3405 matches found
GHSA-8297-V2RF-2P32 vulnerabilities
Vulnerabilities for packages: guacamole-client, jenkins, apache-hop-fips, apache-hop, hadoop-fips...
CVE-2026-43309
In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-raid target, stopping a RAID array can cause the system to hang under specific conditions. This occurs when: - A dm-raid managed...
CVE-2026-43297
In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rga: Fix possible ERRPTR dereference in rgabufinit rgagetframe can return ERRPTR-EINVAL when buffer type is unsupported or invalid. rgabufinit does not check the return value and unconditionally dereferences the...
GHSA-P334-GFHQ-C7W6 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-WJXP-XRPV-XPFF vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-chains, tkn...
GHSA-RMX9-2PP3-XHCR vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-chains, tkn...
CVE-2026-40161 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tkn-fips, tekton-chains, tekton-pipelines-fips, tekton-chains-fips, tkn...
CVE-2026-44471 vulnerabilities
Vulnerabilities for packages: cargo-c, starship, cargo-audit, jujutsu...
CVE-2026-42328 vulnerabilities
Vulnerabilities for packages: spegel, k3s, ipfs-cluster...
CVE-2026-41685
Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk space, potentially taking down the host system. The impact here is limited for anyone using storage.imagesvolume and...
CVE-2026-42010
A flaw was found in gnutls. Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass...
GHSA-V2V4-37R5-5V8G vulnerabilities
Vulnerabilities for packages: code-server, kubeflow-katib, opensearch-dashboards, tileserver-gl, npm, prism, kubeflow-pipelines, langfuse, lerna, sqlpad, pulumi, renovate, saf...
GHSA-V8H7-RR48-VMMV vulnerabilities
Vulnerabilities for packages: knative-kafka-broker-fips, pinot-fips, apache-nifi, apache-nifi-registry, seata, kserve-modelmesh, apache-pulsar-fips, localstack, selenium, opensearch-fips, apicurio-registry, kafbat-ui, nuxeo, sonarqube, spark-kubernetes-operator, docker-selenium, kayenta-fips, tez...
CVE-2026-41314 vulnerabilities
Vulnerabilities for packages: open-webui, litellm, nemo...
GHSA-Q3HG-2W34-64M3 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-7900
Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-8012
Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Low...
CVE-2026-7902
Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...