11789 matches found
[SECURITY] Fedora 42 Update: fvwm3-1.1.4-4.fc42
Fvwm is a window manager for X11. It is designed to minimize memory consumption, provide a 3D look to window frames, and implement a virtual desktop...
genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-27026 via pypdf (5.3.0)
pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....
AZL-77993 CVE-2026-27171 affecting package fltk 1.3.5-4
zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...
[SECURITY] Fedora 42 Update: rust-tealdeer-1.7.2-4.fc42
Fetch and show tldr help pages for many CLI commands. Full featured offline client with caching support...
[SECURITY] Fedora 42 Update: rust-gst-plugin-reqwest-0.13.3-4.fc42
GStreamer reqwest HTTP Source Plugin...
[SECURITY] Fedora 42 Update: rust-jsonwebtoken-9.3.1-4.fc42
Create and decode JWTs in a strongly typed way...
[SECURITY] Fedora 43 Update: rust-tokei-14.0.0-4.fc43
Count your code, quickly...
[SECURITY] Fedora 43 Update: maturin-1.9.6-4.fc43
Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...
CVE-2021-3639 affecting package mod_auth_mellon for versions less than 0.16.0-4
CVE-2021-3639 affecting package modauthmellon for versions less than 0.16.0-4. A patched version of the package is available...
CVE-2025-60753 affecting package libarchive for versions less than 3.7.7-4
CVE-2025-60753 affecting package libarchive for versions less than 3.7.7-4. A patched version of the package is available...
CVE-2025-56226 affecting package libsndfile for versions less than 1.2.2-4
CVE-2025-56226 affecting package libsndfile for versions less than 1.2.2-4. A patched version of the package is available...
CVE-2026-24809 affecting package memcached for versions less than 1.6.27-4
CVE-2026-24809 affecting package memcached for versions less than 1.6.27-4. A patched version of the package is available...
CVE-2026-22693 affecting package harfbuzz for versions less than 8.3.0-4
CVE-2026-22693 affecting package harfbuzz for versions less than 8.3.0-4. A patched version of the package is available...
CVE-2026-25498 Craft has a potential authenticated Remote Code Execution via malicious attached Behavior
Craft is a platform for creating digital experiences. In versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a Remote Code Execution RCE vulnerability exists in Craft CMS where the assembleLayoutFromPost function in src/services/Fields.php fails to sanitize user-supplied configuratio...
CVE-2025-61594 affecting package ruby for versions less than 3.1.7-4
CVE-2025-61594 affecting package ruby for versions less than 3.1.7-4. A patched version of the package is available...
CVE-2025-11961 affecting package nmap for versions less than 7.93-4
CVE-2025-11961 affecting package nmap for versions less than 7.93-4. A patched version of the package is available...
AZL-76874 CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76880 CVE-2025-58190 affecting package cf-cli for versions less than 8.7.11-5
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
CVE-2026-1707 Restore restriction bypass via key disclosure vulnerability (pgAdmin 4)
pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract t...
