CVE-2026-34983

Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be triggered by a specific sequence of embedder API calls made by the host. Specifically, the following...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, bento, kubeflow-pipelines, docker, loki, crossplane-provider-aws-iam, terraform-provider-acme, dapr, juicefs, boring-registry, nuclei, spire-server, kots, tfsec, kubescape, weaviate, temporal, jitsucom-bulker,...

GHSA-53MR-6C8Q-9789 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-34079

Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without properly checking that the app controlled path to the outdated cache is in the cache directory. This allows Flatpak apps to delete arbitrary files on t...

GHSA-Q2Q4-JJP8-F6M3 vulnerabilities

Vulnerabilities for packages: perl...

GHSA-3WQ7-RQQ7-WX6J vulnerabilities

Vulnerabilities for packages: dask-kubernetes, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, open-webui, kserve, airflow, checkov...

CVE-2026-1519 affecting package bind for versions less than 9.20.21-1

CVE-2026-1519 affecting package bind for versions less than 9.20.21-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34827 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, pact-broker-docker-fips, pact-broker-docker, logstash, ruby3.2-rails, ruby3.4-rails...

GHSA-G68W-W4H2-FR59 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...

GHSA-VF33-88PF-HWP3 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-35539

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. XSS exists because of insufficient HTML attachment sanitization in preview mode. A victim must preview a text/html attachment...

GHSA-8HFC-FQ58-R658 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-MGVC-8Q2H-5PGC vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda...

GHSA-8HFC-FQ58-R658 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe, camunda...

GHSA-M959-CC7F-WV43 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, in-toto, dask-kubernetes, datadog-agent, k8s-sidecar, mitmproxy, kubeflow-volumes-web-app, py3-cassandra-medusa, kserve, ggshield, airflow, jupyter-base-notebook, semgrep, mycli...

GHSA-PQ2Q-RCW4-3HR6 vulnerabilities

Vulnerabilities for packages: milvus, rke2-runtime-fips, k3s...

GHSA-8R68-GVR4-JH7J vulnerabilities

Vulnerabilities for packages: kine, telegraf, k3s, nats-top, nats...

GHSA-8M2X-3M6Q-6W8J vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, telegraf, nats, rke2-runtime, milvus, kine, rke2-runtime-fips, prometheus-nats-exporter-fips, nats-top, prometheus-nats-exporter, k3s...

GHSA-8R68-GVR4-JH7J vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, telegraf, nats, rke2-runtime, milvus, kine, rke2-runtime-fips, prometheus-nats-exporter-fips, nats-top, prometheus-nats-exporter, k3s...

CVE-2026-23393

In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: Fix race condition in peermep deletion When a peer MEP is being deleted, canceldelayedworksync is called on ccmrxdwork before freeing. However, brcfmframerx runs in softirq context under rcureadlock without RTNL and...