372461 matches found
OSV-2026-1408 UNKNOWN READ in hobbes::castexp::apply
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=573787443 Crash type: UNKNOWN READ Crash state: hobbes::castexp::apply hobbes::compileExpF::with llvm::Value hobbes::switchOfF co...
OPENSUSE-SU-2026:12161-1 aws-nitro-enclaves-binaryblobs-upstream-1.5.2~git0.1c496ed-1.1 on GA media
These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.2git0.1c496ed-1.1 package on the GA media of openSUSE Tumbleweed...
11x-wagtail-blog (>=0.0.0, <=0.2.0), 170051277-trab-final-gces (>=0.3.0, <=0.5.0) +11348 more potentially affected by CVE-2026-112902 via pillow (>=2.0.0, <=12.3.0)
pillow PYPI version =2.0.0, =0.0.0, =0.3.0, =0.1.0, =0.2.2, =0.5.0a0, =2.3.84, =0.4.0, =0.2.0, =0.2.0, =0.3.1, =0.2.0, =0.2.0, =0.2.7 and more Source cves: CVE-2026-112902 Source advisory: MEND:CVE-2026-112902...
Linux Distros Unpatched Vulnerability : CVE-2026-102946
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.4,...
SUSE CVE-2026-87018
undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a different, CA-trusted certificate whose hostname does no...
CLSA-2026-1792194447 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792194449 TuxCare security update for @babel/plugin-transform-runtime (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-runtime to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792194450 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.11.5-tuxcare.1...
CLSA-2026-1792194434 TuxCare security update for @babel/plugin-transform-runtime (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-runtime to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CLSA-2026-1792194433 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792194432 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
CLSA-2026-1792194431 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
CLSA-2026-1792194430 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)
TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792193356 TuxCare security update for engine.io (1 CVE)
TuxCare rebuilt engine.io to address 1 CVE. Fixed in 6.5.5-tuxcare.1...
CLSA-2026-1792193199 TuxCare security update for axios (4 CVEs)
TuxCare rebuilt axios to address 4 CVEs. Fixed in 1.16.0-tuxcare.3...
CLSA-2026-1792193115 TuxCare security update for axios (2 CVEs)
TuxCare rebuilt axios to address 2 CVEs. Fixed in 1.18.1-tuxcare.2...
UBUNTU-CVE-2026-89088
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversize...
UBUNTU-CVE-2026-89085
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...