GHSA-6G2R-675J-HX59 vulnerabilities

Vulnerabilities for packages: deno, lakekeeper, qdrant, bootc, nushell, garage, atuin, workmux, zed, parseable, pnpm...

GHSA-6G2R-675J-HX59 vulnerabilities

Vulnerabilities for packages: parseable, nushell, pnpm, zed, atuin, deno, qdrant...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: parseable, uv, zola, shadowsocks-rust, oranda, wasmtime, linkerd-extension-init, tealdeer, linkerd2-proxy, rustls-ffi, kdash, buck2, pixi, qdrant, lychee, sdp-k8s-injector, wasmcloud, ntpd-rs, nushell, rye, sqlx, rustup, cargo-audit, xh, samply, wasm-pack, deno, wadm...

CVE-2026-64367 HID: hid-goodix-spi: validate report size to prevent stack buffer overflow

In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...

GHSA-7GCF-G7XR-8HXJ vulnerabilities

Vulnerabilities for packages: qdrant, atuin, yazi, zed, cedar, pixi, lychee, komodo...

GHSA-7GCF-G7XR-8HXJ vulnerabilities

Vulnerabilities for packages: yazi, zed, atuin, pixi, cedar, qdrant, lychee...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341transferone Discovered by Atuin – Automated Vulnerability Discovery Engine. The len variable is calculated as min32, trans-len + 1, which includes the 1-byte command header. Whe...

GHSA-2P6R-X3VV-XQM2 vulnerabilities

Vulnerabilities for packages: atuin, shadowsocks-rust, xh...

GHSA-2P6R-X3VV-XQM2 vulnerabilities

Vulnerabilities for packages: atuin, jujutsu, shadowsocks-rust, xh...

[SECURITY] Fedora 42 Update: atuin-18.6.1-10.fc42

Atuin replaces your existing shell history with a SQLite database, and records additional context for your commands. Additionally, it provides optional and fully encrypted synchronization of your history between machines, via an Atuin server...

[SECURITY] Fedora 43 Update: atuin-18.6.1-10.fc43

Atuin replaces your existing shell history with a SQLite database, and records additional context for your commands. Additionally, it provides optional and fully encrypted synchronization of your history between machines, via an Atuin server...

PT-2026-3893

Name of the Vulnerable Software and Affected Versions sm-crypto versions prior to 0.3.14 Description sm-crypto, a JavaScript library providing implementations of Chinese cryptographic algorithms SM2, SM3, and SM4, contains a flaw in the SM2 decryption logic. An attacker can recover the private ke...

CVE-2026-21895 vulnerabilities

Vulnerabilities for packages: uv, sqlx, vector, yara-x, zed, atuin, qdrant, deno, sccache, lychee...

CVE-2026-21895 vulnerabilities

Vulnerabilities for packages: sqlx, uv, deno, qdrant, atuin, zed, sccache, vector, lychee, yara-x...

GHSA-9C48-W39G-HM26 vulnerabilities

Vulnerabilities for packages: uv, sqlx, vector, yara-x, zed, atuin, qdrant, deno, sccache, lychee...

GHSA-9C48-W39G-HM26 vulnerabilities

Vulnerabilities for packages: sqlx, uv, deno, qdrant, atuin, zed, sccache, vector, lychee, yara-x...

CVE-2024-58262 vulnerabilities

Vulnerabilities for packages: rye, atuin, wash, wasmcloud...

CVE-2024-58262 vulnerabilities

Vulnerabilities for packages: atuin, wasmcloud, wash, rye...

SUSE CVE-2025-40345

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...

UBUNTU-CVE-2025-40345

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound newpba Discovered by Atuin - Automated Vulnerability Discovery Engine. newpba comes from the status packet returned after each write. A bogus device could report values beyond the block...