CVE-2026-47321

The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming data, the filter does not control the resulting size, and create a buffer no matter what. Some compressed data may have a compression ration greater than 1 thousand, leading to an...

CVE-2026-48977

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, opensearch-dashboards-fips, kubeflow-centraldashboard, redisinsight, semaphore, opensearch-dashboards, prism, langfuse, gitlab-rails-ce, kibana, lerna, azurite, wazuh-dashboard, nextcloud-server, awx, librechat,...

CVE-2026-46636

Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls on instances of Twig\Markup. Twig\Markup is not final, so subclasses inherit the bypass. An application that passes an object of a...

CVE-2026-12876 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FQ2J-3J99-RX65 vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, opensearch-dashboards-fips, kubeflow-centraldashboard, redisinsight, semaphore, opensearch-dashboards, prism, langfuse, gitlab-rails-ce, kibana, arangodb, lerna, azurite, wazuh-dashboard, nextcloud-server, awx, librechat,...

GHSA-6QM2-MCQ7-53QP vulnerabilities

Vulnerabilities for packages: reposilite, apache-hop, apache-hop-fips, apache-pulsar, druid, jenkins-plugin-manager, commercial-elasticsearch, wildfly, nextflow, zookeeper-fips, sonarqube, apache-pulsar-fips, logstash-fips, ruby3.4-jrjackson, apache-nifi, flyway, localstack, s3proxy-fips, neo4j,...

GHSA-4WW2-RJH2-XPV9 vulnerabilities

Vulnerabilities for packages: nextcloud-server, opensearch-dashboards, prism, langfuse, kubeflow-centraldashboard, jitsucom-jitsu, lerna...

CVE-2026-12681 vulnerabilities

Vulnerabilities for packages: tbot, teleport, teleport-operator-fips...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: afunix: Obtaining userns from inskb in unixdiaggetexact. Wei Chen reported a NULL dereference in skuserns 01. Paolo identified the root cause: in unixdiaggetexact, the newly allocated skb does not have sk.2 We must obtain the...

Astra Linux – Vulnerability in Wireshark

IEEE 802.11 protocol dissector crashes in Wireshark versions 4.6.0 to 4.6.4...

CVE-2026-55622

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new projec...

CVE-2026-48769

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

GHSA-JMRW-C58M-5H7J vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XG37-CJ68-XWQ6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3GFH-MQ5V-C264 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure...

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

CVE-2026-64551

In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a STALECOOKIE cause is received in the COOKIEECHOED state, sctpsfdo526stale reads the 4-byte Measure of Staleness that follows the cause...

CVE-2026-64271

In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on every complete packet twinterrupt accumulates each non-zero serial byte into a fixed three-byte buffer with a running index that is only reset once a full packet has been received and t...

CVE-2026-45383

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.0.19 have a heap buffer overflow out-of-bounds READ exists in decodercontext::decodesliceunitWPP in libde265/decctx.cc. When decoding a WPP Wavefront Parallel Processing HEVC slice, ctbAddrRS is computed as...