ROS-20260129-73-0067

Vulnerability in curl related to incorrect certificate authentication. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

ROS-20260129-73-0062

A vulnerability in the ssh-agent library ssh-agent server for the Go crypto programming language involves reading beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2025-61728

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...

CVE-2025-68119

Downloading and building modules with malicious version strings can cause local code execution. On systems with Mercurial hg installed, downloading modules from non-standard sources e.g., custom domains can cause unexpected code execution due to how external VCS commands are constructed. This iss...

GHSA-78QR-24V5-7Q73 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-Q2GP-8VQW-V8H2 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-V7Q8-5286-XFVF vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-58CH-J8RC-9WFQ vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2025-9222 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-X8PR-QX2M-CR7G vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-39M5-RG2V-54H9 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2025-5069 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips, gitlab-rails-ce...

firefox: thunderbird: Use-after-free in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine component...

firefox: thunderbird: Use-after-free in the IPC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the IPC component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics component...

GHSA-J58C-WW9W-PWP5 vulnerabilities

Vulnerabilities for packages: solr...

CVE-2025-53015 vulnerabilities

Vulnerabilities for packages: imagemagick...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

firefox: thunderbird: Use-after-free in the IPC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the IPC component...