10185 matches found
SUSE CVE-2026-48758
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.2.1, the preAuthEncoding function in @sigstore/core uses Node.js ascii encoding when converting the PAE string to bytes, allowing payloadType to be mutated after signing without invalidating the signature...
SUSE CVE-2026-48978
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...
SUSE CVE-2026-49835
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency and request count metric vectors before routing, allowing an...
CVE-2026-49838
Unknown description...
CVE-2026-12932
A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...
CVE-2025-66001 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips...
CVE-2025-0312 vulnerabilities
Vulnerabilities for packages: mods...
GHSA-7RP8-R62P-Q6WC vulnerabilities
Vulnerabilities for packages: wolfictl...
CVE-2026-29049 vulnerabilities
Vulnerabilities for packages: wolfictl...
CVE-2024-23332 vulnerabilities
Vulnerabilities for packages: xeol...
GHSA-95FC-G4GJ-MQMX vulnerabilities
Vulnerabilities for packages: rancher...
GHSA-7F2V-3QQ3-VVJF vulnerabilities
Vulnerabilities for packages: py3-jupyterlab...
GHSA-P2WH-W96X-W232 vulnerabilities
Vulnerabilities for packages: mods...
CVE-2024-8063 vulnerabilities
Vulnerabilities for packages: mods...
CVE-2023-26248 vulnerabilities
Vulnerabilities for packages: k3s...
CVE-2026-42295 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...
GHSA-4J3C-42XV-3F84 vulnerabilities
Vulnerabilities for packages: tomcat...
GHSA-8R5M-3F66-QPR3 vulnerabilities
Vulnerabilities for packages: vault, splunk-otel-collector-fips, splunk-otel-collector, vault-fips...