GHSA-GGR8-5VV4-36MX vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2026-9689 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

GHSA-P3V8-FM5P-V84H vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

GHSA-WCVJ-VPVW-9RR5 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

GHSA-Q6H7-XXP7-7429 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

CVE-2026-9793 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

CVE-2026-9798 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

GHSA-WCVJ-VPVW-9RR5 vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-P3V8-FM5P-V84H vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-9689 vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-Q6H7-XXP7-7429 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-9798 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-47895

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed...

CVE-2026-50538

LibVNCClient is a library for easy implementation of a VNC client. In versions 0.9.12 through 0.9.15, a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker-controlled data past the end of its framebuffer. This is an out-of-bounds heap write with...

GHSA-9W56-46F6-3QHX vulnerabilities

Vulnerabilities for packages: keep, keep-fips...

GHSA-89V8-RHWQ-HF77 vulnerabilities

Vulnerabilities for packages: keep, keep-fips...

CVE-2026-55244 vulnerabilities

Vulnerabilities for packages: keep, keep-fips...

CVE-2026-41451 UAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parseartifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval...

CVE-2026-41450 UAC < 3.3.0 Command Injection via command_collector.sh

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the commandcollector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with eval. Attackers can...

CVE-2026-74583

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...