Linuxfoundation - vulnerabilities (CVEs)
610 CVEs in 143 products, 41 in the last 30 days, newest from 2026-10-13.
Products
- Yocto - 115 CVEs
- Backstage - 53 CVEs
- Nats-server - 36 CVEs
- Pytorch - 31 CVEs
- Everest - 30 CVEs
- Harbor - 25 CVEs
- Containerd - 22 CVEs
- Magma - 22 CVEs
- Runc - 17 CVEs
- Iot-yocto - 15 CVEs
- Cups-filters - 14 CVEs
- Dragonfly - 13 CVEs
- Onnx - 12 CVEs
- Backstage/plugin-scaffolder-backend - 11 CVEs
- Open Network Operating System - 11 CVEs
- Backstage Plugin-techdocs-node - 10 CVEs
- Spinnaker - 10 CVEs
- Kubeedge - 9 CVEs
- Ceph - 8 CVEs
- Tekton Pipelines - 8 CVEs
- Cubefs - 6 CVEs
- Edge Virtualization Engine - 6 CVEs
- Argo-cd - 5 CVEs
- Automotive Grade Linux - 5 CVEs
- Foomatic-filters - 5 CVEs
- Opendaylight - 5 CVEs
- Osquery - 5 CVEs
- Vitess - 5 CVEs
- Backstage Plugin-catalog-backend - 4 CVEs
- Cortex - 4 CVEs
- Dex - 4 CVEs
- Grpc Swift - 4 CVEs
- Indy-node - 4 CVEs
- Materialx - 4 CVEs
- Opentelemetry Instrumentation For Java - 4 CVEs
- Rekor - 4 CVEs
- The Update Framework - 4 CVEs
- Zowe Api Mediation Layer - 4 CVEs
- Backstage/plugin-kubernetes-backend - 3 CVEs
- Besu - 3 CVEs
- Dapr - 3 CVEs
- Inspektor Gadget - 3 CVEs
- Kedro - 3 CVEs
- Sigstore Timestamp Authority - 3 CVEs
- Antrea - 2 CVEs
- Backstage/backend-defaults - 2 CVEs
- Backstage/backend Defaults - 2 CVEs
- Backstage/plugin-proxy-backend - 2 CVEs
- Backstage/plugin-scaffolder-backend-module-bitbucket-cloud - 2 CVEs
- Backstage/plugin-scaffolder-backend-module-bitbucket-server - 2 CVEs
- Backstage/plugin-scaffolder-backend-module-confluence-to-markdown - 2 CVEs
- Backstage/plugin-techdocs-backend - 2 CVEs
- Cni Network Plugins - 2 CVEs
- Dojo - 2 CVEs
- Dojox - 2 CVEs
- Fabric - 2 CVEs
- Fluid - 2 CVEs
- Fulcio - 2 CVEs
- Longhorn - 2 CVEs
- Onos-kpimon - 2 CVEs
- Onos-lib-go - 2 CVEs
- Podman Desktop - 2 CVEs
- Software For Open Networking In The Cloud - 2 CVEs
- Strimzi - 2 CVEs
- Tremor-script - 2 CVEs
- @backstage/plugin-techdocs - 1 CVEs
- @backstage/techdocs-common - 1 CVEs
- Acrn - 1 CVEs
- Auth Backend - 1 CVEs
- Backstage/integration - 1 CVEs
- Backstage/plugin-auth-backend - 1 CVEs
- Backstage/plugin-auth-backend-module-cloudflare-access-provider - 1 CVEs
- Backstage/plugin-auth-backend-module-oidc-provider - 1 CVEs
- Backstage/plugin-auth-node - 1 CVEs
- Backstage/plugin-catalog-backend-module-aws - 1 CVEs
- Backstage/plugin-catalog-backend-module-azure - 1 CVEs
- Backstage/plugin-catalog-backend-module-bitbucket-server - 1 CVEs
- Backstage/plugin-catalog-backend-module-gitlab - 1 CVEs
- Backstage/plugin-catalog-backend-module-unprocessed - 1 CVEs
- Backstage/plugin-catalog-unprocessed-entities - 1 CVEs
- Backstage/plugin-catalog-unprocessed-entities-common - 1 CVEs
- Backstage/plugin-scaffolder-backend-module-azure - 1 CVEs
- Backstage/plugin-scaffolder-backend-module-github - 1 CVEs
- Backstage/plugin-scaffolder-backend-module-gitlab - 1 CVEs
- Backstage/plugin-scaffolder-backend-module-sentry - 1 CVEs
- Backstage/plugin-search-backend - 1 CVEs
- Backstage/plugin-search-backend-module-elasticsearch - 1 CVEs
- Backstage Backend-common - 1 CVEs
- Backstage Catalog-model - 1 CVEs
- Backstage Core-components - 1 CVEs
- Baremetal Operator - 1 CVEs
- Cert-manager - 1 CVEs
- Cloudnativepg - 1 CVEs
- Container Network Interface - 1 CVEs
- Dapr Dashboard - 1 CVEs
- Docarray - 1 CVEs
- Foomatic - 1 CVEs
- Fossology - 1 CVEs
- Free Range Routing - 1 CVEs
- Gardenctl - 1 CVEs
- Imgcrypt - 1 CVEs
- Jaeger - 1 CVEs
- Knative Func - 1 CVEs
- Kuadrant - 1 CVEs
- Kubevela - 1 CVEs
- Kubewarden - 1 CVEs
- Kubewarden-controller - 1 CVEs
- Libocpp - 1 CVEs
- Lima - 1 CVEs
- Loopback-connector-postgresql - 1 CVEs
- Mirage Firewall - 1 CVEs
- Modular Open Smart Network - 1 CVEs
- Nats.deno - 1 CVEs
