178142 matches found
CVE-2026-40983 vulnerabilities
Vulnerabilities for packages: apicurio-registry, zipkin, infinispan, keycloak, dependency-track...
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: spdx-tools-java, nextflow, opensearch, apache-tika, gradle...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: apicurio-registry, zipkin, infinispan, keycloak, dependency-track...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: apicurio-registry, zipkin, infinispan, keycloak, dependency-track...
CVE-2026-71497 vulnerabilities
Vulnerabilities for packages: spdx-tools-java, nextflow, opensearch, apache-tika, gradle...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: apicurio-registry, zipkin, infinispan, keycloak, dependency-track...
policycoreutils: policycoreutils: TOCTOU race condition in fixfiles allows arbitrary SELinux label manipulation
A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker...
CVE-2026-71852
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...
CVE-2026-71847
Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, state.cursor, and state.end pointing into released storage. When partialvalue reconstructs an incomplete object...
CVE-2026-19082
Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...
CVE-2026-56818
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...
CVE-2026-71557
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference name for example containing...
CVE-2026-71556
go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...
CVE-2026-62996
Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a...
GHSA-VWF4-M7J8-WCJF vulnerabilities
Vulnerabilities for packages: metabase...
GHSA-464C-974J-9XM6 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-13769 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-R8H2-QPFX-MX59 vulnerabilities
Vulnerabilities for packages: metabase...