5100 matches found
[SECURITY] Fedora 44 Update: nginx-mod-brotli-1.0.0~rc-13.fc44
NGINX module for Brotli compression...
CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...
GHSA-4J6X-2764-M8GH vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-VX8H-4PRV-G744 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
CVE-2026-59869 vulnerabilities
Vulnerabilities for packages: pulumi, sqlpad, kubeflow-centraldashboard, eslint, ts-patch, vitess, lerna, prism, code-server, opensearch-dashboards...
GHSA-52CP-R559-CP3M vulnerabilities
Vulnerabilities for packages: pulumi, sqlpad, kubeflow-centraldashboard, eslint, ts-patch, vitess, lerna, prism, code-server, opensearch-dashboards...
GHSA-H95V-H523-3MW8 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-64831
FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...
CVE-2026-55717
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...
GHSA-XJ96-63GP-2GMR vulnerabilities
Vulnerabilities for packages: openstack-horizon-2025.2-fips, openstack-horizon-2025.2, mlflow, openstack-horizon-2026.1, label-studio, open-webui, openstack-horizon-2026.1-fips, text-generation-inference, superset, tensorflow-gpu-jupyter...
GHSA-PMV8-RQ9R-6J72 vulnerabilities
Vulnerabilities for packages: semaphore, wazuh-dashboard, kibana, langfuse-fips, librechat, awx, wazuh-dashboard-fips, opensearch-dashboards, redisinsight, kubeflow-centraldashboard, opensearch-dashboards-fips, nextcloud-server, prism, jitsucom-jitsu, lerna, langfuse...
GHSA-HCPX-6FM6-WX23 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, lerna, opensearch-dashboards, prism, jitsucom-jitsu, nextcloud-server, langfuse...
SUSE CVE-2026-16364
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
SUSE CVE-2026-16403
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
SUSE CVE-2026-16410
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
GHSA-WM3W-8RRP-J577 vulnerabilities
Vulnerabilities for packages: privatebin, drupal, nextcloud-server...
GHSA-3JXR-9VMJ-R5CP vulnerabilities
Vulnerabilities for packages: pulumi, renovate, serve, sqlpad, ts-patch, thingsboard, nextcloud-server, lerna, prism, saf, rancher-api-ui, opensearch-dashboards, langfuse...
GHSA-G8R8-53C2-PM3F vulnerabilities
Vulnerabilities for packages: promitor, powershell, dotnet-sdk, dotnet...
CVE-2026-16493
A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...