GHSA-67JX-R9PV-98RJ vulnerabilities

Vulnerabilities for packages: traefik...

CVE-2026-24880 vulnerabilities

Vulnerabilities for packages: ontop-fips, ontop, kayenta, kayenta-fips...

GHSA-X4M4-345F-5H5G vulnerabilities

Vulnerabilities for packages: kayenta-fips, nacos, camunda-zeebe, nacos-docker, kayenta, camunda, thingsboard, ontop-fips, ontop...

GHSA-69CC-CV78-QC8G vulnerabilities

Vulnerabilities for packages: kayenta-fips, nacos, camunda-zeebe, nacos-docker, kayenta, camunda, thingsboard, ontop-fips, ontop...

CVE-2026-29145 vulnerabilities

Vulnerabilities for packages: kayenta-fips, nacos, camunda-zeebe, nacos-docker, kayenta, camunda, thingsboard, ontop-fips, ontop...

CVE-2026-25854 vulnerabilities

Vulnerabilities for packages: kayenta-fips, nacos, camunda-zeebe, nacos-docker, kayenta, camunda, thingsboard, ontop-fips, ontop...

python: Python base64: Incomplete data decoding due to premature stop at padding

A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...

GHSA-7777-FHQ9-592V vulnerabilities

Vulnerabilities for packages: zitadel...

GHSA-FJRM-76X2-C4Q4 vulnerabilities

Vulnerabilities for packages: authentik, keep-fips, py3-jwcrypto, authentik-fips, keep, awx...

CVE-2026-39373 vulnerabilities

Vulnerabilities for packages: authentik, keep-fips, py3-jwcrypto, authentik-fips, keep, awx...

GHSA-V6X5-CG8R-VV6X vulnerabilities

Vulnerabilities for packages: logstash, kube-fluentd-operator...

GHSA-Q4QF-9J86-F5MH vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack...

CVE-2026-34230 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack...

GHSA-H2JQ-G4CQ-5PPQ vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.2-rack, ruby3.3-rack, ruby3.4-rack...

CVE-2026-21713 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-CFR8-F5Q7-84WQ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-6R7G-3MM3-FHW7 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-5732 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

php: heap-based buffer overflow in array_merge()

A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...

bind: SIG(0) validation during query flood may lead to undefined behavior

A flaw was found in BIND. A remote attacker could exploit a race condition during SIG0 signature validation of an incoming DNS message. If the "recursive-clients" limit is reached and the message is discarded, a use-after-free vulnerability may occur. This could lead to undefined behavior and...