603 matches found
CVE-2026-41256 affecting package jq for versions less than 1.7.1-6
CVE-2026-41256 affecting package jq for versions less than 1.7.1-6. A patched version of the package is available...
ROS-20260605-73-0087
The vulnerability in Firefox is related to insecure handling of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2026-10945
Use after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...
CVE-2026-42507 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-livenessprobe, delve, litestream, flannel, src-fingerprint, grafana-operator, kube-logging-operator-custom-runner, nri-haproxy, aws-node-termination-handler, controller-gen, grafana-alloy, calico, victoriametrics-cluster, golangci-lint,...
GHSA-PJWX-R37V-7724 vulnerabilities
Vulnerabilities for packages: py3-langchain-core, py3-langchain...
CVE-2026-39821 affecting package vitess for versions less than 19.0.4-10
CVE-2026-39821 affecting package vitess for versions less than 19.0.4-10. A patched version of the package is available...
GHSA-654M-C8P4-X5FP vulnerabilities
Vulnerabilities for packages: kibana, librechat, kubeflow-centraldashboard, unleash, lerna, jitsucom-jitsu, opensearch-dashboards, prism, langfuse, opensearch-dashboards-fips, langfuse-fips...
CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6
CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...
CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-8
CVE-2026-39835 affecting package cert-manager for versions less than 1.12.15-8. A patched version of the package is available...
GHSA-5P55-QCQV-882W vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng, gitlab-cng-fips, gitlab-runner...
CVE-2026-39834 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-datasync, livekit-cli, upwind-agent, coder-fips, cloudflared-fips, policy-controller-fips, crossplane-fips, crossplane-provider-aws-kafka-fips, skaffold, kuma, terraform-provider-azapi-fips, vault-benchmark, crossplane-provider-aws-ecs,...
CVE-2026-46096
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix missing tpmbufdestroy in tpm2readpublic tpm2readpublic calls tpmbufinit but fails to call tpmbufdestroy on two exit paths, leaking a page allocation: 1. When namesize returns an error unrecognized hash algorith...
CVE-2026-46088
In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buflen before strnlen in sndctleleminitenumnames sndctleleminitenumnames advances pointer p through the names buffer while decrementing buflen. If buflen reaches zero but items remain, the next iteration...
CVE-2026-45972
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2openfile Zero out @erriov and @errbuftype before retrying SMB2open to prevent an UAF bug if @data != NULL, otherwise a double free...
CVE-2026-45854
In the Linux kernel, the following vulnerability has been resolved: crypto: inside-secure/eip93 - unregister only available algorithm EIP93 has an options register. This register indicates which crypto algorithms are implemented in silicon. Supported algorithms are registered on this basis...
CVE-2026-48696
FastNetMon Community Edition through 1.2.9 has a buffer overflow, a different vulnerability than CVE-2026-48686 and CVE-2026-48689...
GHSA-4J38-F5CW-54H7 vulnerabilities
Vulnerabilities for packages: drupal...
CVE-2026-39829
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...
CVE-2026-39830
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close, resulting in a resource leak per connection. Unsolicited global responses are now discarded...