5641 matches found
[SECURITY] Fedora 43 Update: kubernetes1.35-1.35.6-1.fc43
Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...
GHSA-CF98-J28V-49V6 vulnerabilities
Vulnerabilities for packages: grafana...
SUSE CVE-2026-56131
libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...
CVE-2026-52908
In the Linux kernel, the following vulnerability has been resolved: RDMA: During reregmr ensure that REREGACCESS is compatible If IBMRREREGACCESS changes from RO to RW then the umem has to be re-evaluated to ensure it is properly pinned as RW. Since the umem is hidden inside each driver's mr stru...
CVE-2026-56131
libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...
dotnet: .NET Core: Denial of Service via type confusion
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service DoS over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users...
ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that...
SUSE CVE-2026-12293
Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...
CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3
CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...
CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3
CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...
GHSA-X4VX-RJVF-J5P4 vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard, gitlab-rails-ce-fips, langfuse, kibana, wazuh-dashboard-fips, gitlab-rails-ce, nextcloud-server, langfuse-fips...
GHSA-RP9W-3FW7-7CWQ vulnerabilities
Vulnerabilities for packages: librechat, wazuh-dashboard, gitlab-rails-ce-fips, langfuse, kibana, wazuh-dashboard-fips, gitlab-rails-ce, nextcloud-server, langfuse-fips...
GHSA-X4VX-RJVF-J5P4 vulnerabilities
Vulnerabilities for packages: nextcloud-server, langfuse...
CVE-2026-45445 affecting package edk2 for versions less than 20240524git3e722403cd16-18
CVE-2026-45445 affecting package edk2 for versions less than 20240524git3e722403cd16-18. A patched version of the package is available...
CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2
CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...
CVE-2026-34182 affecting package openssl for versions less than 3.3.7-2
CVE-2026-34182 affecting package openssl for versions less than 3.3.7-2. A patched version of the package is available...
GHSA-JQ35-7PRP-9V3F vulnerabilities
Vulnerabilities for packages: ggshield, kserve, superset, datadog-agent...
ROS-20260618-73-0032
The vulnerability in ImageMagick is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...