168632 matches found
GHSA-V396-V7Q4-X2QJ vulnerabilities
Vulnerabilities for packages: checkov...
GHSA-RWJ8-PGH3-R573 vulnerabilities
Vulnerabilities for packages: checkov...
CVE-2026-16221 vulnerabilities
Vulnerabilities for packages: argo-workflows, langfuse...
GHSA-V2HH-GCRM-F6HX vulnerabilities
Vulnerabilities for packages: argo-workflows, langfuse...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-52686
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...
CVE-2026-64600
In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK xfsreflinkfillcowhole,delalloc are both presented with an inode, a data fork mapping, and a cow fork mapping. Unfortunately, these two helpers cycle the ILOCK to grab a...
CVE-2026-6390
A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...
Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize
A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...
compat-openssl11 security update
1:1.1.1k-5.4 - Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7verify...
libpq security update
16.14-1 - Rebase to upstream release 16.14 - Resolves: RHEL-192240...
CVE-2026-45447 affecting package openssl for versions less than 3.3.7-4
CVE-2026-45447 affecting package openssl for versions less than 3.3.7-4. A patched version of the package is available...
GHSA-WH89-7897-X99H Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
Security Vulnerability Report: HAProxy V1 Protocol CRLF Injection via AFUNIX Address in Netty 1. Vulnerability Summary | Field | Value | |-------|-------| | Product | Netty | | Version | 4.2.12.Final and all prior versions with codec-haproxy | | Component |...
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address
Security Vulnerability Report: HAProxy V1 Protocol CRLF Injection via AFUNIX Address in Netty 1. Vulnerability Summary | Field | Value | |-------|-------| | Product | Netty | | Version | 4.2.12.Final and all prior versions with codec-haproxy | | Component |...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: apicurio-registry, ontop, floci-az, gradle, spdx-tools-java, logstash-fips, logstash, ontop-fips, wildfly, apache-hop, cassandra-fips, apicurio-registry-fips, hadoop-client-modules...
GHSA-4J6X-2764-M8GH vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-MHC6-2GFQ-XX62 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...