5129 matches found
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...
GHSA-GC25-M8G6-JP4F vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3916 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q3VM-F267-X4QX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-82W6-2JQH-PVW5 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3927 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3924 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QGC5-2PJM-6X2M vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VQFX-QX8M-7H3J vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3913 vulnerabilities
Vulnerabilities for packages: chromium...
[SECURITY] Fedora 44 Update: gstreamer1-rtsp-server-1.28.1-1.fc44
A GStreamer-based RTSP server library...
[SECURITY] Fedora 44 Update: gstreamer1-doc-1.28.1-1.fc44
GStreamer documentation...
ROS-20260313-73-0030
A vulnerability in the toatmarpd function of the Linux kernel is related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
GHSA-56PX-HM34-XQJ5 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines...
CVE-2026-26018 vulnerabilities
Vulnerabilities for packages: eks-distro-fips, eks-distro, kubernetes-dns-node-cache...
CVE-2026-27965 affecting package vitess for versions less than 17.0.7-15
CVE-2026-27965 affecting package vitess for versions less than 17.0.7-15. A patched version of the package is available...
CVE-2025-70873
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...
GHSA-78CV-MQJ4-43F7 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, airflow, kubeflow-pipelines-visualization-server, mitmproxy...
firefox: thunderbird: Incorrect boundary conditions in the Networking: JAR component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Networking: JAR component...