CVE-2026-59936 vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

GHSA-G867-7843-WF8Q vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

GHSA-6G55-P6WH-862Q vulnerabilities

Vulnerabilities for packages: nextcloud-server, vitess, langfuse...

CVE-2026-54345 vulnerabilities

Vulnerabilities for packages: calico, fq, telegraf, cilium...

GHSA-G6V3-7XMC-W563 vulnerabilities

Vulnerabilities for packages: calico, fq, telegraf, cilium...

CVE-2026-54332 vulnerabilities

Vulnerabilities for packages: calico, fq, telegraf, cilium...

GHSA-6R28-9PPF-4HJ5 vulnerabilities

Vulnerabilities for packages: calico, fq, telegraf, cilium...

CVE-2026-45623 vulnerabilities

Vulnerabilities for packages: nextcloud-server, vitess, langfuse...

GHSA-PP92-CRG2-GFV9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby4.0-oauth2, gitlab-rails-ce, ruby3.3-oauth2, ruby3.2-oauth2, ruby3.4-oauth2...

CVE-2026-54603 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby4.0-oauth2, gitlab-rails-ce, ruby3.3-oauth2, ruby3.2-oauth2, ruby3.4-oauth2...

GHSA-FRVP-7C67-39W9 vulnerabilities

Vulnerabilities for packages: gemini-cli, kibana, librechat...

GHSA-G6V3-7XMC-W563 vulnerabilities

Vulnerabilities for packages: telegraf, calico, cilium, fq, cilium-fips, calico-fips...

GHSA-6R28-9PPF-4HJ5 vulnerabilities

Vulnerabilities for packages: telegraf, calico, cilium, fq, cilium-fips, calico-fips...

CVE-2026-54332 vulnerabilities

Vulnerabilities for packages: telegraf, calico, cilium, fq, cilium-fips, calico-fips...

CVE-2026-54345 vulnerabilities

Vulnerabilities for packages: telegraf, calico, cilium, fq, cilium-fips, calico-fips...

gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causi...

CVE-2026-5056

GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-18022

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

CVE-2026-13346

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone...