5164 matches found
CVE-2026-14351 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-cng, gitlab-runner-fips, gitlab-rails-ce-fips, gitlab-cng-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-runner...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: openjdk...
mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer
A flaw was found in MariaDB. During a State Snapshot Transfer SST, the donor node improperly validates parameters sent by a joiner node. This vulnerability allows a malicious joiner to execute arbitrary shell commands on the donor server through the mariabackup SST method. This could lead to a...
CVE-2026-9335
A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...
[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43
Native bindings to the libgit2 library...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: tekton-chains, goreleaser, kyverno-notation-aws, crossplane, trivy-operator, policy-controller, falcoctl, flux-source-controller, tkn, zarf, kubescape, skaffold, zot, neuvector-sigstore-interface, trivy, kyverno, aactl, spire-server, ko...
CVE-2026-67353
guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and...
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53399 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...
GHSA-CHX6-HX7R-MCP5 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-4X4J-2G7C-83W6 vulnerabilities
Vulnerabilities for packages: open-webui, mlflow, superset...
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: mlflow...
CVE-2026-55798 vulnerabilities
Vulnerabilities for packages: open-webui, mlflow, superset...
GHSA-JJJ6-MW9F-P565 vulnerabilities
Vulnerabilities for packages: open-webui, mlflow, superset...
GHSA-9HW9-CH79-4VH6 vulnerabilities
Vulnerabilities for packages: open-webui, mlflow, superset...
GHSA-659M-PX2C-25WJ vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli, zipkin...
GHSA-337J-9HXR-RHXG vulnerabilities
Vulnerabilities for packages: librechat, keycloak, vitess...