CVE-2026-17716 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3RR2-3MR9-FF26 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-39QM-FF77-HMV9 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17719 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3WQ4-W788-RHG3 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-18008 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17973 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17955 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17682 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9PWP-9QQC-PR26 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-58063 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3

CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...

SUSE CVE-2026-54787

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...

GHSA-MQ44-7P77-Q5H7 vulnerabilities

Vulnerabilities for packages: kserve, apache-beam-python-3.12-sdk, dask-kubernetes-fips, lmcache-cuda-12.8, py3.13-scanner-test-libraries-aiohttp, datahub-ingestion-fips, airflow, py3-cassandra-medusa, tritonserver-backend-vllm-cuda-13.0, dask-kubernetes, awx, apache-beam-python-3.13-sdk,...

CVE-2026-69152 vulnerabilities

Vulnerabilities for packages: renovate, ts-patch, saf, argo-workflows, pulumi, langfuse, serve, opensearch-dashboards, npm, prism, sqlpad, rancher-api-ui, nextcloud-server...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, mitmproxy, airflow, semgrep, mycli, superset, k8s-sidecar, open-webui, py3-cassandra-medusa, datadog-agent, ggshield, dask-kubernetes, kserve, in-toto...

GHSA-JR45-8VMC-QM54 vulnerabilities

Vulnerabilities for packages: renovate, code-server, langfuse, vitess...

GHSA-V3R7-H72X-CJCM vulnerabilities

Vulnerabilities for packages: renovate, pulumi, code-server, langfuse, prism, npm, vitess...

CVE-2026-15337

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...

CVE-2026-70368

A stack-based out-of-bounds read vulnerability exists in the "svlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an...