GHSA-3X6F-VM7X-CGM7 vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-24W5-CQC3-H379 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-29G8-XP94-2R42 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-3MWP-7C29-VP5V vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-8RFC-PHX9-6VC2 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-JV2W-P5JV-GRR5 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-PP6F-JF25-X95P vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-XJ6V-33Q6-WVXJ vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-16354 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-16350 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-16369 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-RJR7-JGGH-PGCP vulnerabilities

Vulnerabilities for packages: kyverno, karma, telegraf, fluxcd-kustomize-mutating-webhook...

CVE-2025-12506 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

SUSE CVE-2026-58059

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

SUSE CVE-2026-58061

In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

SUSE CVE-2026-58216

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of th...

SUSE CVE-2026-59645

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

SUSE CVE-2026-59647

In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...

SUSE CVE-2026-59652

In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...

Malicious code in lib-mtop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1dad2a69d97f4f14b77fdb334f860745feac703828131718a950a54b2d7cece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...