GHSA-272M-GCWP-MPWG vulnerabilities

Vulnerabilities for packages: pinot-fips, apache-hop-fips, pinot, apache-hop, tez...

GHSA-G7HG-VRCF-MVMR vulnerabilities

Vulnerabilities for packages: pinot-fips, apache-hop-fips, pinot, apache-hop, tez...

GHSA-C69G-56F8-XWQJ vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci-az, kafbat-ui, apache-pulsar, kayenta, kayenta-fips, knative-kafka-broker-fips, infinispan, apicurio-registry-fips, cloudwatch-exporter...

CVE-2026-54133 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-64649 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

USN-8600-1: libXpm vulnerability

Naoki Wakamatsu discovered that libXpm did not properly validate file boundaries when processing XPM image files. An attacker could possibly use this issue to cause libXpm to crash, resulting in a denial of service...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: rancher-api-ui...

GHSA-9WJQ-CP2P-HRGF vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails...

GHSA-8WHX-365G-H9VV vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: rancher-api-ui...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, datadog-agent, azureml-inference-server-http-fips, openstack-keystone-2025.2-fips, kubeflow-volumes-web-app, spamcheck, superset, datadog-agent-fips, openstack-keystone-2025.1-fips, awx...

GHSA-H668-6X6G-F8R5 vulnerabilities

Vulnerabilities for packages: ascan...

GHSA-RWJ8-PGH3-R573 vulnerabilities

Vulnerabilities for packages: checkov...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...

GHSA-4J6X-2764-M8GH vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GHSA-VX8H-4PRV-G744 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GHSA-52CP-R559-CP3M vulnerabilities

Vulnerabilities for packages: prism...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: prism...

GHSA-H95V-H523-3MW8 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-64831

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...