Advisoriesby Ibis60 of 8,604 advisories
APT package manager that affects Ubuntu and Debian operating systemsAWSCVE-2026-109518no fix yetGluonTS arbitrary file write during archive extractionGluonTSCVE-2026-119083no fix yetImproper isolation of shared resources in aws-network-policy-agent in Amazon EKSAWSCVE-2026-122266no fix yetGuest Access to Firecracker Process Memory After a Failed Memory DiscardAWSCVE-2026-122192no fix yetAWS API MCP Server OAuth token audience validation bypassAWSCVE-2026-115413no fix yetRemote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection...Amazon Redshift JDBC DriverCVE-2026-119084no fix yetBabelfish for PostgreSQL Privilege EscalationAWSCVE-2026-119922no fix yetTemplate injection in the publishing component of Virtual Engineering WorkbenchAWSCVE-2026-119085no fix yetImproper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in...AWSCVE-2026-119301no fix yetIssues in AWS Nitro Enclaves SDK for CAWSCVE-2026-119116no fix yetIncorrect authorization in issuer resolution in AWS Private CA Connector for KubernetesAWSCVE-2026-119115no fix yet
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEvLLMCVE-2026-115915fixed in 0.32.0vLLM: unsafe deserializationvLLMCVE-2026-115912fixed in 0.32.0
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version sourceMLflowCVE-2026-116690fixed in 3.17.0
MCP SDKs: resource exhaustionMCP SDKsGHSA-f897-62hf-6gxqfixed in 1.30.1vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code executionvLLMCVE-2026-114053fixed in 0.31.0
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`LiteLLMGHSA-g5ff-637f-6q2mfixed in 1.95.0LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyLiteLLMCVE-2026-114612fixed in 1.100.4 +4
NLTK: path traversalNLTKCVE-2026-109956fixed in 3.10.4