The vulnerability of the asn1DecodeSnmp() function in the printing server’s CUPS implementation allows a attacker to disclose protected information or cause service failures.

The vulnerability of the asn1DecodeSnmp function in the CUPS printing server is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

postgresql18 security update

18.4-1.0.1 - Replace upstream reference 18.4-1 - Update to 18.4 - Fix CVE-2026-6478...

CVE-2026-44452

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientHello message over TLS or QUIC and it contains a zero-length SNI extension, the h2o server runs over the zero-length hostname while trying to copy the hostname, assuming that it ...

CVE-2023-24816 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-29GW-9793-FVW7 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2025-9906 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-36FQ-JGMW-4R9C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-74J5-XF3V-CRQ8 vulnerabilities

Vulnerabilities for packages: buildkite-agent, kubernetes-dns-node-cache, buildkite-agent-fips, datadog-agent-fips, traefik, kubernetes-dns-node-cache-fips, vitess, eks-distro-fips, coder, coder-fips, eks-distro, traefik-fips, datadog-agent...

CVE-2026-50274 vulnerabilities

Vulnerabilities for packages: buildkite-agent, kubernetes-dns-node-cache, buildkite-agent-fips, datadog-agent-fips, traefik, kubernetes-dns-node-cache-fips, vitess, eks-distro-fips, coder, coder-fips, eks-distro, traefik-fips, datadog-agent...

GHSA-7GCF-G7XR-8HXJ vulnerabilities

Vulnerabilities for packages: cedar, komodo, yazi, qdrant, lychee, zed, atuin...

GHSA-74J5-XF3V-CRQ8 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, datadog-agent, vitess...

CVE-2026-50274 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, datadog-agent, vitess...

GHSA-29GW-9793-FVW7 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-36FQ-JGMW-4R9C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2025-9906 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-7GCF-G7XR-8HXJ vulnerabilities

Vulnerabilities for packages: cedar, qdrant, yazi, zed, atuin, lychee...

SUSE CVE-2026-5674

A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeWire's PulseAudio compatibility layer. An attacker with minimal permissions within a sandboxed environment can load a malicious library,...

SUSE CVE-2026-38974

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...

SUSE CVE-2026-50274

Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or...

SUSE CVE-2026-54463

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a length header that allows an arbitrarily large integer to be encoded as bytes with the high bit set, and a server or client can send an...