SUSE CVE-2026-61308

unknown...

SUSE CVE-2026-70906

unknown...

SUSE CVE-2026-70907

unknown...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

UBUNTU-CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2...

Important Photon OS Security Update - PHSA-2026-5.0-92-0969

Updates of 'openssl' packages of Photon OS have been released...

CVE-2026-18295

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution V...

CVE-2026-18298

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Exec...

CVE-2026-18299

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerabili...

CVE-2026-18296

GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Exec...

CVE-2026-18297

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Exe...

CVE-2026-61712 vulnerabilities

Vulnerabilities for packages: conftest, guac, podman, kubescape, scorecard, kaniko...

CVE-2026-61711 vulnerabilities

Vulnerabilities for packages: conftest, guac, podman, kubescape, scorecard, kaniko...

GHSA-72X6-4J93-7W86 vulnerabilities

Vulnerabilities for packages: conftest, guac, podman, kubescape, scorecard, kaniko...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

CVE-2026-14456 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

CVE-2026-50190

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3. A patched version of the package is available...

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...