323799 matches found
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +291 more potentially affected by CVE-2026-92946 via vm2 (>=3.0.0, <=3.11.6)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)
docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: GHSA-4XHP-XG4W-8PPM...
ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)
docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: OSV:GHSA-4XHP-XG4W-8PPM...
ai4rag (>=0.8.0, <=0.10.4), askbase (>=1.0.0, <=1.0.2) +29 more potentially affected by CVE-2026-105747 via docling (>=2.51.0, <=2.130.0)
docling PYPI version =2.51.0, =0.8.0, =1.0.0, =0.1.0, =0.1.0, =7.29.0, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.40.0, =1.42.0 and more Source cves: CVE-2026-105747 Source advisory: OSV:PYSEC-2026-4194...
PYSEC-2026-4192
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/basefactory.py call loadsetuptoolsentrypoints before applying the allowexternalplugins...
UBUNTU-CVE-2026-93315
When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...
ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)
docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: MEND:CVE-2026-105751...
ai4rag (>=0.9.0, <=0.21.0), askbase (>=1.0.0, <=1.0.2) +19 more potentially affected by CVE-2026-105748 via docling-slim (>=2.92.0, <=2.130.0)
docling-slim PYPI version =2.92.0, =0.9.0, =1.0.0, =7.29.0, =2.92.0, =2.120.1, =0.1.0, =0.3.19, =0.1.2, =0.3.0, =0.14.0, =0.0.49, =1.0.0rc1, =0.17.0, =0.29.0 and more Source cves: CVE-2026-105748 Source advisory: MEND:CVE-2026-105748...
CVE-2026-103629
An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562038679...
jf-langflow (>=1.10.0, <=1.10.0.post7), langflow-nightly (1.8.0.dev24) potentially affected by CVE-2026-105698 via langflow-base (>=0.7.2, <=0.10.0)
langflow-base PYPI version =0.7.2, =1.10.0, =1.10.0.post7 - langflow-nightly 1.8.0.dev24 Source cves: CVE-2026-105698 Source advisory: MEND:CVE-2026-105698...
UBUNTU-CVE-2026-104030
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service DoS by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash a...
jf-langflow (>=1.10.0, <=1.10.0.post7), langflow-nightly (1.8.0.dev24) potentially affected by CVE-2026-105697 via langflow-base (>=0.7.2, <=0.10.0)
langflow-base PYPI version =0.7.2, =1.10.0, =1.10.0.post7 - langflow-nightly 1.8.0.dev24 Source cves: CVE-2026-105697 Source advisory: MEND:CVE-2026-105697...
CVE-2026-105642
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...
UBUNTU-CVE-2026-105326
An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient-uri. The mailto notifier passes the recipient address to the configured sendmail program without ensuring it cannot b...
sign-alex (1.0.1) potentially affected by CVE-2026-105676 via ghost (1.26.2)
ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-105676 Source advisory: MEND:CVE-2026-105676...
CLSA-2026-1791226863 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.8-tuxcare.2...
CLSA-2026-1791226763 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.10-tuxcare.1...
CLSA-2026-1791226683 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.11-tuxcare.1...