GHSA-H6C8-CWW8-35HF vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-33729 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips, commercial-grafana...

GHSA-GC5V-M9X4-R6X2 vulnerabilities

Vulnerabilities for packages: py3-pipenv, k8s-sidecar, datadog-agent, kubeflow-katib, py3-cassandra-medusa, checkov, pypy-3.10, ggshield, jupyter-base-notebook, az, kubeflow-volumes-web-app, open-webui, semgrep, pypy-3.11, emissary, py3-pip, mlflow, kserve, dask-kubernetes,...

GHSA-G3VH-WFH4-FP76 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...

firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the CSS Parsing and Computation component...

SUSE CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

GHSA-GFWX-W7GR-FVH7 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, nemo, apache-beam-python-3.13-sdk, label-studio, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, open-webui, py3-nltk...

golang security update

1.25.8-1 - Update to Go 1.25.8 fips-1...

GHSA-JXXM-27VP-C3M5 vulnerabilities

Vulnerabilities for packages: telegraf, k3s, nats, kine, nats-top...

GHSA-V722-JCV5-W7MC vulnerabilities

Vulnerabilities for packages: telegraf, k3s, nats, kine, nats-top...

CVE-2026-33218 vulnerabilities

Vulnerabilities for packages: telegraf, k3s, nats, kine, nats-top...

GHSA-FCJP-H8CC-6879 vulnerabilities

Vulnerabilities for packages: telegraf, k3s, nats, kine, nats-top...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: telegraf, k3s, nats, kine, nats-top...

CVE-2025-64324 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64433 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-PWX7-FX9R-HR4H vulnerabilities

Vulnerabilities for packages: kine, nats, k3s, telegraf, prometheus-nats-exporter, nats-top, rke2-runtime, milvus, prometheus-nats-exporter-fips, rke2-runtime-fips, nats-fips, nats-top-fips...

GHSA-JXXM-27VP-C3M5 vulnerabilities

Vulnerabilities for packages: kine, nats, k3s, telegraf, prometheus-nats-exporter, nats-top, rke2-runtime, milvus, prometheus-nats-exporter-fips, rke2-runtime-fips, nats-fips, nats-top-fips...

SUSE CVE-2026-4690

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

SUSE CVE-2026-4751

NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0...

CVE-2026-23389

In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in icesetringparam In icesetringparam, txrings and xdprings are allocated before rxrings. If the allocation of rxrings fails, the code jumps to the done label leaking both txrings and xdprings. Furthermore, i...