3405 matches found
CVE-2026-34525 vulnerabilities
Vulnerabilities for packages: checkov, open-webui, kserve, airflow, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, dask-kubernetes...
CVE-2026-31789
Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior. If an attacker c...
CVE-2026-28387
Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of potential consequenc...
GHSA-8CPQ-38P9-67GX vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-27121 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
CVE-2026-27901 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-HQMJ-H5C6-369M vulnerabilities
Vulnerabilities for packages: py3-onnx...
GHSA-G2PF-WW5M-2R9M vulnerabilities
Vulnerabilities for packages: zitadel...
CVE-2026-34516 vulnerabilities
Vulnerabilities for packages: metaflow-service-fips, keep-fips, tritonserver-backend-vllm-cuda-12.9, text-generation-inference, authentik, authentik-fips, open-webui, airflow, py3.13-scanner-test-libraries-aiohttp, kubeflow-pipelines-visualization-server, awx, keep, kserve,...
CVE-2026-4519 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-23414
In the Linux kernel, the following vulnerability has been resolved: tls: Purge asynchold in tlsdecryptasyncwait The asynchold queue pins encrypted input skbs while the AEAD engine references their scatterlist data. Once tlsdecryptasyncwait returns, every AEAD operation has completed and the engin...
CVE-2026-22735 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, thingsboard...
CVE-2025-59800 vulnerabilities
Vulnerabilities for packages: ghostscript...
ROS-20260331-73-0001
A vulnerability in the Wheel file manipulation command line tool is related to an incorrect directory path name restriction. Exploitation of the vulnerability could allow an attacker to escalate privileges or execute arbitrary code...
GHSA-7RX3-28CR-V5WH vulnerabilities
Vulnerabilities for packages: prism, rancher-api-ui, opensearch-dashboards, nextcloud-server, lerna, py3-jupyterlab, ts-patch...
GHSA-6Q6W-FF4V-HGR5 vulnerabilities
Vulnerabilities for packages: ghostscript...
CVE-2026-33983
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressivedecompresstileupgrade detects a mismatch via progressiverfxquantcmpequal but only emits WLogWARN, execution continues. The wrapped value 247 is used as a shift exponent, causing undefined behavior...
GHSA-X744-4WPC-V9H2 vulnerabilities
Vulnerabilities for packages: buf, podman-fips, opentelemetry-collector-contrib-fips, vault, upwind-agent, trivy-fips, commercial-grafana, pulumi, rancher, cloudbeat, envoy-gateway, portieris-fips, docker, openfga, wolfictl, cloudbeat-fips, kots, ko, chainloop-control-plane,...
CVE-2026-33672 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, code-server, opensearch-dashboards, kubeflow-katib, argo-workflows, sqlpad, tileserver-gl, rancher-api-ui, npm, vitess, ts-patch, renovate, prism, nextcloud-server, vite, pulumi, lerna, node-gyp, saf...