5124 matches found
GHSA-MJ4R-2HFC-F8P6 vulnerabilities
Vulnerabilities for packages: trino, apache-pulsar, wavefront-proxy, opensearch, apache-nifi, keycloak, akhq, cassandra, druid, apache-activemq-artemis, spark, wildfly, zipkin, tez, kserve-modelmesh, logstash, infinispan, selenium, sonarqube, docker-selenium, strimzi-kafka-operator,...
GHSA-Q2QQ-HMJ6-3WPP vulnerabilities
Vulnerabilities for packages: deno, linkerd2-proxy, ztunnel, vector, shadowsocks-rust...
GHSA-M4CV-J2PX-7723 vulnerabilities
Vulnerabilities for packages: trino, apache-pulsar, wavefront-proxy, opensearch, apache-nifi, keycloak, akhq, druid, apache-activemq-artemis, spark, zipkin, tez, kserve-modelmesh, logstash, infinispan, selenium, sonarqube, docker-selenium, strimzi-kafka-operator, apicurio-registry,...
GHSA-HF2P-G3JQ-W2MX vulnerabilities
Vulnerabilities for packages: linux-azure, linux-vmware, linux-aws, linux-gcp, linux-qemu...
GHSA-P5WW-JRFV-82QX vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu-rc, linux-qemu...
CVE-2026-31696 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-aws, linux-qemu-rc, linux-qemu...
GHSA-P3HW-MV63-RF9W vulnerabilities
Vulnerabilities for packages: cargo-c, cargo-audit, jujutsu...
GHSA-PG4W-G64P-QWHJ vulnerabilities
Vulnerabilities for packages: cargo-c, cargo-audit, jujutsu...
SUSE CVE-2026-7936
Determined not a vulnerability...
GHSA-69XW-7HCM-H432 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, kibana, librechat, wazuh-dashboard-fips...
GHSA-9VQF-7F2P-GF9V vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, kibana, librechat, wazuh-dashboard-fips...
CVE-2026-39817
The "go tool pack" subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem...
CVE-2026-42225
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport siptransporttls can accept connections with invalid or untrusted certificates even when the application explicitly enables certificate verification via...
CVE-2026-39817
The "go tool pack" subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem...
CVE-2026-8086
A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly...
GHSA-CM99-M826-VGG7 vulnerabilities
Vulnerabilities for packages: tiff...
ROS-20260507-73-0010
Vulnerability in tomcat10 related to a flaw in the error reporting mechanism. Exploitation of the vulnerability may allow a remote intruder to gain unauthorized access to protected information...
ROS-20260507-73-0007
Vulnerability in roundcubemail related to argument injection or modification. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands...
CVE-2026-41643
GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.3.0, a remote Denial of Service DoS vulnerability exists in GoBGP where a malformed BGP UPDATE message can trigger a runtime error: index out of range panic. This occurs during th...