Threats affecting pkg:generic/flyway

CVE-2026-106337 is a vulnerability in Microsoft Chromium-based software involving UI misrepresentation. The issue was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106326 is a vulnerability in Chromium described as a confused deputy issue in the user interface. It affects Microsoft-distributed Chromium versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106320 is a vulnerability in Chromium involving the use of a released resource in the user interface. This flaw affects versions prior to and including 155.0.4283.48. A fix is available in version 155.0.4283.48. There are no known exploits in the wild and no CVSS score has been assigned.

CVE-2026-106317 is a vulnerability in Chromium related to UI misrepresentation in FullScreen mode. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-106313 is a vulnerability in Chromium related to incorrect authorization in the browser. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48.

CVE-2026-106305 is a vulnerability in Chromium related to UI misrepresentation on mobile platforms. The issue was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106298 is a use-after-free vulnerability in Chrome Tabs that affects Chromium versions prior to 155.0.4283.48. This flaw has been addressed in version 155.0.4283.48. No public exploit or active exploitation in the wild has been reported.

CVE-2026-106296 is a vulnerability in Chromium involving improper privilege management in the user interface. It affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-106290 is a vulnerability in Chromium related to an uninitialized resource in the GPU component. The issue affects versions prior to 155.0.4283.48, with the fixed version being 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106254 is an information leak vulnerability affecting Chromium-based Microsoft software on mobile platforms. The issue has been addressed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106223 is a vulnerability in the Chromium component used by Microsoft products involving an uninitialized resource in the GPU. The issue affects versions prior to 155.0.4283.48 and is fixed starting from version 155.0.4283.48.

CVE-2026-106221 is a vulnerability in Chromium related to a confused deputy issue in WebAPKs. The flaw affects versions prior to 155.0.4283.48 and is fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106209 is a vulnerability in Chromium related to UI misrepresentation on mobile platforms. Affected versions include those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106206 is an improper input validation vulnerability affecting the Chromium component in Microsoft products. The issue is resolved in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-106192 is an information leak vulnerability affecting Chromium on mobile platforms. The issue was addressed in version 155.0.4283.48. No CVSS score or detailed impact information is provided.

CVE-2026-102327 is an incorrect authorization vulnerability in the Chromium WebView component. It affects versions prior to and including 155.0.4283.48. A fix is available in version 155.0.4283.48.

CVE-2026-116604 is a vulnerability in SourceCodester Online Food Ordering System version 1.0. It involves missing authentication in the admin/delete_admin.php file, allowing remote attackers to manipulate the ID argument without proper authentication. This vulnerability has a medium severity score of 6.9 and has been publicly disclosed with available exploit information.

CVE-2026-116603 is a medium severity vulnerability in SourceCodester Online Food Ordering System version 1.0. It involves an unrestricted file upload flaw in the admin/add_food.php script, where manipulation of the 'image' argument allows remote attackers with high privileges to upload files without restriction. Exploit code has been published, but there is no indication of active exploitation in the wild. No patch or official fix information is currently available.

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as `$(...)` in a value was executed on the remote SSH host. In a Dag that passes trigger-time input such as `params` or `dag_run.conf` into `environment`, a user who can trigger that Dag but cannot author Dags could run arbitrary commands on the remote host as the SSH connection's user. Users are advised to upgrade apache-airflow-providers-ssh to 7.0.1 or later.

CVE-2026-110158 is a use-after-free vulnerability in the Chromium component related to password handling. This flaw affects Chromium versions prior to 155.0.4283.60. The issue has been addressed in version 155.0.4283.60.