2f4-4jq3-89hr |
| CGA-7m5h-8rcx-xp2q |
|
CGA-7m5h-8rcx-xp2q |
| CGA-3rgm-946g-m52h |
|
CGA-3rgm-946g-m52h |
| CLSA-2026-1778774223 |
|
Vulnerability in gnutls (CLSA-2026-1778774223)
vulnerability in gnutls (CLSA-2026-1778774223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.16-4.el8.tuxcare.els9` or later.
|
| CVE-2026-7805 |
|
Vulnerability in CVE-2026-7805 (CVE-2026-7805)
vulnerability in CVE-2026-7805 (CVE-2026-7805). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6923 |
|
Vulnerability in CVE-2026-6923 (CVE-2026-6923)
vulnerability in CVE-2026-6923 (CVE-2026-6923). Confidential information can be exposed externally.
|
| CVE-2026-45448 |
|
CWE-601 URL redirection to untrusted site ('open redirect')
CWE-601 URL redirection to untrusted site ('open redirect')
|
| CVE-2026-44515 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44515)
SSRF in ssrf (CVE-2026-44515). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `28.3.0-beta.1` or later.
|
| CVE-2026-44514 |
|
Vulnerability in github.com/kubetail-org/kubetail/modules/dashboard (CVE-2026-44514)
vulnerability in github.com/kubetail-org/kubetail/modules/dashboard (CVE-2026-44514). Confidential information can be exposed externally. Exploitable via ``kubetail``. Mitigation: upgrade to `0.14.0` or later.
|
| DEBIAN-CVE-2026-44312 |
|
Vulnerability in ruby-css-parser (DEBIAN-CVE-2026-44312)
vulnerability in ruby-css-parser (DEBIAN-CVE-2026-44312). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.0` or later.
|
| CVE-2026-44511 |
|
Vulnerability in katalyst-koi (CVE-2026-44511)
vulnerability in katalyst-koi (CVE-2026-44511). Confidential information can be exposed externally. Mitigation: upgrade to `5.6.0` or later.
|
| CVE-2026-44348 |
|
Vulnerability in c (CVE-2026-44348)
vulnerability in c (CVE-2026-44348). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.4` or later.
|
| CVE-2026-42555 |
|
Code Injection in com.ritense.valtimo:document (CVE-2026-42555)
code injection in com.ritense.valtimo:document (CVE-2026-42555). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/management/v1/document-definition/migrate`. Mitigation: upgrade to `12.32.0` or later.
|
| CVE-2026-20224 |
|
Vulnerability in cisco (CVE-2026-20224)
vulnerability in cisco (CVE-2026-20224). Confidential information can be exposed externally.
|
| CVE-2026-20210 |
|
Vulnerability in cisco (CVE-2026-20210)
vulnerability in cisco (CVE-2026-20210). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62317 |
|
Vulnerability in CVE-2025-62317 (CVE-2025-62317)
vulnerability in CVE-2025-62317 (CVE-2025-62317). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62316 |
|
Vulnerability in CVE-2025-62316 (CVE-2025-62316)
vulnerability in CVE-2025-62316 (CVE-2025-62316). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62313 |
|
Vulnerability in CVE-2025-62313 (CVE-2025-62313)
vulnerability in CVE-2025-62313 (CVE-2025-62313). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62312 |
|
Vulnerability in CVE-2025-62312 (CVE-2025-62312)
vulnerability in CVE-2025-62312 (CVE-2025-62312). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62311 |
|
Vulnerability in CVE-2025-62311 (CVE-2025-62311)
vulnerability in CVE-2025-62311 (CVE-2025-62311). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62310 |
|
Vulnerability in CVE-2025-62310 (CVE-2025-62310)
vulnerability in CVE-2025-62310 (CVE-2025-62310). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62309 |
|
Vulnerability in CVE-2025-62309 (CVE-2025-62309)
vulnerability in CVE-2025-62309 (CVE-2025-62309). Risk of unauthorized operations or information disclosure.
|