5641 matches found
GHSA-9WHR-FJ92-HCRC vulnerabilities
Vulnerabilities for packages: firefox...
SUSE CVE-2026-35511
unknown...
SUSE CVE-2026-49446
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...
SUSE CVE-2026-53658
Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inserts the username from HTTP Basic authentication into the LDAP uid search UserFilter without escaping LDAP metacharacters...
SUSE CVE-2026-54167
Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before...
SUSE CVE-2026-55061
uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNIGETEDITOR or EDITOR with strings.Spliteditor, " " and passes every space-delimited suffix as an argument to the selected editor executable. An attacker who can...
SUSE CVE-2026-55062
uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the selected hooks directory, allowing parent-directory components to escape that directory. The resulting path is passed ...
SUSE CVE-2026-85498
unknown...
GHSA-83VM-P52W-F9PW vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9...
CVE-2026-71513 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-WW6M-CW3F-Q94G vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-78680 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-81723 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-72818 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-10142 vulnerabilities
Vulnerabilities for packages: mlrun, mlrun-fips...
GHSA-M28W-2PQF-7QGJ vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, arangodb, gitlab-rails-ce-fips...
CVE-2026-81722 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-CW6X-M8JW-QMRH vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-80896
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshvirqfddeassign mshvirqfddeactivate and the hlist traversal of ptirqfdslist require pt-ptirqfdslock to be held, but mshvirqfddeassign omits it. This races with the EPOLLHUP path in mshvirqfdwakeup, which does...
CVE-2026-80764
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix LE list UAF on reset hciccreset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs readers...