GHSA-92HW-39HG-4R93 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J37G-2QP6-Q3PV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JJJ3-5MQC-GWQV vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-13820 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4875-WJV5-3WM4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-54GW-X8GH-F524 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-568P-3FRM-J63M vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-59692

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

GHSA-CR2W-747Q-47QC vulnerabilities

Vulnerabilities for packages: linux-azure, linux-vmware, linux-gcp, linux-qemu, linux-qemu-melange...

GHSA-W9WP-H8WV-79JX vulnerabilities

Vulnerabilities for packages: parseable, wasmcloud, datadog-lambda-extension, mountpoint-s3, linkerd2-proxy, deno, datadog-lambda-extension-fips...

ROS-20260709-73-0010

The vulnerability of the TarFile.ExtractToDirectory method in the .NET software platform is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability could allow an attacker to gain access to and modify data...

CVE-2026-55564

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...

ROS-20260709-73-0043

The vulnerability in ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

GHSA-P4GQ-832X-FM9V vulnerabilities

Vulnerabilities for packages: py3-nltk, open-webui...

CVE-2026-54293 vulnerabilities

Vulnerabilities for packages: nemo, apache-beam-python-3.12-sdk, label-studio, open-webui, apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, py3-nltk...

GHSA-P4GQ-832X-FM9V vulnerabilities

Vulnerabilities for packages: nemo, apache-beam-python-3.12-sdk, label-studio, open-webui, apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, py3-nltk...

CVE-2026-50812

A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changesetapplyv3 applies a corrupt changeset...

CVE-2026-59938

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual data, causing large memory usage in pypdf image parsing. This issue is fixed in version 6.14.0...

Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass

A flaw was found in Apache Tomcat. This vulnerability, categorized as Missing Encryption of Sensitive Data, arises from a bypass in the EncryptInterceptor, a component designed to ensure data encryption. This bypass, introduced as a fix for CVE-2026-29146, allows sensitive data to remain...