592 matches found
GHSA-65CH-62R8-G69G vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-pipelines, opensearch-dashboards, kubeflow-katib, kubeflow-centraldashboard, argo-workflows...
CVE-2025-13466
body-parser 2.2.0 is vulnerable to denial of service due to inefficient handling of URL-encoded bodies with very large numbers of parameters. An attacker can send payloads containing thousands of parameters within the default 100KB request size limit, causing elevated CPU and memory usage. This c...
CVE-2025-13470
In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release...
firefox: thunderbird: Same-origin policy bypass in the DOM: Workers component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Workers component...
CVE-2025-39971 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39971 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-39916 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39916 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
firefox: thunderbird: Race condition in the Graphics component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition in the Graphics component...
CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2
CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...
GHSA-HGRR-935X-PQ79 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-6075
If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...
CVE-2025-58058 affecting package podman for versions less than 5.6.1-2
CVE-2025-58058 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-48039 affecting package erlang for versions less than 26.2.5.15-1
CVE-2025-48039 affecting package erlang for versions less than 26.2.5.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-1118 affecting package grub2 for versions less than 2.06-25
CVE-2025-1118 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...
CVE-2021-20291 affecting package buildah for versions less than 1.41.4-2
CVE-2021-20291 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...
[SECURITY] Fedora 43 Update: yarnpkg-1.22.22-12.fc43
Fast, reliable, and secure dependency management...
CVE-2025-53067
Removed by vendor...
thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance()
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in MediaTrackGraphImpl::GetInstance...
GHSA-RWVP-R38J-9RGG vulnerabilities
Vulnerabilities for packages: chainctl, chezmoi, mattermost, nuclei, grype-fips, cg, kubescape, zarf, wolfictl, k9s-fips, filebrowser, kots, trufflehog-fips, gitleaks, gotenberg, undock, trufflehog, syft-fips, grype-db, mattermost-fips, gptscript, grype, syft, k9s...
ROS-20250929-10
Intel processor firmware vulnerability is linked to information disclosure. Exploitation exploitation of the vulnerability could allow an intruder to gain unauthorized access to protected information...