603 matches found
GHSA-3M6Q-JJ5J-38C9 vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset...
CVE-2026-6092
When HAVEENCRYPTTHENMAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC...
CVE-2026-6092
When HAVEENCRYPTTHENMAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC...
CVE-2026-53225
In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in sctprcvasconflookup sctprcvasconflookup in net/sctp/input.c only checks that the ASCONF chunk can hold the ADDIP header and a parameter header, then calls af-fromaddrparam, which reads the full address 1...
CVE-2026-53197
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfsdestroystate iptfsdestroystate calls hrtimercancel while holding a spinlock that the timer callback also acquires, leading to an ABBA deadlock on SMP systems. For the output timer iptfstimer...
CVE-2026-12246
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes...
CVE-2026-54516 vulnerabilities
Vulnerabilities for packages: keycloak-fips, pinot-fips, airbyte-server, strimzi-kafka-operator, opensearch-fips, apicurio-registry, spark, pinot, apache-hop, apache-hop-fips, keycloak-config-cli, nextflow, apache-tomee, nacos, logstash, kafka-fips, solr, scala, sonarqube,...
CVE-2025-62879 vulnerabilities
Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...
GHSA-FCW5-X6J4-CCMP vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter...
GHSA-WXV8-W48J-R2F4 vulnerabilities
Vulnerabilities for packages: python...
ROS-20260617-73-0007
The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
GHSA-4FVR-RGM6-GQMC vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk, request-1276, lmcache-cuda-12.8, apache-beam-python-3.13-sdk, open-webui, airflow-core, mlflow, awx, py3-vllm-cuda-13.0, airflow, authentik, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.12-sdk, mlflow-fips,...
GHSA-4M7W-QMGQ-4WJ5 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk, request-1276, lmcache-cuda-12.8, apache-beam-python-3.13-sdk, open-webui, airflow-core, mlflow, awx, py3-vllm-cuda-13.0, airflow, authentik, py3.13-scanner-test-libraries-aiohttp, apache-beam-python-3.12-sdk, mlflow-fips,...
python-idna: idna: Denial of Service via specially crafted long inputs
A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...
ROS-20260616-73-0002
The vulnerability in ImageMagick 7 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-40034 affecting package rust for versions less than 1.90.0-9
CVE-2026-40034 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
CVE-2026-5222 affecting package rust for versions less than 1.90.0-9
CVE-2026-5222 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
Updated nghttp2 packages fix security vulnerability
Denial of service: Assertion failure due to missing state validation. CVE-2026-27135...