GO-2023-1621 vulnerabilities

Vulnerabilities for packages: go, kubeflow-katib...

GO-2026-4338 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, k3s, restic, wgcf, petname, opentofu, azcopy, swagger, hydra, step, custom-pod-autoscaler, linkerd2-proxy-init, cargobump, crossplane-provider-aws-ec2, timescaledb-parallel-copy, kubernetes-csi-external-provisioner, git-lfs,...

GHSA-86RP-M36J-7R28 vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-64256 vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-298C-3CXP-3C2H vulnerabilities

Vulnerabilities for packages: linux-gcp...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3602-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3602-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: -...

GHSA-HF6X-8P5F-CGMF vulnerabilities

Vulnerabilities for packages: sonarqube, akhq, kayenta-fips, conductor-fips, dependency-track-apiserver, thingsboard, jbang, wazuh-indexer, apache-nifi, floci-az, cassandra-reaper, pinot, druid, airbyte-server-fips, camunda-zeebe, opensearch-fips, traccar-fips, apache-hop-fips, geoserver, kayenta...

MINI-X6XG-96WG-HWQ6

Bulletin has no description...

CVE-2026-72642

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...

EUVD-2026-58287

The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation...

UBUNTU-CVE-2026-68454

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores 0 for the guest AISB location instead of...

glib2: Fix of CVE-2025-13601

CVE-2025-13601: error out instead of overflowing the allocation in gescapeuristring when a string needs a very large number of percent-escapes, and count unacceptable characters in an unsigned type...

Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits

A group of big tech firms is fighting to stop roughly 3,000 youth safety lawsuits from moving forward, and they just lost a critical procedural battle in court. The lawsuits, brought by attorneys general and families, allege that Meta, Google, ByteDance's TikTok, and Snap knew their products were...

MINI-97V8-JVMC-J6P3

Bulletin has no description...

MINI-XJMR-WXVH-GX2V

Bulletin has no description...

CVE-2026-52048

MQTT v5 properties bounds check uses relative offset against absolute position...

PT-2026-71483

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A buffer over-read exists in the ascii SQL function, whic...

CVE-2026-64510 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64510 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68216 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68216 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...