GHSA-69CC-CV78-QC8G vulnerabilities

Vulnerabilities for packages: ontop-fips, nacos, ontop, kayenta-fips, nacos-docker, thingsboard, camunda, camunda-zeebe, kayenta...

python: Python base64: Incomplete data decoding due to premature stop at padding

A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...

GHSA-7777-FHQ9-592V vulnerabilities

Vulnerabilities for packages: zitadel...

GHSA-FJRM-76X2-C4Q4 vulnerabilities

Vulnerabilities for packages: authentik-fips, keep-fips, keep, py3-jwcrypto, authentik, awx...

CVE-2026-39373 vulnerabilities

Vulnerabilities for packages: authentik-fips, keep-fips, keep, py3-jwcrypto, authentik, awx...

GHSA-V6X5-CG8R-VV6X vulnerabilities

Vulnerabilities for packages: logstash, kube-fluentd-operator...

GHSA-H2JQ-G4CQ-5PPQ vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, logstash, ruby4.0-rack, kube-fluentd-operator...

CVE-2026-34230 vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, logstash, ruby4.0-rack, kube-fluentd-operator...

GHSA-Q4QF-9J86-F5MH vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, logstash, ruby4.0-rack, kube-fluentd-operator...

CVE-2026-21713 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-CFR8-F5Q7-84WQ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-6R7G-3MM3-FHW7 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-5732 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

php: heap-based buffer overflow in array_merge()

A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...

bind: SIG(0) validation during query flood may lead to undefined behavior

A flaw was found in BIND. A remote attacker could exploit a race condition during SIG0 signature validation of an incoming DNS message. If the "recursive-clients" limit is reached and the message is discarded, a use-after-free vulnerability may occur. This could lead to undefined behavior and...

CVE-2026-40200

An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms o...

CVE-2026-40227

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element...

GHSA-3P68-RC4W-QGX5 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, opensearch-dashboards, kubeflow-pipelines, kubeflow-katib, lerna, jitsucom-jitsu, nextcloud-server, saf, langfuse, prism...

golang: cmd/compile: no-op interface conversion bypasses overlap checking

A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data...

GHSA-3P68-RC4W-QGX5 vulnerabilities

Vulnerabilities for packages: redisinsight, saf, prism, nextcloud-server, langfuse, gitlab-rails-ce-fips, librechat, awx, opensearch-dashboards, opensearch-dashboards-fips, jitsucom-jitsu, kubeflow-katib, lerna, arangodb, wazuh-dashboard, kubeflow-pipelines, kubeflow-centraldashboard, kibana,...