GHSA-HXPV-3X38-H8V5 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-R7WW-HWQF-CQR6 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-4726 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-9979-85JW-XP9M vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-C3HV-RW36-5MGQ vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-J5QX-HH9G-J6WJ vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-4698 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-2QJW-H8G8-R86F vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-J97Q-98F4-5WQ3 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-4711 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-PQFX-CWF8-965Q vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-X6GF-MPR2-68H6 vulnerabilities

Vulnerabilities for packages: grafana-alloy, harbor, gotrue-fips, vault, kots, migrate, teleport, src, telegraf, hydra-fips, wavefront-collector-for-kubernetes, trillian-fips, bento-fips, ory-kratos-fips, harbor-fips, grafana-alloy-fips, teleport-operator-fips, splunk-otel-collector-fips, gotrue,...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, apache-pulsar, localstack, elasticsearch, apache-pulsar-fips, infinispan, apache-hop, apache-hop-fips, kafka-bridge-fips, kayenta, keycloak-fips, elasticsearch-fips, kafka-bridge, keycloak, reposilite, seata, apicurio-registry, grpc-java-fips,...

CVE-2026-27856

Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the affected component. Limit access to the doveadm http service port,...

GHSA-H6C8-CWW8-35HF vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-33729 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

GHSA-GC5V-M9X4-R6X2 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kserve, az, airflow, jwt-tool, kubeflow-volumes-web-app, k8s-sidecar, py3-pip, jupyter-base-notebook, dask-kubernetes, kubeflow-jupyter-web-app, ggshield, kubeflow-katib, emissary, open-webui, superset, checkov, py3-pipenv, pypy-3.11,...

GHSA-G3VH-WFH4-FP76 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-vmware, linux-aws, linux-azure, linux-gcp...

firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component...

SUSE CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...