CVE-2026-67316 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, langfuse, redisinsight, azurite, librechat, opensearch-dashboards, arangodb, opensearch-dashboards-fips, semaphore, kibana, gitlab-rails-ce, langfuse-fips, jitsucom-jitsu, nextcloud-server, lerna, prism, wazuh-dashboard-fips, awx,...

CVE-2026-45822 vulnerabilities

Vulnerabilities for packages: vitess, kubeflow-pipelines, opensearch-dashboards, nextcloud-server, sqlpad...

GHSA-VCC3-GHJQ-M6FR vulnerabilities

Vulnerabilities for packages: vitess, kubeflow-pipelines, opensearch-dashboards, nextcloud-server, sqlpad...

CVE-2026-67316 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, lerna, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, nextcloud-server...

CVE-2026-67312 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, lerna, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, nextcloud-server...

GHSA-4WW2-RJH2-XPV9 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, lerna, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, nextcloud-server...

GHSA-F2R5-PQH9-R8F8 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, lerna, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, nextcloud-server...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: grafana...

GHSA-6XFF-CPCQ-VPW2 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

CVE-2026-84303

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as...

CVE-2026-84304

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

CVE-2026-84305

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...

libssh: libssh: use-after-free via data callbacks on closed channels

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

CVE-2026-84305

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled parenthesized tuple lists through ReindentFilter.getoffset in sqlparse/filters/reindent.py, where flattenuptotoken repeatedly rebuilds an...

CVE-2026-84304

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

CVE-2026-52023

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the imsregistrarpcscf module, specifically the pcscfsavepending/savepending path and security-agreement parsing in secagree.c:parsesecagree...

CVE-2026-52022

An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components...

CVE-2026-52295

FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamfwriter.c...

CVE-2026-52132

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a negative topn value in a POST request to /rerank...