SUSE CVE-2026-72585

Red Hat CNA-LR concluded that this CVE is not valid...

CVE-2026-75904

libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...

CVE-2026-75926

Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside the project directory. Hugo 0.162.0 added tailwindcss to the AllowChildProcess default in...

CVE-2026-15806

The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also us...

CVE-2026-75904

libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplooped in src/loadpat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array patloops, so an index of zero reads patloops-1, one byte...

CVE-2026-68939

Pyenv provides simple Python version management. Prior to 2.8.0, isversionsafe in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values, and unquoted PYENVVERSION expansion in libexec/pyenv-version-name, libexec/pyenv-which, libexec/pyenv-prefix,...

CVE-2026-66046

Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...

CVE-2026-63632

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...

CVE-2026-17084

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 the "idna" codec and the intable...

CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3

CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...

CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20

CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...

CVE-2026-71556 affecting package packer for versions less than 1.9.5-19

CVE-2026-71556 affecting package packer for versions less than 1.9.5-19. A patched version of the package is available...

CVE-2026-20345 affecting package clamav for versions less than 1.5.4-1

CVE-2026-20345 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-71227 affecting package libkcapi for versions less than 1.5.1-1

CVE-2026-71227 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3

CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...

CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20

CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...

CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1

CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-71557 affecting package packer for versions less than 1.9.5-19

CVE-2026-71557 affecting package packer for versions less than 1.9.5-19. A patched version of the package is available...

CVE-2025-49506 affecting package apr-util for versions less than 1.6.3-3

CVE-2025-49506 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...

CVE-2026-20347 affecting package clamav for versions less than 1.5.4-1

CVE-2026-20347 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...