GHSA-QJXF-F2MG-C6MC vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mitmproxy, kubeflow-pipelines-visualization-server, airflow...

CVE-2026-26740

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...

CVE-2026-4271

A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can exploit this by sending specially crafted HTTP/2 requests that cause authentication failures. This can lead to the...

GHSA-GMQ8-994R-JV83 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, code-server...

CVE-2026-3644

The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...

CVE-2026-3916 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GC25-M8G6-JP4F vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q3VM-F267-X4QX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-82W6-2JQH-PVW5 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3927 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3924 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-VQFX-QX8M-7H3J vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QGC5-2PJM-6X2M vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3913 vulnerabilities

Vulnerabilities for packages: chromium...

[SECURITY] Fedora 44 Update: gstreamer1-rtsp-server-1.28.1-1.fc44

A GStreamer-based RTSP server library...

[SECURITY] Fedora 44 Update: gstreamer1-doc-1.28.1-1.fc44

GStreamer documentation...

ROS-20260313-73-0030

A vulnerability in the toatmarpd function of the Linux kernel is related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

GHSA-56PX-HM34-XQJ5 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

CVE-2026-26018 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, eks-distro-fips, eks-distro...

CVE-2026-27965 affecting package vitess for versions less than 17.0.7-15

CVE-2026-27965 affecting package vitess for versions less than 17.0.7-15. A patched version of the package is available...