VulertSecurity VulertSecurity

Vulnerability Database · Search

Bitnami vulnerabilities — 9,931 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Critical CVE-2026-109619: Stale PHP global state can enable remote code execution php-min Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109618: Out-of-memory handling can enable remote code execution in php-min php-min Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109619: PHP stale global state can enable remote code execution php Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109618: PHP out-of-memory handling can enable remote code execution php Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109619: Remote code execution in Bitnami libphp libphp Bitnami 22 Oct 2026 8.2.35
Critical CVE-2026-109618: Out-of-memory corruption in libphp can enable remote code execution libphp Bitnami 22 Oct 2026 8.2.35
High CVE-2026-9703: Grafana Viewer access permits changes to Loki alerting rules grafana Bitnami 22 Oct 2026 12.3.9
High CVE-2026-110854: Parse Server Denial of Service via Unhandled Email Error parse Bitnami 21 Oct 2026 8.6.97
Medium CVE-2026-67418: RabbitMQ MQTT 5 Vulnerability Leading to Subscriber Disconnection rabbitmq Bitnami 21 Oct 2026 3.13.19
Medium CVE-2026-67416: RabbitMQ AMQP 1.0 Symbolic Body Descriptor Prefix Collisions Bypass Validation rabbitmq Bitnami 21 Oct 2026 4.0.24
Medium CVE-2026-67414: RabbitMQ Memory Exhaustion DoS via Zero-Width Array Aggregation rabbitmq Bitnami 21 Oct 2026 4.0.24
High CVE-2026-100413: SeaweedFS Hard-coded SSH Host Key Vulnerability seaweedfs Bitnami 21 Oct 2026 4.41.0
High CVE-2026-96251: Microsoft PowerShell Remote Code Execution Vulnerability powershell Bitnami 21 Oct 2026 7.4.21
High CVE-2026-97380: mysql-client - GRANT PROXY with Empty Password Vulnerability mysql-client Bitnami 21 Oct 2026 10.6.28
Critical CVE-2026-92262: mysql-client Vulnerability Due to Historical #mysql50# Table Name Encoding Bypass mysql-client Bitnami 21 Oct 2026 10.6.28
High CVE-2026-86047: mysql-client - Insufficient Quoting in mariadb-dump and SHOW Commands mysql-client Bitnami 21 Oct 2026 10.6.28
Medium CVE-2026-85985: mysql-client - Unauthorized File Access via CONNECT Engine UDFs mysql-client Bitnami 21 Oct 2026 10.6.28
Critical CVE-2026-85748: mysql-client Vulnerability Due to Use-After-Free in SYS_REFCURSOR Handling mysql-client Bitnami 21 Oct 2026 12.3.3
Critical CVE-2026-85746: mysql-client - Critical Out-of-Bound Buffer Write in ST_AsText Function mysql-client Bitnami 21 Oct 2026 10.6.28
Medium CVE-2026-85745: mysql-client Vulnerability - Out-of-Bound Buffer Read in ST_Area mysql-client Bitnami 21 Oct 2026 10.6.28

Showing the first 200 matches. Add filters to narrow the results.

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.