54762 matches found
SUSE CVE-2026-55636
unknown...
SUSE CVE-2026-55701
unknown...
SUSE CVE-2026-55770
unknown...
SUSE CVE-2026-55866
unknown...
SUSE CVE-2026-55887
unknown...
SUSE CVE-2026-56443
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories - residual after CVE-2026-25714 / PR 37118...
SUSE CVE-2026-56654
Privilege Escalation via Access Token Scope Escalation in API...
SUSE CVE-2026-56657
Gitea SSH Key Parser Denial of Service...
SUSE CVE-2026-56755
Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...
SUSE CVE-2026-56846
A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...
SUSE CVE-2026-56848
A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
SUSE CVE-2026-57886
Cross-repository issue/comment attachment re-linking can expose private attachment content...
SUSE CVE-2026-57894
Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration...
SUSE CVE-2026-57897
Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs...
SUSE CVE-2026-58041
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...
SUSE CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
SUSE CVE-2026-58044
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...
SUSE CVE-2026-58045
A flaw in Node.js allows a spoofed TypedArray byteLength to trigger a reachable assertion in the synchronous node:zlib APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected. Repeated exploitation of this condition can result in a denial of service. This...