5126 matches found
CVE-2026-40200
An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms o...
CVE-2026-40227
In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element...
GHSA-3P68-RC4W-QGX5 vulnerabilities
Vulnerabilities for packages: lerna, saf, langfuse, opensearch-dashboards, prism, nextcloud-server, kubeflow-pipelines, kubeflow-katib, jitsucom-jitsu, kubeflow-centraldashboard...
golang: cmd/compile: no-op interface conversion bypasses overlap checking
A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data...
GHSA-3P68-RC4W-QGX5 vulnerabilities
Vulnerabilities for packages: saf, redisinsight, nextcloud-server, kubeflow-pipelines, librechat, langfuse-fips, jitsucom-jitsu, kibana, opensearch-dashboards-fips, kubeflow-centraldashboard, kubeflow-katib, gitlab-rails-ce-fips, prism, lerna, wazuh-dashboard, opensearch-dashboards,...
CVE-2026-5500
wolfSSL's wcPKCS7DecodeAuthEnvelopedData does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check. A man-in-the-middle can therefore truncate the mac field from 16 bytes to 1 byte, reducing the tag check from 2⁻¹²⁸ to 2⁻⁸...
GHSA-3MWP-WVH9-7528 vulnerabilities
Vulnerabilities for packages: vllm-openai-cuda-12.9, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-13.0...
GHSA-43RW-359F-4H89 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-39859 vulnerabilities
Vulnerabilities for packages: kibana...
GHSA-MJMQ-GWGM-5QHM vulnerabilities
Vulnerabilities for packages: hadoop-fips...
GHSA-JR6H-R7VG-F9MC vulnerabilities
Vulnerabilities for packages: druid...
GHSA-5MF9-H53Q-7MHQ vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...
CVE-2026-33034 vulnerabilities
Vulnerabilities for packages: authentik, authentik-fips, awx, label-studio...
ROS-20260410-73-0009
Vulnerability in libssh related to incorrect external control of file name or path. Exploitation of the vulnerability could allow an attacker to escalate privileges...
ROS-20260410-73-0016
Vulnerability in curl related to authentication bypass due to an initial bug. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...
ROS-20260410-73-0017
Vulnerability in expat related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260410-73-0004
A vulnerability in the Node.js software platform involves an incorrect restriction of the path name of a restricted directory. Exploitation of the vulnerability could allow an attacker to compromise the system...
SUSE CVE-2026-5918
Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
