Threats affecting pkg:bitnami/ceph

CVE-2026-116620 is a medium severity vulnerability in Tencent RapidJSON versions 1.0 and 1.1.0. It involves an out-of-bounds read in the GenericStringStream<UTF8<char>>::Take function within the Regex Parser component. This flaw can be triggered remotely and has been publicly disclosed. No patch or vendor response is currently available.

CVE-2026-116608 is a medium severity vulnerability in DAMO Academy VideoLLaMA2 versions 1.0 and 1.1. It involves improper validation of an integrity check value in the load_pretrained_model function, which can be triggered by manipulating the _name_or_path argument. Remote exploitation is possible, and public exploit details have been disclosed. The vendor has not yet responded or issued a fix.

CVE-2026-116605 is a vulnerability in SourceCodester Online Food Ordering System version 1.0. It involves client-side enforcement of security controls that should be enforced server-side in the order.php file, specifically through manipulation of the price/title argument. The vulnerability can be exploited remotely and public exploit code is available. The CVSS 4.0 score is 6.9, indicating a medium severity level.

CVE-2026-106427 is a vulnerability in Chromium involving a confused deputy issue on mobile platforms. A fix for this vulnerability is available in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106419 is a use-after-free vulnerability in the ANGLE component of Chromium. This flaw affects Chromium versions prior to 155.0.4283.48 and was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. There are no known exploits in the wild at this time.

CVE-2026-106414 is a vulnerability in Chromium related to improper input validation in the mobile context. Affected versions are up to and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48.

CVE-2026-106408 is a vulnerability in Chromium related to a protection mechanism failure on mobile platforms. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-106406 is a vulnerability in Chromium related to missing authorization in the mobile context. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-106405 is a race condition vulnerability in the CustomTabs component of Chromium. Affected versions are those before 155.0.4283.48, with the issue fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106400 is a clickjacking vulnerability affecting Chromium-based Microsoft products. The issue was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106397 is an incorrect authorization vulnerability affecting the Chromium component in Microsoft products. The issue was addressed in version 155.0.4283.48. No CVSS score or detailed impact description is provided.

CVE-2026-106395 is a vulnerability in the Chromium component Dawn involving an uninitialized resource. Affected versions are prior to 155.0.4283.48. The issue has been fixed in version 155.0.4283.48.

CVE-2026-106387 is a vulnerability in Chromium related to missing authorization in the mobile version. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48.

CVE-2026-106380 is a vulnerability in Chromium involving UI misrepresentation. The issue was addressed and fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106368 is a vulnerability in Chromium related to UI misrepresentation. It affects versions prior to and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106367 is a vulnerability in Chromium related to missing authorization in the mobile version. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48.

CVE-2026-106366 is a vulnerability in Chromium related to incomplete cleanup in the CustomTabs component. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-106361 is a vulnerability in Chromium related to incorrect provision of specified functionality on mobile platforms. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-106353 is a vulnerability in Chromium related to improper input validation in the mobile component. Affected versions include all versions prior to 155.0.4283.48, which contains the fix.

CVE-2026-106337 is a vulnerability in Microsoft Chromium-based software involving UI misrepresentation. The issue was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.