5641 matches found
CVE-2026-44664 vulnerabilities
Vulnerabilities for packages: renovate...
GHSA-JP94-3292-C3XV vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-42308
Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0...
CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2
CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2026-31694 affecting package kernel for versions less than 6.6.137.1-2
CVE-2026-31694 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17
CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17. A patched version of the package is available...
CVE-2026-4647 affecting package crash for versions less than 9.0.0-2
CVE-2026-4647 affecting package crash for versions less than 9.0.0-2. A patched version of the package is available...
CVE-2026-5107 affecting package frr for versions less than 10.5.0-2
CVE-2026-5107 affecting package frr for versions less than 10.5.0-2. A patched version of the package is available...
CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2
CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2. A patched version of the package is available...
CVE-2026-6861 affecting package emacs for versions less than 29.4-4
CVE-2026-6861 affecting package emacs for versions less than 29.4-4. A patched version of the package is available...
CVE-2026-32288 affecting package gh for versions less than 2.62.0-15
CVE-2026-32288 affecting package gh for versions less than 2.62.0-15. A patched version of the package is available...
CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1
CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2
CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...
CVE-2025-71290 affecting package kernel for versions less than 6.6.137.1-2
CVE-2025-71290 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2026-39817
The "go tool pack" subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem...
CVE-2026-39836 vulnerabilities
Vulnerabilities for packages: nova, authservice, nfpm, conjur-cli, gitaly, opencost, atlantis, sftpgo-plugin-auth, thanos, telegraf, tetragon, cert-manager-csi-driver, addon-resizer, cloud-provider-aws, flyte, dbmate, nri-postgresql, grafana, gatekeeper, contour, minio-object-browser, gatus,...
GHSA-2283-WF8C-RW8R vulnerabilities
Vulnerabilities for packages: authservice, opencost, gitaly, atlantis, sftpgo-plugin-auth, thanos, telegraf, tetragon, cert-manager-csi-driver, flyte, dbmate, grafana, gatekeeper, contour, minio-object-browser, gatus, terraform-provider-acme, litestream, k3s, conftest, vault-secrets-webhook,...
GHSA-3V3M-WC6V-X4X3 vulnerabilities
Vulnerabilities for packages: argocd-image-updater...
GHSA-QF3Q-3H68-MMH2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-datasync-fips, json-exporter-fips, crossplane-provider-aws-servicediscovery, kubernetes-csi-driver-nfs, prometheus-fips, chainloop-control-plane-fips, kubernetes-csi-node-driver-registrar-fips, kubevirt-cdi-controller,...