GHSA-PMV8-RQ9R-6J72 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, opensearch-dashboards-fips, azurite, redisinsight, nextcloud-server, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, awx, langfuse-fips, langfuse, kibana, prism, gitlab-rails-ce-fips, librechat, opensearch-dashboards, kubeflow-centraldashboard...

GHSA-HCPX-6FM6-WX23 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, prism, lerna, nextcloud-server, opensearch-dashboards, langfuse...

[SECURITY] Fedora 43 Update: rust-fern-0.7.1-6.fc43

Simple, efficient logging...

SUSE CVE-2026-16364

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

SUSE CVE-2026-16403

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

SUSE CVE-2026-16410

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-3JXR-9VMJ-R5CP vulnerabilities

Vulnerabilities for packages: thingsboard, kubeflow-katib, jupyter-base-notebook, renovate, ts-patch, prism, argo-workflows, saf, lerna, serve, nextcloud-server, opensearch-dashboards, rancher-api-ui, langfuse, sqlpad, pulumi...

GHSA-G8R8-53C2-PM3F vulnerabilities

Vulnerabilities for packages: promitor, dotnet-sdk, powershell, dotnet-bootstrap, dotnet...

CVE-2026-16493

A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...

GHSA-HVRP-RF83-W775 vulnerabilities

Vulnerabilities for packages: litellm, semgrep...

GHSA-VJ7Q-GJH5-988W vulnerabilities

Vulnerabilities for packages: litellm, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, semgrep...

CVE-2026-16355

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16409

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16392

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16357

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Updated haveged package fixes a security vulnerability

The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper input validation, resulting in an unexpected process crash...