5630 matches found
GHSA-WVPP-8HX9-P66J vulnerabilities
Vulnerabilities for packages: mlflow, checkov...
GHSA-2V37-7H3G-55P8 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, json-server, langfuse, arangodb, unleash-fips, gitlab-rails-ce-fips, vite, unleash, keep-fips, langfuse-fips, nextcloud-server, homepage, pelias-api, gitlab-rails-ce, vitess, keep, jitsucom-jitsu, dotstatsuite-supercore, renovate, saf,...
SUSE CVE-2026-19167
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-19173
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
GHSA-2V8P-3F2J-5MP7 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, gitlab-rails-ce-fips, langfuse, gitlab-rails-ce, jupyter-base-notebook, langfuse-fips...
GHSA-C4C3-PG64-4M4V vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, gitlab-rails-ce-fips, langfuse, gitlab-rails-ce, jupyter-base-notebook, langfuse-fips...
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: spdx-tools-java, opensearch, gradle, apache-tika, nextflow...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: keycloak, dependency-track, apicurio-registry, infinispan, zipkin...
CVE-2026-56818
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...
SUSE CVE-2026-43622
llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch allocates memory using malloc while free1batch deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management...
CVE-2026-12072 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-FG7F-2386-8897 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-34502
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
CVE-2026-34502
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...
CVE-2026-64585
In the Linux kernel, the following vulnerability has been resolved: can: esdusb: kill anchored URBs before freeing netdevs esdusbdisconnect frees each CAN netdev with freecandev inside its per-netdev loop and only calls unlinkallurbsdev afterwards. The per-netdev private data struct esdusbnetpriv...
GHSA-727X-48VV-8CJ7 vulnerabilities
Vulnerabilities for packages: ruby3.3-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.4-elasticsearch...
GHSA-M6P7-44XJ-V2X9 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XQVM-PRP8-CC3X vulnerabilities
Vulnerabilities for packages: chromium...