CVE-2026-13820 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JM5G-9RWJ-6FH6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C53H-XMGP-J2HJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-92HW-39HG-4R93 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-568P-3FRM-J63M vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JJJ3-5MQC-GWQV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4875-WJV5-3WM4 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-59692

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

GHSA-CR2W-747Q-47QC vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-vmware, linux-azure, linux-gcp, linux-qemu-melange...

GHSA-W9WP-H8WV-79JX vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, mountpoint-s3, wasmcloud, parseable, deno...

ROS-20260709-73-0043

The vulnerability in ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2026-55564

Out-of-bounds read in glyphcacheget via crafted glyph fragments...

CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

GHSA-P4GQ-832X-FM9V vulnerabilities

Vulnerabilities for packages: py3-nltk, open-webui...

GHSA-P4GQ-832X-FM9V vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.13-sdk, open-webui, apache-beam-python-3.11-sdk, py3-nltk, apache-beam-python-3.12-sdk, label-studio, nemo...

CVE-2026-54293 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.13-sdk, open-webui, apache-beam-python-3.11-sdk, py3-nltk, apache-beam-python-3.12-sdk, label-studio, nemo...

CVE-2026-50812

A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changesetapplyv3 applies a corrupt changeset...

CVE-2026-59938

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual data, causing large memory usage in pypdf image parsing. This issue is fixed in version 6.14.0...

Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass

A flaw was found in Apache Tomcat. This vulnerability, categorized as Missing Encryption of Sensitive Data, arises from a bypass in the EncryptInterceptor, a component designed to ensure data encryption. This bypass, introduced as a fix for CVE-2026-29146, allows sensitive data to remain...

CVE-2026-52967 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52967 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...