GO-2024-2886 vulnerabilities

Vulnerabilities for packages: minio...

GO-2026-4803 vulnerabilities

Vulnerabilities for packages: minio...

GO-2026-5102 vulnerabilities

Vulnerabilities for packages: kuma...

GO-2022-0988 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2026-4808 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2023-2185 vulnerabilities

Vulnerabilities for packages: go...

GO-2026-4513 vulnerabilities

Vulnerabilities for packages: flyte...

GO-2024-3205 vulnerabilities

Vulnerabilities for packages: fq, kube-metrics-adapter...

GO-2022-0360 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2023-1574 vulnerabilities

Vulnerabilities for packages: ctop...

GO-2026-5274 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-4312 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GO-2023-1573 vulnerabilities

Vulnerabilities for packages: ctop...

CVE-2026-73074

An integer overflow in Vim's propaddone function allows a local attacker to cause a denial of service or potentially execute arbitrary code by adding an excessive number of text properties to a single line. Mitigation Do not run untrusted Vim scripts or plugins that call propadd in an unbounded...

CVE-2026-19016 vulnerabilities

Vulnerabilities for packages: consul-fips...

SUSE CVE-2026-73072

Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...

SUSE CVE-2026-73074

Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for non...

SUSE CVE-2026-73433

A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...