5195 matches found
GHSA-H2QV-FJ59-J46J vulnerabilities
Vulnerabilities for packages: keycloak-fips, celeborn, zipkin, management-api-for-apache-cassandra-5.0, seata, apache-pulsar-fips, hono, pinot-fips, hadoop-fips, apache-pulsar, knative-kafka-broker, thingsboard, apicurio-registry, pinot, request-9047-keycloak-fips, apache-activemq-artemis, tez,...
CVE-2026-54057
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 color-control query reply reflects attacker-controlled bytes, including newlines, into the shell's input without sanitization. Version 0.47.3 fixes the issue...
CVE-2026-9638
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...
CVE-2026-48006
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the RedisArrayAggregator handler permanently leaks pooled direct-memory buffers when a Redis pipeline connection closes before a RESP array aggregate...
CVE-2026-46340
Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.putstreamId, Unpooled.wrappedBufferfrag, byteBuf, wrapping t...
CVE-2026-45416
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first record, eagerly allocates...
GHSA-5375-PQ7M-F5R2 vulnerabilities
Vulnerabilities for packages: gemini-cli, opentelemetry-auto-instrumentations-node, cadence-web, pulumi, jitsucom-jitsu, langfuse-fips, kibana, langfuse...
GHSA-CXH2-4639-VMC5 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, kube-logging-operator-fips...
GHSA-282G-W5FH-9Q49 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6MR8-WMR4-CH9V vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11639 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11660 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11669 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-CQM4-2V9F-324R vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VQ94-CC3Q-GVJ8 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X6Q3-GW4H-79F9 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C729-J7CM-X9P7 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QV8P-84PR-826V vulnerabilities
Vulnerabilities for packages: chromium...