CVE-2026-64310

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...

CVE-2026-64305

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with servicelock The servicetable list is protected by servicelock when entries are added or removed in adfserviceadd and adfserviceremove, but several functions iterate over the lis...

CVE-2026-64257

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b "smb: client: restrict implied bcc0 exemption to responses without data area" restricted the implied bcc0 length exception to responses without a da...

GHSA-4QHR-G3C6-FCFX vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, celeborn, thingsboard...

CVE-2026-56817 vulnerabilities

Vulnerabilities for packages: celeborn, apache-hop, pinot, thingsboard, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips, pinot-fips, seata...

GHSA-4VJ7-5MJ6-JM8M vulnerabilities

Vulnerabilities for packages: tileserver-gl...

GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: kube-logging-operator...

GHSA-P9J2-GV94-2WF4 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci, apicurio-registry-fips, neo4j, pinot-fips, request-9047-keycloak-fips, management-api-for-apache-cassandra-5.0, zipkin, apache-activemq-artemis, keycloak-fips, knative-kafka-broker-fips, apache-pulsar-fips, thingsboard, apache-hop-fips,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apicurio-registry, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, zipkin, neo4j, thingsboard...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

GHSA-G7HG-VRCF-MVMR vulnerabilities

Vulnerabilities for packages: cassandra, cassandra-fips, apache-hop, pinot, thingsboard, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips, pinot-fips...

GHSA-272M-GCWP-MPWG vulnerabilities

Vulnerabilities for packages: cassandra, cassandra-fips, apache-hop, pinot, thingsboard, tez, management-api-for-apache-cassandra-5.0, apache-hop-fips, pinot-fips...

GHSA-C69G-56F8-XWQJ vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, floci, camunda-zeebe, wavefront-proxy, camunda, infinispan, apicurio-registry-fips, kayenta, pinot-fips, s3proxy, kayenta-fips, flyway, traccar-fips, reposilite, wazuh-indexer, request-9047-keycloak-fips,...

CVE-2026-63317

Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...

CVE-2026-54133 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-64649 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, peerdb-ui...

ROS-20260724-73-0018

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

CVE-2026-65705

FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vffloodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinitfilter 0. When configinput allocates the...

USN-8600-1: libXpm vulnerability

Naoki Wakamatsu discovered that libXpm did not properly validate file boundaries when processing XPM image files. An attacker could possibly use this issue to cause libXpm to crash, resulting in a denial of service...