3431 matches found
CVE-2026-33983
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressivedecompresstileupgrade detects a mismatch via progressiverfxquantcmpequal but only emits WLogWARN, execution continues. The wrapped value 247 is used as a shift exponent, causing undefined behavior...
GHSA-X744-4WPC-V9H2 vulnerabilities
Vulnerabilities for packages: cluster-api-fips, grafana-alloy-fips, cloudbeat, grafana-fips, commercial-grafana, neuvector-fips, amazon-cloudwatch-agent, aws-otel-collector, k8sgpt, opentelemetry-operator, docker-credential-gcr, opentelemetry-operator-fips, apko, nerdctl, harvester-fips, podman,...
CVE-2026-33672 vulnerabilities
Vulnerabilities for packages: tileserver-gl, npm, prism, lerna, node-gyp, vite, renovate, code-server, ts-patch, pulumi, vitess, kubeflow-katib, sqlpad, opensearch-dashboards, kubeflow-pipelines, saf, rancher-api-ui, nextcloud-server, argo-workflows...
CVE-2026-4697 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-CR5G-9FRG-Q8M8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-CJ36-HXHV-2QXH vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-X3F3-63G4-54J4 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-5CGM-H8QG-5H77 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-6956-6R33-F8XW vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-MRRG-439G-X65P vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-4696 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
GHSA-VXPV-C2H6-HQ9V vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2025-59028
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...
GHSA-3C37-WWVX-H642 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.4, localstack, py3-cbor2, vllm-openai-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...
ROS-20260327-73-0009
Vulnerability in openbabel related to an operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...
CVE-2026-33699
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider...
CVE-2026-25645 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, ggshield, superset, checkov, semgrep, dask-kubernetes, pypy-3.10, py3-pipenv, kubeflow-katib, mlflow, jwt-tool, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, kserve, open-webui, py3-pip, emissary, airflow, az, pypy-3.11, confluent-docker-utils,...
GHSA-GFWX-W7GR-FVH7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...
GHSA-JM6W-M3J8-898G vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.12-sdk, label-studio, kubeflow-pipelines-visualization-server, py3-nltk, nemo, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk, open-webui...