Ubuntu - OSV

USN-8958-1

Ubuntu:22.04:LTS/dotnet8
Ubuntu:24.04:LTS/dotnet10
Ubuntu:24.04:LTS/dotnet8
Ubuntu:26.04:LTS/dotnet10
Ubuntu:26.10/dotnet10
... 1 more

dotnet8, dotnet10, dotnet11 vulnerabilities 12 hours ago

Fix available

UBUNTU-CVE-2026-103506

Ubuntu:16.04:LTS/grafana

An authenticated user in Grafana can read SSO client secrets and modify... yesterday

No fix available
Severity - 8.9 (High)

UBUNTU-CVE-2026-110952

Ubuntu:Pro:18.04:LTS/kafka

A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the... yesterday

No fix available

UBUNTU-CVE-2026-110985

Ubuntu:Pro:18.04:LTS/kafka

A Kafka broker using SASL/OAUTHBEARER with the default validator... yesterday

No fix available

UBUNTU-CVE-2026-111073

Ubuntu:Pro:18.04:LTS/kafka

The broker-side PushTelemetry API (KIP-714) validates only the compressed size... yesterday

No fix available

UBUNTU-CVE-2026-111496

Ubuntu:Pro:18.04:LTS/kafka

Kafka Streams derives its stream-time clock from record timestamps.... yesterday

No fix available

UBUNTU-CVE-2026-111551

Ubuntu:Pro:18.04:LTS/kafka

Several Kafka deserialization paths read a size or count field from input data... yesterday

No fix available

UBUNTU-CVE-2026-112375

Ubuntu:Pro:18.04:LTS/kafka

An authenticated Kafka principal with no authorization grants (not even... yesterday

No fix available

UBUNTU-CVE-2026-114349

Ubuntu:Pro:18.04:LTS/kafka

When a broker decodes a compressed record batch, the per-record decoder reads a... yesterday

No fix available

UBUNTU-CVE-2026-115644

Ubuntu:Pro:18.04:LTS/kafka

Apache Kafka Connect contains an authentication bypass vulnerability affecting... yesterday

No fix available

UBUNTU-CVE-2026-116078

Ubuntu:16.04:LTS/bandit
Ubuntu:18.04:LTS/bandit
Ubuntu:20.04:LTS/bandit
Ubuntu:22.04:LTS/bandit
Ubuntu:24.04:LTS/bandit
... 2 more

Allocation of Resources Without Limits or Throttling vulnerability in the... yesterday

No fix available
Severity - 8.7 (High)

UBUNTU-CVE-2026-117548

Ubuntu:22.04:LTS/389-ds-base
Ubuntu:24.04:LTS/389-ds-base
Ubuntu:26.04:LTS/389-ds-base
Ubuntu:26.10/389-ds-base
Ubuntu:Pro:16.04:LTS/389-ds-base
... 2 more

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when... yesterday

No fix available
Severity - 6.5 (Medium)

UBUNTU-CVE-2026-118258

Ubuntu:22.04:LTS/node-i18next-http-backend
Ubuntu:24.04:LTS/node-i18next-http-backend
Ubuntu:26.04:LTS/node-i18next-http-backend
Ubuntu:26.10/node-i18next-http-backend

i18next-http-backend is a backend layer for i18next that loads translation... yesterday

No fix available
Severity - 3.7 (Low)

UBUNTU-CVE-2026-118260

Ubuntu:20.04:LTS/golang-github-labstack-echo.v2
Ubuntu:20.04:LTS/golang-github-labstack-echo.v3
Ubuntu:22.04:LTS/golang-github-labstack-echo
Ubuntu:22.04:LTS/golang-github-labstack-echo.v2
Ubuntu:22.04:LTS/golang-github-labstack-echo.v3
... 3 more

Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in BodyDump... yesterday

No fix available
Severity - 8.2 (High)

UBUNTU-CVE-2026-118261

Ubuntu:20.04:LTS/golang-github-labstack-echo.v2
Ubuntu:20.04:LTS/golang-github-labstack-echo.v3
Ubuntu:22.04:LTS/golang-github-labstack-echo
Ubuntu:22.04:LTS/golang-github-labstack-echo.v2
Ubuntu:22.04:LTS/golang-github-labstack-echo.v3
... 3 more

Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in... yesterday

No fix available
Severity - 8.2 (High)

UBUNTU-CVE-2026-118262

Ubuntu:20.04:LTS/golang-github-labstack-echo.v2
Ubuntu:20.04:LTS/golang-github-labstack-echo.v3
Ubuntu:22.04:LTS/golang-github-labstack-echo
Ubuntu:22.04:LTS/golang-github-labstack-echo.v2
Ubuntu:22.04:LTS/golang-github-labstack-echo.v3
... 3 more

Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy... yesterday

No fix available
Severity - 8.2 (High)

Vulnerabilities