SUSE CVE-2026-54637

unknown...

SUSE CVE-2026-55185

unknown...

SUSE CVE-2026-55252

unknown...

SUSE CVE-2026-55512

unknown...

SUSE CVE-2026-55513

unknown...

SUSE CVE-2026-55636

unknown...

CVE-2026-12996

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

SUSE CVE-2026-55701

unknown...

SUSE CVE-2026-55770

unknown...

SUSE CVE-2026-55828

unknown...

SUSE CVE-2026-55866

unknown...

SUSE CVE-2026-55887

unknown...

SUSE CVE-2026-56443

Token public-only scope bypassed on Limited-visibility owners Repository + Package categories - residual after CVE-2026-25714 / PR 37118...

SUSE CVE-2026-56654

Privilege Escalation via Access Token Scope Escalation in API...

SUSE CVE-2026-56657

Gitea SSH Key Parser Denial of Service...

SUSE CVE-2026-56755

Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...

SUSE CVE-2026-56846

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...

SUSE CVE-2026-56848

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

SUSE CVE-2026-57886

Cross-repository issue/comment attachment re-linking can expose private attachment content...

SUSE CVE-2026-57894

Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration...