GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, cg, chainloop-cli, goreleaser, k9s-fips, flux-image-automation-controller-fips, gitaly, grype-db, gitea, argo-cd-fips, xeol-fips, kyverno, scorecard, cerbos-fips, nfpm, packer, crossplane, flux-fips, terragrunt-fips, gitlab-runner-fips,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netconsole: The sumutex should be acquired before navigating the configs hierarchy. There is a race between operations that iterate over the cgchildren list and concurrent additions/removals of userdata items through configfs. Th...

GHSA-7RMH-48MX-2VWC vulnerabilities

Vulnerabilities for packages: cg...

GHSA-7C37-GX6W-8VC5 vulnerabilities

Vulnerabilities for packages: cg...

CVE-2026-44310 vulnerabilities

Vulnerabilities for packages: cg...

CVE-2026-44309 vulnerabilities

Vulnerabilities for packages: cg...

CVE-2026-44740 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, cg, chainloop-cli, external-secrets-operator-fips, kyverno-fips, seaweedfs-rocksdb-fips, upwind-agent, nemo, gitaly, seaweedfs-rocksdb, external-secrets-operator, terragrunt, argo-cd, argo-cd-fips, grafana-fips, scorecard, cerbos-fips, syft-fips,...

GHSA-M3XC-H892-GGX6 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, cg, chainloop-cli, external-secrets-operator-fips, kyverno-fips, seaweedfs-rocksdb-fips, upwind-agent, nemo, gitaly, seaweedfs-rocksdb, external-secrets-operator, terragrunt, argo-cd, argo-cd-fips, grafana-fips, scorecard, cerbos-fips, syft-fips,...

CVE-2026-41507 Remote Code Execution (RCE) via String Literal Injection into math-codegen

math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse is injected verbatim into a new Function body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the...

GHSA-P6X5-P4XF-CC4R Remote Code Execution (RCE) via String Literal Injection into math-codegen

Impact String literal content passed to cg.parse is injected verbatim into a new Function body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the parser. Any application exposing a math evaluation endpoint where user input flo...

MINI-V794-PHG5-CFCG

Bulletin has no description...

GHSA-6P9P-Q6WH-9J89 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, chainctl, cg, dagdotdev...

CVE-2026-25122 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, chainctl, cg, dagdotdev...

GHSA-5G94-C2WX-8PXW vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, chainctl, cg, dagdotdev...

CVE-2026-25121 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, chainctl, cg, dagdotdev...

CVE-2025-23632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...

CVE-2025-68319

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...

CVE-2025-68319

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...

CVE-2025-68319 netconsole: Acquire su_mutex before navigating configs hierarchy

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...

RLSA-2025:20518 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...