CVE-2026-70651

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...

CVE-2026-77584

Tor before 0.4.9.10 did not reject a CONFLUXLINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAYCOMMANDBEGIN before the CONFLUXLINK on the same circuit, attaching an exit stream that would later end up orphan leaving a dangling circuit...

CVE-2026-76022

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-61711 vulnerabilities

Vulnerabilities for packages: trivy, scorecard, kaniko, zot, conftest, skaffold, guac, podman, kubescape...

CVE-2026-61712 vulnerabilities

Vulnerabilities for packages: trivy, scorecard, kaniko, zot, conftest, skaffold, guac, podman, kubescape...

GHSA-72X6-4J93-7W86 vulnerabilities

Vulnerabilities for packages: trivy, scorecard, kaniko, zot, conftest, skaffold, guac, podman, kubescape...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

CVE-2026-14456 vulnerabilities

Vulnerabilities for packages: openssl, eco-python-openssl, libcrypto3-2.34...

CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...

CVE-2026-50190

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...

CVE-2026-53583

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

CVE-2026-15743

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The servestatic method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused i...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

CVE-2026-50190

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3. A patched version of the package is available...

CVE-2026-15741 affecting package postgresql for versions less than 16.15-1

CVE-2026-15741 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55950 affecting package erlang for versions less than 26.2.5.21-5

CVE-2026-55950 affecting package erlang for versions less than 26.2.5.21-5. A patched version of the package is available...

CVE-2026-16239 affecting package postgresql for versions less than 16.15-1

CVE-2026-16239 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64653 affecting package gh for versions less than 2.97.0-1

CVE-2026-64653 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...