GHSA-RWJ8-PGH3-R573 vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...

[SECURITY] Fedora 44 Update: nginx-mod-brotli-1.0.0~rc-13.fc44

NGINX module for Brotli compression...

ROS-20260723-73-0040

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260723-73-0009

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260723-73-0004

The vulnerability in Chromium is related to insufficient resource management during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260723-73-0055

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1

CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15

CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

CVE-2026-48863 affecting package libsolv for versions less than 0.7.28-5

CVE-2026-48863 affecting package libsolv for versions less than 0.7.28-5. A patched version of the package is available...

CVE-2026-11856 affecting package cmake for versions less than 3.30.3-15

CVE-2026-11856 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

CVE-2026-8932 affecting package cmake for versions less than 3.30.3-15

CVE-2026-8932 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

GHSA-VX8H-4PRV-G744 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GHSA-4J6X-2764-M8GH vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: code-server, kubeflow-katib, kubeflow-centraldashboard, opensearch-dashboards, pulumi, jupyter-base-notebook, lerna, prism, sqlpad, ts-patch, vitess, eslint, argo-workflows...

GHSA-52CP-R559-CP3M vulnerabilities

Vulnerabilities for packages: code-server, kubeflow-katib, kubeflow-centraldashboard, opensearch-dashboards, pulumi, jupyter-base-notebook, lerna, prism, sqlpad, ts-patch, vitess, eslint, argo-workflows...

GHSA-H95V-H523-3MW8 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-64831

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

CVE-2026-55717

In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...

GHSA-XJ96-63GP-2GMR vulnerabilities

Vulnerabilities for packages: superset, text-generation-inference, openstack-horizon-2025.2, openstack-horizon-2025.2-fips, superset-fips, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1-fips, mlflow, open-webui, tensorflow-gpu-jupyter, label-studio, openstack-horizon-2026.1,...