4981 matches found
GHSA-MQ44-7P77-Q5H7 vulnerabilities
Vulnerabilities for packages: airflow, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, airflow-core, kserve-models-web-app, apache-beam-python-3.13-sdk, puppygraph-python, apache-beam-python-3.12-sdk...
CVE-2026-69152 vulnerabilities
Vulnerabilities for packages: serve, rancher-api-ui...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, in-toto, ggshield, airflow...
GHSA-JR45-8VMC-QM54 vulnerabilities
Vulnerabilities for packages: renovate, code-server...
GHSA-V3R7-H72X-CJCM vulnerabilities
Vulnerabilities for packages: code-server...
CVE-2026-15337
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...
CVE-2026-70368
A stack-based out-of-bounds read vulnerability exists in the "svlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an...
golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...
CVE-2026-18772
Improper input validation vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads...
GHSA-35PC-QWV6-4858 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng, gitlab-workhorse-ce...
CVE-2026-14351 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng, gitlab-workhorse-ce...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2026-9335
A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...
[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43
Native bindings to the libgit2 library...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: falcoctl, kyverno, aactl, crossplane, neuvector-sigstore-interface, policy-controller, spire-server, tkn, trivy-operator, zarf, skaffold, flux-source-controller, trivy, kyverno-notation-aws, zot, goreleaser, tekton-chains, kubescape...
CVE-2026-67353
guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and...
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...