170549 matches found
GHSA-6R28-9PPF-4HJ5 vulnerabilities
Vulnerabilities for packages: telegraf, cilium, calico, fq...
GHSA-6G55-P6WH-862Q vulnerabilities
Vulnerabilities for packages: vitess, langfuse...
CVE-2026-54332 vulnerabilities
Vulnerabilities for packages: telegraf, cilium, calico, fq...
CVE-2026-45623 vulnerabilities
Vulnerabilities for packages: vitess, langfuse...
GHSA-G6V3-7XMC-W563 vulnerabilities
Vulnerabilities for packages: telegraf, cilium, calico, fq...
CVE-2026-54603 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-PP92-CRG2-GFV9 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-FRVP-7C67-39W9 vulnerabilities
Vulnerabilities for packages: gemini-cli, librechat, kibana...
CVE-2026-54332 vulnerabilities
Vulnerabilities for packages: calico-fips, telegraf, fq, calico, cilium-fips, cilium...
CVE-2026-54345 vulnerabilities
Vulnerabilities for packages: calico-fips, telegraf, fq, calico, cilium-fips, cilium...
GHSA-G6V3-7XMC-W563 vulnerabilities
Vulnerabilities for packages: calico-fips, telegraf, fq, calico, cilium-fips, cilium...
GHSA-6R28-9PPF-4HJ5 vulnerabilities
Vulnerabilities for packages: calico-fips, telegraf, fq, calico, cilium-fips, cilium...
CVE-2026-5056
GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion
There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...
CVE-2026-13346
pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone...
CVE-2026-62995
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...
CVE-2026-59919
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
CVE-2026-59898
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...