362303 matches found
Astra Linux – Vulnerability in golang-github-golang-jwt-jwt
golang-jwt is a Go implementation of JSON Web Tokens. Starting from version 3.2.0 and before versions 5.2.2 and 4.5.2, the parse.ParseUnverified function splits its argument which is untrusted data using periods. As a result, in the case of a malicious request where the Authorization header...
Astra Linux – Vulnerability in Heimdal
Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial-of-service vulnerability in Heimdal’s PKI certificate validation library. This vulnerability affects the KDC via PKINIT and kinit via PKINIT, as well as any third-party applications...
CLSA-2026-1791200036 TuxCare security update for image-size (2 CVEs)
TuxCare rebuilt image-size to address 2 CVEs. Fixed in 1.2.1-tuxcare.1...
CLSA-2026-1791199971 TuxCare security update for image-size (2 CVEs)
TuxCare rebuilt image-size to address 2 CVEs. Fixed in 0.5.5-tuxcare.1...
CLSA-2026-1791199964 TuxCare security update for file-type (1 CVE)
TuxCare rebuilt file-type to address 1 CVE. Fixed in 16.5.4-tuxcare.1...
CLSA-2026-1791199466 TuxCare security update for browserslist (2 CVEs)
TuxCare rebuilt browserslist to address 2 CVEs. Fixed in 4.21.5-tuxcare.1...
CLSA-2026-1791199397 TuxCare security update for browserslist (1 CVE)
TuxCare rebuilt browserslist to address 1 CVE. Fixed in 4.24.4-tuxcare.2...
UBUNTU-CVE-2026-59788
The email media type OAuth form passes the Authorization endpoint value to window.open without validating the URL scheme, so a javascript: URL is executed in the browser. This means a crafted media type configuration, deliverable as an import file, runs arbitrary JavaScript as the Super Admin who...
CLSA-2026-1791198699 TuxCare security update for baseline-browser-mapping (1 CVE)
TuxCare rebuilt baseline-browser-mapping to address 1 CVE. Fixed in 2.10.0-tuxcare.2...
ROOT-APP-NPM-CVE-2026-16729 CVE-2026-16729 in undici - Patched by Root
Root has patched CVE-2026-16729 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-15157 CVE-2026-15157 in undici - Patched by Root
Root has patched CVE-2026-15157 in the undici package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-16728 CVE-2026-16728 in undici - Patched by Root
Root has patched CVE-2026-16728 in the undici package for Root:npm. Multiple fixed versions available...
USN-8865-1: EDK II vulnerabilities
It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...
USN-8865-1 edk2 vulnerabilities
It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...
ROOT-APP-MAVEN-CVE-2026-49485 CVE-2026-49485 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root
Root has patched CVE-2026-49485 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-45294 CVE-2024-45294 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root
Root has patched CVE-2024-45294 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2024-51132 CVE-2024-51132 in ca.uhn.hapi.fhir:org.hl7.fhir.utilities - Patched by Root
Root has patched CVE-2024-51132 in the ca.uhn.hapi.fhir:org.hl7.fhir.utilities package for Root:Maven. Multiple fixed versions available...
CLSA-2026-1791197262 TuxCare security update for base-x (1 CVE)
TuxCare rebuilt base-x to address 1 CVE. Fixed in 2.0.6-tuxcare.1...