177214 matches found
GHSA-8C42-7QJ2-3J46 vulnerabilities
Vulnerabilities for packages: spark-fips, wazuh-indexer, apicurio-registry-fips, pinot-fips, akhq, keycloak-fips, neo4j, s3proxy, kafbat-ui, apache-pulsar, grpc-java-fips, thingsboard, keycloak, knative-kafka-broker, knative-kafka-broker-fips, kafka-bridge-fips, s3proxy-fips, airbyte-server-fips,...
CVE-2026-59903 vulnerabilities
Vulnerabilities for packages: spark-fips, wazuh-indexer, apicurio-registry-fips, pinot-fips, akhq, keycloak-fips, neo4j, s3proxy, kafbat-ui, apache-pulsar, grpc-java-fips, thingsboard, keycloak, knative-kafka-broker, knative-kafka-broker-fips, kafka-bridge-fips, s3proxy-fips, airbyte-server-fips,...
EUVD-2026-61127
sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...
CVE-2026-54552 sh _uid does not drop supplementary groups (incomplete privilege drop)
sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...
CVE-2026-54552 sh _uid does not drop supplementary groups (incomplete privilege drop)
sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...
SUSE CVE-2026-72585
Red Hat CNA-LR concluded that this CVE is not valid...
CVE-2026-75904
libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...
CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3
CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-71556 affecting package packer for versions less than 1.9.5-19
CVE-2026-71556 affecting package packer for versions less than 1.9.5-19. A patched version of the package is available...
CVE-2026-20345 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20345 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-71227 affecting package libkcapi for versions less than 1.5.1-1
CVE-2026-71227 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3
CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-49506 affecting package apr-util for versions less than 1.6.3-3
CVE-2025-49506 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-71557 affecting package packer for versions less than 1.9.5-19
CVE-2026-71557 affecting package packer for versions less than 1.9.5-19. A patched version of the package is available...
CVE-2026-20347 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20347 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-20339 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20339 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...