- Nats.js - 1 CVEs
- Nats.ws - 1 CVEs
- Onos-ric-sdk-go - 1 CVEs
- Open Cluster Management - 1 CVEs
- Open Container Initiative Distribution Specification - 1 CVEs
- Open Container Initiative Image Format Specification - 1 CVEs
- Openfeature - 1 CVEs
- Opensearch - 1 CVEs
- Opentelemetry-go Contrib - 1 CVEs
- Oras - 1 CVEs
- Pipecd - 1 CVEs
- Ric-app-kpimon-go - 1 CVEs
- Rocket Chip Generator - 1 CVEs
- Sigstore-python - 1 CVEs
- Strimzi Kafka Operator - 1 CVEs
- Torchvision - 1 CVEs
- Tremor - 1 CVEs
- Umoci - 1 CVEs
- Upf - 1 CVEs
- Volcano - 1 CVEs
- Wasmedge - 1 CVEs
- Zowe - 1 CVEs
- @backstage/backend Defaults - 0 CVEs
- @backstage/integration - 0 CVEs
- @backstage/plugin-scaffolder-backend - 0 CVEs
- Argo Continuous Delivery - 0 CVEs
- Litmus - 0 CVEs
- Loxilb - 0 CVEs
- Opendaylight L2switch - 0 CVEs
- Opentelemetry-go - 0 CVEs
Newest CVEs of Linuxfoundation
- CVE-2026-104252 - CVSS 9.8 (critical), 2026-10-13: Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go…
- CVE-2026-106563 - CVSS 6.5 (medium), 2026-10-07: Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by improper…
- CVE-2026-106562 - CVSS 4.3 (medium), 2026-10-07: Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in…
- CVE-2026-106561 - CVSS 5 (medium), 2026-10-07: Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by sensitive…
- CVE-2026-106560 - CVSS 7.1 (high), 2026-10-07: Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package…
- CVE-2026-106559 - CVSS 6.5 (medium), 2026-10-07: Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package…
- CVE-2026-106558 - CVSS 8.8 (high), 2026-10-07: Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly…
- CVE-2026-106556 - CVSS 7.7 (high), 2026-10-07: Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by configuration…
- CVE-2026-106510 - CVSS 7.7 (high), 2026-10-07: Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by remote code…
- CVE-2026-106509 - CVSS 8.8 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation…
- CVE-2026-106508 - CVSS 6.5 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file…
- CVE-2026-106507 - CVSS 6.5 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary…
- CVE-2026-106506 - CVSS 5.3 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input…
- CVE-2026-106505 - CVSS 8.5 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass…
- CVE-2026-106504 - CVSS 6.5 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive…
- CVE-2026-106503 - CVSS 8.1 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is…
- CVE-2026-106502 - CVSS 5.3 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive…
- CVE-2026-106501 - CVSS 9.6 (critical), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is…
- CVE-2026-106500 - CVSS 8.5 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is…
- CVE-2026-106499 - CVSS 4.9 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose secret-derived…
- CVE-2026-106498 - CVSS 7.7 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend package is…
- CVE-2026-106497 - CVSS 4.3 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent…
- CVE-2026-106496 - CVSS 6.5 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent…
- CVE-2026-106494 - CVSS 4.9 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input…
- CVE-2026-106493 - CVSS 4.1 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A…
- CVE-2026-106492 - CVSS 7.6 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper…
- CVE-2026-106491 - CVSS 6.4 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input…
- CVE-2026-106490 - CVSS 6.5 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input…
- CVE-2026-106489 - CVSS 6.5 (medium), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper…
- CVE-2026-106488 - CVSS 8.1 (high), 2026-10-06: Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by…
