CVE-2026-33377 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

CVE-2026-28380 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

GHSA-8MRJ-8PC8-39JM vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

GHSA-5M62-PW8W-7W9F vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-46227

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctpsendmsgtoasoc in SCTPSENDALL The SCTPSENDALL path in sctpsendmsg iterates ep-asocs with listforeachentrysafe, which caches the next entry in @tmp before the loop body runs. The body calls...

CVE-2026-46196

In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes through the 0 - 1 transition, tracepointaddfunc invokes the subsystem's ext-regfunc before attempting to install the new probe via funcadd...

CVE-2026-46142

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register access, which lead to a system hang. When the...

CVE-2026-46140

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access btmtkusbhciwmtsync casts the WMT event response SKB data to struct btmtkhciwmtevt 7 bytes and struct btmtkhciwmtevtfuncc 9 bytes without first checking that the...

GHSA-M56P-RP6V-288R vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6R32-H5RG-9M59 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9120 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9112 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6R32-H5RG-9M59 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-44705 vulnerabilities

Vulnerabilities for packages: renovate, lerna, kubeflow-katib, pulumi, prism, saf, py3-jupyterlab, vitess, opensearch-dashboards...

GHSA-G857-HHFV-J68W vulnerabilities

Vulnerabilities for packages: truffleruby...

CVE-2026-39827 vulnerabilities

Vulnerabilities for packages: act, cert-manager, k3s, docker-machine-driver-harvester, gitlab-runner, nfpm, rootlesskit, chisel, kots, prometheus-operator, flux-source-controller, minio, fscrypt, trivy, docker-cli-buildx, trivy-operator, apko, zot, witness, wal-g, kubernetes, dagger, helm, argo-c...

CVE-2026-46595 vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, etcd, kubevela-fips, seaweedfs-rocksdb-fips, argo-workflows-fips, fscrypt, gitlab-rails-ce-fips, trivy-operator-fips, nemo, k9s, helm, frankenphp-8.2, gitlab-workhorse-ce-fips, kyverno, elastic-agent-fips, trivy-operator, zot, drone,...

CVE-2026-39829 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, omnictl-multiarch, apko, dagger, etcd, flux-notification-controller-fips, crossplane-provider-azure-security, crossplane-provider-azure-storagesync, gptscript, kubevela-fips, crossplane-provider-azure-storage, argo-workflows-fips, fscrypt,...

CVE-2026-46095

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machine transition Move the barrier raise operation before calling llbitmapstatemachine in both llbitmapstartwrite and llbitmapstartdiscard. This ensures the barrier is in place before a...

CVE-2026-46086

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in place by fdbdeletelocal, which updates f-dst to another port or to NULL while keeping the entry alive. Several bridge RCU readers...