CVE-2026-44458 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse, langfuse-fips, librechat, opensearch-dashboards-fips, wazuh-dashboard-fips, wazuh-dashboard, kibana...

GHSA-QP7P-654G-CW7P vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse, langfuse-fips, librechat, opensearch-dashboards-fips, wazuh-dashboard-fips, wazuh-dashboard, kibana...

GHSA-V8VW-GW5J-W7M6 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-44664 vulnerabilities

Vulnerabilities for packages: renovate...

GHSA-JP94-3292-C3XV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2026-42308

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0...

CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2

CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2. A patched version of the package is available...

CVE-2026-6861 affecting package emacs for versions less than 29.4-4

CVE-2026-6861 affecting package emacs for versions less than 29.4-4. A patched version of the package is available...

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15. A patched version of the package is available...

CVE-2026-5107 affecting package frr for versions less than 10.5.0-2

CVE-2026-5107 affecting package frr for versions less than 10.5.0-2. A patched version of the package is available...

CVE-2026-31694 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-31694 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17

CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17. A patched version of the package is available...

CVE-2026-4647 affecting package crash for versions less than 9.0.0-2

CVE-2026-4647 affecting package crash for versions less than 9.0.0-2. A patched version of the package is available...

CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2

CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

CVE-2025-71290 affecting package kernel for versions less than 6.6.137.1-2

CVE-2025-71290 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2026-39817

The "go tool pack" subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, dask-gateway, cloud-sql-proxy, dbmate, libnvidia-container, amazon-cloudwatch-agent-operator, migrate, kubernetes-csi-node-driver-registrar, opencost, karma, scorecard, cortex, octo-sts, hubble, vault-benchmark, coredns, knative-eventing, xeol,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: haproxy-ingress, aws-flb-cloudwatch, newrelic-nri-statsd, opentelemetry-collector, dask-gateway, datadog-agent, cloud-sql-proxy, controller-gen, mods, nats, crane, nova, dbmate, libnvidia-container, nri-apache, amazon-cloudwatch-agent-operator, http-echo, paranoia,...