GHSA-442J-39WM-28R2 vulnerabilities

Vulnerabilities for packages: lerna, prism, py3-jupyterlab, rancher-api-ui, nextcloud-server, opensearch-dashboards, ts-patch...

perl: stack-based crash in S_find_uninit_var()

A stack-based buffer overflow vulnerability was found in the Sfinduninitvar function in sv.c in Perl. This issue may allow an authenticated local attacker to send a specially crafted request to the application, leading to an infinite recursion, exhausting the process' stack space, resulting in a...

CVE-2026-34714

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...

CVE-2026-23409 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23409 affecting package kernel for versions less than 6.6.130.1-1. A patched version of the package is available...

CVE-2025-71233 affecting package kernel for versions less than 6.6.130.1-1

CVE-2025-71233 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23231 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23231 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23381 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23381 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23404 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23404 affecting package kernel for versions less than 6.6.130.1-1. A patched version of the package is available...

CVE-2026-4519 affecting package python3 for versions less than 3.12.9-10

CVE-2026-4519 affecting package python3 for versions less than 3.12.9-10. A patched version of the package is available...

CVE-2026-23236 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23236 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component...

GHSA-2J22-PR5W-6GQ8 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails...

GHSA-W7PP-M8WF-VJ6R vulnerabilities

Vulnerabilities for packages: mitmproxy...

GHSA-P9FM-F462-GGRG vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2026-3945

An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service DoS. The issue occurs because chunk size values are parsed using strtol without properly validating...

CVE-2026-33985

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, pixel data from adjacent heap memory is rendered to screen, potentially leaking sensitive data to the attacker. This issue has been patched in version 3.24.2...

CVE-2018-25224

Removed by vendor...

CVE-2018-25223

Removed by vendor...

CVE-2017-20229

Removed by vendor...

CVE-2017-20225

TiEmu 2.08 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied input. Attackers can trigger the overflow through command-line arguments passed to the application, leveraging ROP...