GHSA-HF2P-G3JQ-W2MX vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-aws, linux-vmware, linux-gcp...

GHSA-P5WW-JRFV-82QX vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-rc, linux-aws, linux-vmware, linux-gcp...

CVE-2026-31696 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-rc, linux-aws, linux-vmware, linux-gcp...

GHSA-PG4W-G64P-QWHJ vulnerabilities

Vulnerabilities for packages: jujutsu, cargo-c, cargo-audit, codex...

GHSA-P3HW-MV63-RF9W vulnerabilities

Vulnerabilities for packages: jujutsu, cargo-c, cargo-audit, codex...

SUSE CVE-2026-7936

Determined not a vulnerability...

GHSA-69XW-7HCM-H432 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, librechat, kibana, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, wazuh-dashboard...

GHSA-9VQF-7F2P-GF9V vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, librechat, kibana, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, wazuh-dashboard...

CVE-2026-42225

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport siptransporttls can accept connections with invalid or untrusted certificates even when the application explicitly enables certificate verification via...

CVE-2026-39817

The "go tool pack" subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem...

CVE-2026-39817

The "go tool pack" subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem...

CVE-2026-8086

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly...

GHSA-CM99-M826-VGG7 vulnerabilities

Vulnerabilities for packages: tiff...

ROS-20260507-73-0014

Vulnerability in libarchive related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-41643

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.3.0, a remote Denial of Service DoS vulnerability exists in GoBGP where a malformed BGP UPDATE message can trigger a runtime error: index out of range panic. This occurs during th...

ROS-20260507-73-0007

Vulnerability in roundcubemail related to argument injection or modification. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands...

ROS-20260507-73-0010

Vulnerability in tomcat10 related to a flaw in the error reporting mechanism. Exploitation of the vulnerability may allow a remote intruder to gain unauthorized access to protected information...

CVE-2026-41305 vulnerabilities

Vulnerabilities for packages: nextcloud-server, renovate, langfuse, vitess, saf, jitsucom-jitsu, kubeflow-katib, vite...

GHSA-57J5-QWP2-VQP6 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-7956

Use after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...