27978 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-19953
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host...
[SECURITY] Fedora 43 Update: python3.13-3.13.15-1.fc43
Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
GHSA-22W5-2FXG-VRWX OpenTofu has high CPU usage when using K8S remote state backend or when parsing specifically crafted TLS certificates from untrusted or compromised servers
Impact Unauthenticated denial of service. Summary When OpenTofu performs requests against an untrusted or compromised third-party server or connects to an attacker-controlled server, the initial connection negotiation can produce high CPU usage, leading to possible denial of service. These...
PT-2026-80724
This update for python311 fixes the following issues: - Regression in http.cookies bsc1263083...
MINI-XJW2-9F6Q-XV52
Bulletin has no description...
[SECURITY] Fedora 43 Update: python3.14-3.14.7-1.fc43
Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...
[SECURITY] Fedora 44 Update: python3.12-3.12.14-1.fc44
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...
CVE-2026-63632
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...
MINI-F857-C9JM-X8RP
Bulletin has no description...
PYSEC-2026-3764
opensslencrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties have not been formally analyzed. Attackers can exploit this weakened key derivation to more efficiently crack passwords...
PT-2026-73369
Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100957)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100957 advisory. Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140....
MINI-3JQ3-2PVH-HPRR
Bulletin has no description...
MINI-88Q6-52FF-J422
Bulletin has no description...
[SECURITY] Fedora 43 Update: php-pear-PHP-CodeSniffer-4.0.4-1.fc43
PHPCodeSniffer provides functionality to verify that code conforms to certain standards, such as PEAR, or user-defined...
SUSE CVE-2026-33818
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
GO-2025-3774 vulnerabilities
Vulnerabilities for packages: cluster-autoscaler, rancher-fleet-fips, azurefile-csi, azurefile-csi-fips, calico, kubernetes-csi-driver-hostpath, rancher-fleet, cloud-provider-gcp-cloud-controller-manager-fips, yunikorn-k8shim-fips, mesosphere-vsphere-csi, rancher-system-agent, yunikorn-k8shim,...
GO-2025-4193 vulnerabilities
Vulnerabilities for packages: skopeo, falco-no-driver, tkn, tkn-fips, tekton-chains, kyverno-notation-aws, podman, ratify, skopeo-fips, vexctl, zarf, cg, chainctl, kyverno-policy-reporter-plugins-kyverno, kubescape, sigstore-scaffolding, undock, falcoctl, kyverno-notation-aws-fips,...
