GHSA-699F-92F5-M297 vulnerabilities

Vulnerabilities for packages: consul-fips...

GHSA-7QHJ-3FG3-MH5R vulnerabilities

Vulnerabilities for packages: consul-fips...

GHSA-H928-JQXM-5F3X vulnerabilities

Vulnerabilities for packages: consul-fips...

CVE-2026-19015 vulnerabilities

Vulnerabilities for packages: consul-fips...

CVE-2026-15970 vulnerabilities

Vulnerabilities for packages: consul-fips...

GHSA-27M6-255M-6Q58 vulnerabilities

Vulnerabilities for packages: consul-fips...

GHSA-JGRX-MGXX-JF9V vulnerabilities

Vulnerabilities for packages: arangodb...

CVE-2021-3777 vulnerabilities

Vulnerabilities for packages: arangodb...

CVE-2026-41706 vulnerabilities

Vulnerabilities for packages: geoserver, apache-nifi-registry...

GHSA-X2R2-RVHQ-2MQV vulnerabilities

Vulnerabilities for packages: geoserver, apache-nifi-registry...

Important Photon OS Security Update - PHSA-2026-5.0-91-0958

Updates of 'cassandra' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0958

Updates of 'erlang', 'cassandra' packages of Photon OS have been released...

CVE-2026-66021

OOB access in virtio-gpu blob resource creation...

CVE-2026-73251

Built-in TLS certificate-chain verification with CA bundles...

CVE-2026-63318

QEMU 9pfs Readonly OTRUNC/OAPPEND Bypass via 9P2000.u Flag Mismatch...

CVE-2026-16457

virtio: Malformed packed descriptor livelocks the device at 100% host CPU guest triggered DoS...

CVE-2026-50626

virtio: fix queue size validation against allocated maximum...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2026-73489

Russh is a Rust SSH client & server library. Prior to 0.62.4, an authenticated SSH client can cause a denial of service by sending a pty-req channel request with more than 130 terminal-mode records. The parser in russh/src/server/encrypted.rs stores terminal modes in a fixed 130-entry...

CVE-2026-56858

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...