CVE-2026-85505 affecting package freeipmi for versions less than 1.6.19-1

CVE-2026-85505 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-71380 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-71380 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-55951 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-55951 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-19

CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...

CVE-2026-61711 affecting package moby-engine for versions less than 25.0.3-20

CVE-2026-61711 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...

CVE-2026-18313 affecting package libpcap for versions less than 1.10.7-1

CVE-2026-18313 affecting package libpcap for versions less than 1.10.7-1. A patched version of the package is available...

CVE-2026-31911 affecting package libpcap for versions less than 1.10.7-1

CVE-2026-31911 affecting package libpcap for versions less than 1.10.7-1. A patched version of the package is available...

CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1

CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-74994 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-74994 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-70405 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-70405 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-75803 affecting package edk2 for versions less than 20240524git3e722403cd16-19

CVE-2026-75803 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...

CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5

CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5. A patched version of the package is available...

CVE-2026-31912 affecting package libpcap for versions less than 1.10.7-1

CVE-2026-31912 affecting package libpcap for versions less than 1.10.7-1. A patched version of the package is available...

CVE-2026-63072 affecting package edk2 for versions less than 20240524git3e722403cd16-19

CVE-2026-63072 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...

CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1

CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...

OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree

Summary The @typespec/openapi3 emitter retains the value of a @versioned enum member and interpolates it into the output filename as version without sanitizing path separators or traversal components. The completed path reaches the compiler's emitFile, which creates the parent directory and write...

CVE-2026-78738

Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting XSS via the Document management file upload feature...

CVE-2026-30754

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...