5183 matches found
ROS-20260319-73-0034
Vulnerability in beats related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...
CVE-2026-31969
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the BYTEARRAYSTOP method, an out-by-one error in the...
CVE-2026-29777 vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...
CVE-2026-23246
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...
CVE-2026-23244
In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...
GHSA-JR27-M4P2-RC6R vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, request-1276, spamcheck, vllm-openai-cuda-12.9, gitlab-cng, airflow, synapse, ansible-operator-fips, datadog-agent, barman, metaflow-service-fips, ansible-operator, py3-cassandra-medusa, datadog-agent-fips,...
GHSA-QJXF-F2MG-C6MC vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, mitmproxy, airflow, dask-kubernetes...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
CVE-2026-4271
A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can exploit this by sending specially crafted HTTP/2 requests that cause authentication failures. This can lead to the...
GHSA-GMQ8-994R-JV83 vulnerabilities
Vulnerabilities for packages: code-server, opensearch-dashboards, renovate...
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...
CVE-2026-3916 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GC25-M8G6-JP4F vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3924 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3927 vulnerabilities
Vulnerabilities for packages: chromium...