Thingsboard version 4.2.1.1-r1 addresses four distinct security vulnerabilities. This release includes security fixes that resolve these issues, improving the overall security posture of the software. No CVSS scores or detailed vulnerability descriptions are provided. There are no known exploits in the wild associated with these vulnerabilities at this time.
The fluent-operator package version 3.6.0-r0 addresses three security vulnerabilities identified as CVE-2026-27139, CVE-2026-27142, and CVE-2026-25679. A patch is available in this version to fix these issues. No CVSS score or detailed technical impact information is provided for these vulnerabilities.
Apache NiFi version 2.7.2-r0 addresses three distinct security vulnerabilities identified by GHSA identifiers ghsa-3677-xxcr-wjqv, ghsa-x44p-gvrj-pj2r, and ghsa-qqpg-mvqg-649v. These vulnerabilities are fixed in this specific package release. No CVSS score or detailed technical impact is provided for these vulnerabilities. There are no known exploits in the wild at this time. The package is not a cloud service, so remediation requires applying the fixed version.
The airflow-2 package version 2.11.0-r2 addresses two security vulnerabilities, including CVE-2026-44503 and another identified as ghsa-7j59-v9qr-6fq9. This release provides security fixes to mitigate these issues. No CVSS score or detailed technical impact information is available for CVE-2026-44503. There are no known exploits in the wild associated with these vulnerabilities at this time.
The flink package version 2.2.0-r0 addresses a security vulnerability identified as CVE-2025-68161. This version includes fixes for the vulnerability. No CVSS score or detailed technical impact information is provided for this issue.
The vt-cli package version 1.2.0-r0 addresses a security vulnerability identified as CVE-2025-61725. A patch is available in this version to fix the issue. No details about the nature of the vulnerability or its impact are provided. There are no known exploits in the wild related to this vulnerability. Users should update to version 1.2.0-r0 to remediate the vulnerability.
The ntpd-rs package version 1.6.2-r1 addresses three distinct security vulnerabilities identified by their GHSA identifiers. This release provides security fixes to mitigate these issues. No CVSS score or detailed impact information is provided for these vulnerabilities. There are no known exploits in the wild associated with these vulnerabilities at this time.
The minio-operator-fips package version 5.0.18-r7 addresses two security vulnerabilities identified by GHSA identifiers ghsa-f6x5-jh6r-wrfv and ghsa-j5w8-q4qc-rx2x. This release provides security fixes to mitigate these issues. No CVSS score or detailed technical impact information is available for these vulnerabilities. There are no known exploits in the wild associated with these vulnerabilities at this time.
kubewatch version 2.12.0-r0 addresses one security vulnerability identified as ghsa-gxhx-2686-5h9g. A patch is available for this version to fix the vulnerability. No CVSS score or detailed impact information is provided.
The gpu-operator-fips package version 25.10.0-r1 addresses two security vulnerabilities identified by GHSA advisories ghsa-f6x5-jh6r-wrfv and ghsa-j5w8-q4qc-rx2x. This release provides security fixes to mitigate these issues. No CVSS score or detailed impact information is provided. No known exploits are reported in the wild for these vulnerabilities.
Fulcio version 1.8.2-r0 addresses two security vulnerabilities identified by GHSA identifiers ghsa-f6x5-jh6r-wrfv and ghsa-j5w8-q4qc-rx2x. This release includes security fixes to remediate these issues. No CVSS score or detailed impact information is provided. There are no known exploits in the wild related to these vulnerabilities. The package is not a cloud service, so remediation requires applying this fixed version.
The dex package version 2.43.1-r1 addresses and fixes one known vulnerability identified as ghsa-fw7p-63qq-7hpr. This update is a security patch that resolves the issue in this specific version. No CVSS score or detailed impact information is provided. There are no known exploits in the wild related to this vulnerability. Users of dex should apply this fixed version to remediate the vulnerability.
The Prometheus package contains a critical vulnerability (CVE-2026-24051) in its Delete function, which fails to properly validate offsets when processing malformed JSON input. This flaw can lead to severe consequences including complete compromise of confidentiality, integrity, and availability. The vulnerability affects specific versions of Prometheus, and a patch is available to address the issue.
Multiple medium severity security issues were addressed in the libtree-sitter0_26 package version 0.26.8-5.1 for openSUSE Tumbleweed, improving the security posture of the nm-configurator component. These vulnerabilities affect earlier versions of the package and have been resolved in the updated release. No CVSS score is provided for these issues.
OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Golang 1.23 contains a vulnerability (CVE-2026-46600) where parsing an invalid SVCB or HTTPS resource record (RR) can cause a panic due to a parameter value size overflow in the message buffer. This issue affects multiple versions of Golang and related knative-serving versions prior to 1.22.1-r0. A patch is available to address this vulnerability. The CVSS score is 7.5, indicating a medium severity with an impact on availability.
Multiple security vulnerabilities were identified in the Atlantis package. These vulnerabilities have been addressed and fixed in version 0.37.1-r1. No details about the specific nature or impact of these vulnerabilities are provided. There are no known exploits in the wild related to these issues. Users should upgrade to version 0.37.1-r1 to mitigate the risks.
A security vulnerability was identified in the weaviate-fips package version 1.35.17-r0. The issue has been addressed and fixed in later releases of the package. No CVSS score or detailed technical impact information is provided in the available data.