Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
BIT-drupal-2026-6367
  • Bitnami/drupal
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003 12 hours ago
  • Fix available
  • Severity - 6.1 (Medium)
BIT-drupal-2026-6366
  • Bitnami/drupal
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002 12 hours ago
  • Fix available
  • Severity - 6.6 (Medium)
BIT-drupal-2026-6365
  • Bitnami/drupal
Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001 12 hours ago
  • Fix available
  • Severity - 6.1 (Medium)
BIT-python-2026-8328
  • Bitnami/python
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address yesterday
  • Fix available
  • Severity - 5.9 (Medium)
BIT-python-min-2026-8328
  • Bitnami/python-min
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address yesterday
  • Fix available
  • Severity - 5.9 (Medium)
BIT-python-2026-4224
  • Bitnami/python
Stack overflow parsing XML with deeply nested DTD content models yesterday
  • Fix available
  • Severity - 6.0 (Medium)
BIT-python-min-2026-4224
  • Bitnami/python-min
Stack overflow parsing XML with deeply nested DTD content models yesterday
  • Fix available
  • Severity - 6.0 (Medium)
BIT-discourse-2026-32244
  • Bitnami/discourse
Discourse: Cached outdated summaries can leak removed content yesterday
  • Fix available
  • Severity - 5.3 (Medium)
BIT-libpython-2026-8328
  • Bitnami/libpython
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address yesterday
  • Fix available
  • Severity - 5.9 (Medium)
BIT-libpython-2026-4224
  • Bitnami/libpython
Stack overflow parsing XML with deeply nested DTD content models yesterday
  • Fix available
  • Severity - 6.0 (Medium)
BIT-gdal-2026-8213
  • Bitnami/gdal
OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow yesterday
  • Fix available
  • Severity - 1.9 (Low)
BIT-gdal-2026-8212
  • Bitnami/gdal
OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow yesterday
  • Fix available
  • Severity - 1.9 (Low)
BIT-mongodb-2026-8336
  • Bitnami/mongodb
Post-authentication use-after-free error in $_internalJsEmit and mapreduce commands 2 days ago
  • Fix available
  • Severity - 7.7 (High)
BIT-mongodb-2026-8202
  • Bitnami/mongodb
Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators 2 days ago
  • Fix available
  • Severity - 5.3 (Medium)
BIT-mongodb-2026-8200
  • Bitnami/mongodb
Schema validation log messages may not redact user data 2 days ago
  • Fix available
  • Severity - 4.8 (Medium)
BIT-mongodb-2026-8053
  • Bitnami/mongodb
FlatBSON Duplicate Field Index Drift 2 days ago
  • Fix available
  • Severity - 8.7 (High)