CVE-2026-18299

GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on t...

CVE-2026-49825

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

GHSA-72X6-4J93-7W86 vulnerabilities

Vulnerabilities for packages: conftest, livekit-cli, podman-fips, kaniko-fips, kaniko, guac, skaffold, skaffold-fips, kubescape-server-fips, cloudbeat-fips, kubescape-server, trivy-fips, zot, trivy-operator-fips, kubescape, podman, trivy, cloudbeat, scorecard, docker-fips, conftest-fips...

GHSA-7236-3392-C5C6 vulnerabilities

Vulnerabilities for packages: conftest, livekit-cli, podman-fips, kaniko-fips, kaniko, guac, skaffold, skaffold-fips, kubescape-server-fips, cloudbeat-fips, kubescape-server, trivy-fips, zot, trivy-operator-fips, kubescape, podman, trivy, cloudbeat, scorecard, docker-fips, conftest-fips...

CVE-2026-61711 vulnerabilities

Vulnerabilities for packages: conftest, livekit-cli, podman-fips, kaniko-fips, kaniko, guac, skaffold, skaffold-fips, kubescape-server-fips, cloudbeat-fips, kubescape-server, trivy-fips, zot, trivy-operator-fips, kubescape, podman, trivy, cloudbeat, scorecard, docker-fips, conftest-fips...

CVE-2026-61712 vulnerabilities

Vulnerabilities for packages: conftest, livekit-cli, podman-fips, kaniko-fips, kaniko, guac, skaffold, skaffold-fips, kubescape-server-fips, cloudbeat-fips, kubescape-server, trivy-fips, zot, trivy-operator-fips, kubescape, podman, trivy, cloudbeat, scorecard, docker-fips, conftest-fips...

GO-2026-4950 vulnerabilities

Vulnerabilities for packages: dapr...

CVE-2026-7485

Incorrect authorization in frozen BI aggregations in Checkmk 2.5.0p2, 2.4.0p29, 2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see...

CVE-2026-73197

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

CVE-2026-11861

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

CVE-2026-73198

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

CVE-2026-13097

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

CVE-2026-18917

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...

CVE-2026-77014

A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...

webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox

A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper checks, potentially allowing access to resources that should be restricted...

webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data

A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation...

webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a type confusion due to improper checks, leading to memory corruption...