5129 matches found
GHSA-P77J-4MVH-X3M3 vulnerabilities
Vulnerabilities for packages: spqr, k8ssandra-operator, opentelemetry-operator, cluster-api-azure-controller, ipfs-cluster, etcd, terraform-provider-time, kubeflow-katib, rancher-system-agent, secrets-store-csi-driver-provider-gcp, fluent-bit-plugin-loki, gitsign, scorecard, gatus, terraform,...
GHSA-XH32-C9WX-PHRP vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips...
GHSA-4992-7RV2-5PVQ vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, renovate, langfuse, code-server, pelias-api, gemini-cli, librechat, kibana...
GHSA-Q5QW-H33P-QVWR vulnerabilities
Vulnerabilities for packages: librechat, kibana, opensearch-dashboards-fips, opensearch-dashboards...
SUSE CVE-2026-27459
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to setcookiegeneratecallback returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0....
ROS-20260319-73-0031
Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20260319-73-0007
Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20260319-73-0034
Vulnerability in beats related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...
CVE-2026-31969
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the BYTEARRAYSTOP method, an out-by-one error in the...
CVE-2026-29777 vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2026-23246
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...
CVE-2026-23244
In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...
GHSA-JR27-M4P2-RC6R vulnerabilities
Vulnerabilities for packages: gitlab-cng-fips, spamcheck, k8s-sidecar, vllm-openai-cuda-12.9, localstack, label-studio, kubeflow-jupyter-web-app, kubeflow-pipelines, superset, pgadmin4, litellm, kubeflow-volumes-web-app, metaflow-service-fips, pgadmin4-fips, ansible-operator-fips, authentik-fips,...
GHSA-QJXF-F2MG-C6MC vulnerabilities
Vulnerabilities for packages: dask-kubernetes, airflow, kubeflow-pipelines-visualization-server, mitmproxy...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
CVE-2026-4271
A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can exploit this by sending specially crafted HTTP/2 requests that cause authentication failures. This can lead to the...