CVE-2026-4727

Denial-of-service in the Libraries component in NSS. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

GHSA-PWJX-QHCG-RVJ4 vulnerabilities

Vulnerabilities for packages: komodo, garage, uv, rye, samply, rustup, kdash, oranda, tealdeer, pgcat, parseable, zizmor, rustls-ffi, zed, lychee, linkerd-network-validator, fnm, linkerd-extension-init, py3-xet-core, nushell, linkerd2, wasm-pack, linkerd2-cni-plugin, sdp-k8s-injector, pixi,...

CVE-2026-4538

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The projec...

CVE-2026-30836 vulnerabilities

Vulnerabilities for packages: step-ca-fips, frankenphp-8.3, frankenphp-8.5, frankenphp-8.4, step-issuer-fips, caddy-fips, caddy, frankenphp-8.2...

GHSA-6457-6JRX-69CR vulnerabilities

Vulnerabilities for packages: sqlpad...

ROS-20260320-73-0006

Vulnerability in jenkins related to lack of protection for proprietary data. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

CVE-2026-33186 vulnerabilities

Vulnerabilities for packages: hubble-ui, melange, kube-state-metrics, bento, velero-plugin-for-csi, kserve-modelmesh-serving, cert-manager-csi-driver, kubescape-operator, crossplane-provider-aws-iam, terraform-provider-acme, k6, argocd-image-updater, kube-vip, contour, sigstore-scaffolding,...

CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1

CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31963

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of removing redundant data, CRAM uses reference-based compression so that instead of storing the full sequence for each alignment record it...

GHSA-4X4V-CW6F-WC3M vulnerabilities

Vulnerabilities for packages: chromium...

SUSE CVE-2026-32260

Deno is a JavaScript, TypeScript, and WebAssembly runtime. From 2.7.0 to 2.7.1, A command injection vulnerability exists in Deno's node:childprocess polyfill shell: true mode that bypasses the fix for CVE-2026-27190. The two-stage argument sanitization in transformDenoShellCommand...

CVE-2026-32274

Black is the uncompromising Python code formatter. Prior to 26.3.1, Black writes a cache file, the name of which is computed from various formatting options. The value of the --python-cell-magics option was placed in the filename without sanitization, which allowed an attacker who controls the...

CVE-2026-28229 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

GHSA-7WC2-QXGW-G8GG vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2025-38011 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-38011 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23107 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23107 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-3846

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 148.0.2...

mysql: DDL unspecified vulnerability (CPU Jan 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access v...

firefox: thunderbird: Incorrect boundary conditions in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics: ImageLib component...

CVE-2025-38729 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38729 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...