CVE-2026-42170

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

CVE-2026-68082

In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains two bare decode operations that allow a malicious or compromised OSD to trigger slab-out-of-bounds reads: 1. cephdecode32p at the...

GHSA-PPPJ-HQ3G-57PJ vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-H5V5-8746-G7MM vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-89VP-JRXV-24W8 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-WHVH-WF3X-G77J vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-GX64-GJ6P-PC4C vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

CVE-2026-45021 vulnerabilities

Vulnerabilities for packages: kuma...

GHSA-3VCP-CHFH-F6R2 vulnerabilities

Vulnerabilities for packages: kuma...

GHSA-539M-9XH6-Q6RR vulnerabilities

Vulnerabilities for packages: awx, jupyter-all-spark-notebook...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: gomplate-fips, tfsec, argo-workflows, gitaly, upwind-agent, crossplane-fips, kots, cloudbeat, mapotf-fips, pulumi-language-yaml, redpanda-console, grype, src-fingerprint, gitlab-runner-fips, amazon-ssm-agent-fips, syft-fips, kaniko, flux, snyk-cli, mapotf, gitaly-fip...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: gomplate-fips, tfsec, argo-workflows, gitaly, upwind-agent, crossplane-fips, kots, cloudbeat, mapotf-fips, pulumi-language-yaml, redpanda-console, grype, src-fingerprint, gitlab-runner-fips, amazon-ssm-agent-fips, syft-fips, kaniko, flux, snyk-cli, mapotf, gitaly-fip...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: gomplate-fips, tfsec, argo-workflows, gitaly, upwind-agent, crossplane-fips, kots, cloudbeat, mapotf-fips, pulumi-language-yaml, redpanda-console, grype, src-fingerprint, gitlab-runner-fips, amazon-ssm-agent-fips, syft-fips, kaniko, flux, snyk-cli, mapotf, gitaly-fip...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: gomplate-fips, tfsec, argo-workflows, gitaly, upwind-agent, crossplane-fips, kots, cloudbeat, mapotf-fips, pulumi-language-yaml, redpanda-console, grype, src-fingerprint, gitlab-runner-fips, amazon-ssm-agent-fips, syft-fips, kaniko, flux, snyk-cli, mapotf, gitaly-fip...

CVE-2026-71554 vulnerabilities

Vulnerabilities for packages: mitmproxy, airflow, open-webui...

GHSA-6HR6-W5QG-QMWG vulnerabilities

Vulnerabilities for packages: mitmproxy, airflow, open-webui...

CVE-2026-45021 vulnerabilities

Vulnerabilities for packages: kuma...

GHSA-3VCP-CHFH-F6R2 vulnerabilities

Vulnerabilities for packages: kuma...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: steampipe, kots, crossplane, gitea, flux-image-automation-controller, gitaly, syft, flux, grype, scorecard, gomplate, pulumi, flux-notification-controller, pulumi-language-java, skaffold, rancher-fleet, kubescape, argo-events, external-secrets-operator, kyverno,...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: steampipe, kots, crossplane, gitea, flux-image-automation-controller, gitaly, syft, flux, grype, scorecard, gomplate, pulumi, flux-notification-controller, pulumi-language-java, skaffold, rancher-fleet, kubescape, argo-events, external-secrets-operator, kyverno,...