5150 matches found
CVE-2025-64329 vulnerabilities
Vulnerabilities for packages: headlamp-fips, rancher-helm, trivy-fips, flux-source-controller, k3s, spegel, kaniko-fips, chartmuseum-fips, tekton-pipelines, tekton-pipelines-fips, eksctl, k8ssandra-client, kubevela, kube-arangodb, k9s, opa, skaffold-fips, rancher, docker-cli-buildx-fips, helm,...
GHSA-M6HQ-P25P-FFR2 vulnerabilities
Vulnerabilities for packages: headlamp-fips, rancher-helm, trivy-fips, flux-source-controller, k3s, spegel, kaniko-fips, chartmuseum-fips, tekton-pipelines, tekton-pipelines-fips, eksctl, k8ssandra-client, kubevela, kube-arangodb, k9s, opa, skaffold-fips, rancher, docker-cli-buildx-fips, helm,...
GHSA-QW9X-CQR3-WC7R vulnerabilities
Vulnerabilities for packages: grafana-alloy, kubernetes, falco-no-driver, buildah, k3s, podman, sriov-network-device-plugin, nvidia-container-toolkit, node-feature-discovery...
CVE-2025-31133 vulnerabilities
Vulnerabilities for packages: grafana-alloy, kubernetes, falco-no-driver, buildah, k3s, podman, sriov-network-device-plugin, nvidia-container-toolkit, node-feature-discovery...
runc security update
4:1.2.5-3 - Add relevant patches to CVEs - Resolves: RHEL-122402 4:1.2.5-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122402 - Resolves: RHEL-122404 - Resolves: RHEL-122415 4:1.2.5-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.5 - Related: RHEL-60...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...
CVE-2025-12060 affecting package keras for versions less than 3.3.3-5
CVE-2025-12060 affecting package keras for versions less than 3.3.3-5. A patched version of the package is available...
[SECURITY] Fedora 42 Update: qt5-qttranslations-5.15.18-1.fc42
Qt5 - QtTranslations module...
[SECURITY] Fedora 42 Update: fcitx-qt5-1.2.6-30.fc42
This package provides Fcitx Qt5 input context...
CVE-2025-60753
An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service Out-of-Memory crash...
CVE-2025-64458
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...
CVE-2025-46404
A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...
CVE-2025-62769
Potential SQL injection via connector keyword argument in QuerySet and Q objects...
GHSA-5RRX-JJJQ-Q2R5 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, dotnet...
GHSA-5JPX-9HW9-2FX4 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
CVE-2025-37727 vulnerabilities
Vulnerabilities for packages: conductor, elasticsearch-fips, ruby3.2-elasticsearch, conductor-fips, ruby3.4-elasticsearch, ruby3.3-elasticsearch...
GHSA-56R7-H6MW-RCFV vulnerabilities
Vulnerabilities for packages: conductor, elasticsearch-fips, ruby3.2-elasticsearch, conductor-fips, ruby3.4-elasticsearch, ruby3.3-elasticsearch...
xorg: xmayland: Use-after-free in XPresentNotify structure creation
A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...