GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: spark, neo4j, jenkins, opensearch, confluent-kafka-jre-bcfips, solr, ruby3.4-jrjackson, logstash, management-api-for-apache-cassandra-5.0, spdx-tools-java, thingsboard, scala, spark-kubernetes-operator, ruby3.2-jrjackson, apache-tika, druid, strimzi-kafka-operator,...

GHSA-MX8G-39Q3-5C79 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib...

GHSA-9FXM-VC8V-HJ55 vulnerabilities

Vulnerabilities for packages: apicurio-registry, dependency-track, strimzi-kafka-operator, keycloak-config-cli, ruby3.4-jrjackson, jenkins-plugin-manager, kafka, keycloak, apache-tika, thingsboard, cassandra, flyway, jenkins, neo4j, ruby3.2-jrjackson, infinispan, nextflow, ruby4.0-jrjackson,...

CVE-2026-39894

Cacti is an open source performance and fault management framework. In versions 1.2.30 and below, the locale-dependent decimal formatting in rrdtoolfunctionupdate can corrupt RRDtool metric values. The rrdtoolfunctionupdate function checks metric values with isnumeric and concatenates them into t...

GHSA-38CX-CQ6F-5755 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-5R4X-W6P5-222Q vulnerabilities

Vulnerabilities for packages: imagemagick...

GHSA-WPFP-GWWC-VWQ6 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-R75F-5X8P-QVMC vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-53104

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak destroying device All MT76 rx queues have an associated pagepool even if the queue is not associated to a NAPI e.g. WED RRO queues with WED enabled. Destroy the pagepool running mt76dmacleanup routine...

Astra Linux – Vulnerability in pyasn1

pyasn1 is a generic ASN.1 library for Python. Prior to version 0.6.3, the pyasn1 library was vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion during the decoding of ASN.1 data with deeply nested structures. An attacker could provide a crafted payload containing...

GHSA-2388-JP8V-FG9W vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller, nginx-stable...

CVE-2026-52943

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers pskbcarveinsideheader and pskbcarveinsidenonlinear both copy the old skbsharedinfo header into a new buffer via memcpy, which includes the destructorarg pointer uar...

CVE-2026-52924

In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association setup/reconfiguration. In this path, the outbound stream scheduler state...

CVE-2026-9539

An out-of-bounds heap read and integer underflow in the TCP urgent data handling sosendoob in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments e.g., QEMU allows a privileged guest VM attacker root or CAPNETRAW to leak gigabytes of sensitive host-process heap memory v...

CVE-2026-56117

dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket...

GHSA-M25M-5778-FM22 vulnerabilities

Vulnerabilities for packages: grafana-fips...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

GHSA-VMHF-C436-HXJ4 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-9669 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-rails, kube-fluentd-operator, ruby4.0-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.3-fluentd-kubernetes-daemonset...