GHSA-XM59-RQC7-HHVF vulnerabilities

Vulnerabilities for packages: py3-nbconvert...

SUSE CVE-2026-0818

When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If...

GHSA-WV3H-X6C4-R867 vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-597G-3PHW-6986 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, request-1276...

CVE-2026-25068

alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplgdecodecontrolmixer1 function reads the numchannels field from untrusted .tplg data and uses it as a loop bound without validating it...

CVE-2025-68119 affecting package golang for versions less than 1.25.6-1

CVE-2025-68119 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

CVE-2025-61102 affecting package frr for versions less than 9.1.1-5

CVE-2025-61102 affecting package frr for versions less than 9.1.1-5. A patched version of the package is available...

CVE-2025-61728 affecting package golang for versions less than 1.25.6-1

CVE-2025-61728 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

CVE-2025-61726 affecting package golang for versions less than 1.24.12-1

CVE-2025-61726 affecting package golang for versions less than 1.24.12-1. A patched version of the package is available...

CVE-2020-37011

Removed by vendor...

GHSA-RHX3-FG8P-F9M4 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-HWP9-P6MR-P438 vulnerabilities

Vulnerabilities for packages: ffmpeg...

CVE-2023-51797 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-4RW9-59CH-C9MH vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-4425-9M6F-3PPG vulnerabilities

Vulnerabilities for packages: ffmpeg...

ROS-20260129-73-0067

Vulnerability in curl related to incorrect certificate authentication. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

ROS-20260129-73-0019

Vulnerability in python-ldap related to errors in neutralizing special elements. Exploitation of the vulnerability may allow an attacker to escalate privileges...

ROS-20260129-73-0062

A vulnerability in the ssh-agent library ssh-agent server for the Go crypto programming language involves reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2025-61728

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...

CVE-2025-68119

Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercurial hg installed, downloading modules from non-standard sources e.g., custom domains can cause unexpected code execution due to how external VCS commands are constructed. This iss...