Developer Tools

In Centrifugo versions prior to 6.8.4 a high severity vulnerability CVE-2026-62963 was detected. This vulnerability allows unauthenticated attackers to trigger large memory and CPU consumption. To address this issue, users should upgrade Centrifugo to version 6.8.4. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62963.

In Argo CD versions before 3.2.12, 3.3.10, and 3.4.2 a medium severity vulnerability CVE-2026-45737 was detected. This vulnerability allows attackers to view sensitive Kubernetes Secret values in UI or CLI diffs. To address this issue, users should upgrade Argo CD to version 3.2.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-45737.

In Argo CD versions prior to 3.2.12, 3.3.10, and 3.4.2 a high severity vulnerability CVE-2026-45738 was detected. This vulnerability allows attackers to execute arbitrary javascript in a victim’s browser session. To address this issue, users should upgrade Argo CD to version 3.2.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-45738.

In Nexus Repository a high severity vulnerability CVE-2026-11403 was detected. This vulnerability allows a remote attacker to gain unauthorized access to repository operations. To address this issue, users should upgrade Nexus Repository to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11403.

In OpenShift earlier versions a high severity vulnerability CVE-2026-15584 was detected. This vulnerability allows an attacker to escalate privileges and gain root access on cluster nodes. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15584.

In guardrails-detectors component for OpenShift in older versions a medium severity vulnerability CVE-2026-15154 was detected. This vulnerability allows a remote attacker to cause a denial of service. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15154.

In Terraform a high severity vulnerability CVE-2026-14468 was detected. This vulnerability allows an authenticated user to include files from outside the intended repository content in a module and then download them, potentially exposing sensitive files. To address this issue, users should upgrade Terraform to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-14468.

In Forgejo versions before 15.0.3 a medium severity vulnerability CVE-2026-59102 was detected. This vulnerability allows authenticated attackers to execute arbitrary JavaScript in other users’ browsers. To address this issue, users should upgrade Forgejo to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59102.

In Plane versions 4.6.3 and earlier a critical severity vulnerability CVE-2026-38971 was detected. This vulnerability allows an attacker to access sensitive information or cause a denial of service. To address this issue, users should upgrade Plane to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-38971.