CVE-2026-56819 vulnerabilities

Vulnerabilities for packages: neo4j, keycloak, spark, zipkin, druid, kserve-modelmesh...

GHSA-34RH-WP3J-6CXC vulnerabilities

Vulnerabilities for packages: spegel, ipfs-cluster, k3s, kubo...

CVE-2026-54909 vulnerabilities

Vulnerabilities for packages: spegel, ipfs-cluster, k3s, kubo...

CVE-2026-54908 vulnerabilities

Vulnerabilities for packages: telegraf, ipfs-cluster, spegel, k3s, kubo...

GHSA-WG4G-WM44-CH5J vulnerabilities

Vulnerabilities for packages: telegraf, ipfs-cluster, spegel, k3s, kubo...

[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43

Native bindings to the libgit2 library...

CVE-2026-54787 vulnerabilities

Vulnerabilities for packages: skaffold, kubescape, goreleaser, neuvector-sigstore-interface, teleport, flux-source-controller, crossplane, policy-controller, zarf, ko, aactl, kyverno, tkn, trivy, trivy-operator, zot, kyverno-notation-aws, tekton-chains, spire-server, falcoctl...

GHSA-WQQC-JJCQ-VFXM vulnerabilities

Vulnerabilities for packages: skaffold, kubescape, goreleaser, neuvector-sigstore-interface, teleport, flux-source-controller, crossplane, policy-controller, zarf, ko, aactl, kyverno, tkn, trivy, trivy-operator, zot, kyverno-notation-aws, tekton-chains, spire-server, falcoctl...

GHSA-WG4G-WM44-CH5J vulnerabilities

Vulnerabilities for packages: spegel-fips, rke2-runtime, livekit-egress, k3s, kubo, kubo-fips, ipfs-cluster-fips, rke2-runtime-fips, ipfs-cluster, telegraf, spegel...

CVE-2026-54908 vulnerabilities

Vulnerabilities for packages: spegel-fips, rke2-runtime, livekit-egress, k3s, kubo, kubo-fips, ipfs-cluster-fips, rke2-runtime-fips, ipfs-cluster, telegraf, spegel...

GHSA-34RH-WP3J-6CXC vulnerabilities

Vulnerabilities for packages: spegel-fips, stunnerd, rke2-runtime, livekit-egress, k3s, kubo, kubo-fips, ipfs-cluster-fips, rke2-runtime-fips, ipfs-cluster, spegel...

CVE-2026-54909 vulnerabilities

Vulnerabilities for packages: spegel-fips, stunnerd, rke2-runtime, livekit-egress, k3s, kubo, kubo-fips, ipfs-cluster-fips, rke2-runtime-fips, ipfs-cluster, spegel...

GHSA-WQQC-JJCQ-VFXM vulnerabilities

Vulnerabilities for packages: cosign-fips, cloudbeat-fips, aactl, kubescape-server, zarf, kubescape-server-fips, policy-controller-fips, kubescape, tkn-fips, spire-server-fips, crossplane-fips, teleport, zarf-fips, cloudbeat, ko, kyverno-notation-aws, docker-fips, goreleaser, policy-controller,...

CVE-2026-54787 vulnerabilities

Vulnerabilities for packages: cosign-fips, cloudbeat-fips, aactl, kubescape-server, zarf, kubescape-server-fips, policy-controller-fips, kubescape, tkn-fips, spire-server-fips, crossplane-fips, teleport, zarf-fips, cloudbeat, ko, kyverno-notation-aws, docker-fips, goreleaser, policy-controller,...

CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

CVE-2026-67292

FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport libfreerdp/core/gateway/websocket.c. The client's Pong reply reuses a fixed 1024-byte response stream whose length is not sealed to the actual received Ping payload, so a malicious...

CVE-2026-67302

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-67312

axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...

CVE-2026-67306

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

CVE-2026-67324

GitPython 3.1.50 fails to recognize joined short-option forms such as -u the short form of --upload-pack= when enforcing its default unsafe-option gate. When an application passes attacker-influenced clone options into Repo.clonefrom..., multioptions=..., allowunsafeoptions=False, an attacker can...