4981 matches found
GHSA-MQ44-7P77-Q5H7 vulnerabilities
Vulnerabilities for packages: airflow-core, puppygraph-python, py3.13-scanner-test-libraries-aiohttp, kserve-models-web-app, airflow...
CVE-2026-69152 vulnerabilities
Vulnerabilities for packages: rancher-api-ui...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, airflow, in-toto, ggshield...
GHSA-JR45-8VMC-QM54 vulnerabilities
Vulnerabilities for packages: code-server, renovate...
GHSA-V3R7-H72X-CJCM vulnerabilities
Vulnerabilities for packages: code-server...
CVE-2026-15337
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
CVE-2026-70368
A stack-based out-of-bounds read vulnerability exists in the "svlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an...
golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...
CVE-2026-18772
Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads...
GHSA-35PC-QWV6-4858 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-cng-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce...
CVE-2026-14351 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner-fips, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-cng-fips, gitlab-rails-ce-fips, gitlab-runner, gitlab-workhorse-ce...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2026-9335
A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...
[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43
Native bindings to the libgit2 library...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: goreleaser, skaffold, kyverno-notation-aws, spire-server, neuvector-sigstore-interface, kyverno, trivy-operator, crossplane, aactl, falcoctl, kubescape, policy-controller, tkn, trivy, zarf, zot, tekton-chains, flux-source-controller...
CVE-2026-67353
guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and...
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...