ROS-20251216-7351

Vulnerability in containerd related to lack of memory release after effective lifetime. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-40198 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40198 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-14714

An Authentication Bypass vulnerability existed where the application bundled an interpreter Python that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with...

CVE-2025-67897

In Sequoia before 2.1.0, aeskeyunwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet...

CVE-2025-66627 vulnerabilities

Vulnerabilities for packages: typst...

GHSA-G754-HX8W-X2G6 vulnerabilities

Vulnerabilities for packages: seaweedfs, ipfs-cluster, k3s, traefik, kubernetes-dns-node-cache, frp, q, spegel, caddy, kubo, kargo, k8sgateway, buf, dkron...

GHSA-GVMQ-HR29-XRX3 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-13638 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-38PP-6GCP-RQVM vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

GHSA-6PGW-376W-JRXX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GVMQ-HR29-XRX3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-68WW-H25V-G8MQ vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-67713

Miniflux 2 is an open source feed reader. Versions 2.2.14 and below treat redirecturl as safe when url.Parse....IsAbs is false, enabling phishing flows after login. Protocol-relative URLs like //ikotaslabs.com have an empty scheme and pass that check, allowing post-login redirects to...

CVE-2022-50660

In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2200: fix memory leak in ipwwdevinit In the error path of ipwwdevinit, exception value is returned, and the memory applied for in the function is not released. Also the memory is not released in ipwpciprobe. As a result,...

CVE-2023-53832

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref in raid10syncrequest initresync inits mempool and sets conf-havereplacemnt at the beginning of sync, closesync frees the mempool when sync is completed. After 1 recovery might be skipped and initresy...

CVE-2023-53849

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make sure to destroy the workqueue also in case of early errors during bind e.g. a subcomponent failing to bind. Since commit c3b790ea07a1 "drm: Manage drmmodeconfiginit with drmm" the...

CVE-2025-2296

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...

CVE-2023-53829

In the Linux kernel, the following vulnerability has been resolved: f2fs: flush inode if atomic file is aborted Let's flush the inode being aborted atomic operation to avoid stale dirty inode during eviction in this call stack: f2fsmarkinodedirtysync+0x22/0x40 f2fs f2fsabortatomicwrite+0xc4/0xf0...

CVE-2022-50670

In the Linux kernel, the following vulnerability has been resolved: mmc: omaphsmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

CVE-2022-50644

In the Linux kernel, the following vulnerability has been resolved: clk: ti: dra7-atl: Fix reference leak in ofdra7atlclkprobe pmruntimegetsync will increment pm usage counter. Forgetting to putting operation will result in reference leak. Add missing pmruntimeputsync in some error paths...