3431 matches found
GHSA-FJ9C-H67P-PH2J vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-26127 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
CVE-2026-31802 vulnerabilities
Vulnerabilities for packages: tileserver-gl, sqlpad, lerna, pnpm-stage0, node-gyp, saf, py3-jupyterlab, pulumi, kubeflow-centraldashboard, kubeflow-katib, jupyter-base-notebook, renovate...
GHSA-5WMX-573V-2QWQ vulnerabilities
Vulnerabilities for packages: superset, awx...
CVE-2026-27940
llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the ggufinitfromfileimpl in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread writes 528+ bytes of attacker-controlled data past the buffer boundary. This is...
GHSA-7XRH-HQFC-G7QR vulnerabilities
Vulnerabilities for packages: trino, strimzi-kafka-operator, zookeeper, apache-activemq-artemis, solr, spark, kserve-modelmesh, akhq, apache-nifi, apache-pulsar...
CVE-2025-69219 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2025-67873 affecting package rust for versions less than 1.90.0-4
CVE-2025-67873 affecting package rust for versions less than 1.90.0-4. A patched version of the package is available...
CVE-2026-29786 vulnerabilities
Vulnerabilities for packages: prism, gitlab-rails-ce-fips, saf, tensorflow-cpu-jupyter, drupal, gitlab-rails-ce, tileserver-gl-fips, opensearch-dashboards, wazuh-dashboard, jupyter-base-notebook, pnpm-stage0, node-gyp, kubeflow-katib, redisinsight, pulumi, tileserver-gl, graalvm, kibana,...
CVE-2026-28690
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data...
CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1
CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39845 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39845 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39749 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39749 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1
CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-3520 vulnerabilities
Vulnerabilities for packages: librechat, redisinsight...
CVE-2026-25674
An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...
GHSA-F3VJ-J2M6-8HFJ vulnerabilities
Vulnerabilities for packages: postgresql...
SUSE CVE-2026-28417
Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL e.g., using the scp:// protocol handler, an attacker can execute arbitrary shell command...