5131 matches found
GHSA-VPFW-47H7-XJ4G vulnerabilities
Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, ruby4.0-rack, ruby3.2-rack, gitlab-rails-ce...
CVE-2026-22703
Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...
GHSA-WP33-7FRP-G7VG vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...
CVE-2017-1000255 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...
GHSA-G7MW-CR59-R458 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...
GHSA-4VRG-GM73-C852 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...
GHSA-F8CM-6447-X5H2 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-G4RV-C45G-4J68 vulnerabilities
Vulnerabilities for packages: drupal...
GHSA-MRFV-M5WM-5W6W vulnerabilities
Vulnerabilities for packages: az, datadog-agent, superset...
GHSA-38JV-5279-WG99 vulnerabilities
Vulnerabilities for packages: py3-pip, ggshield, prefect, localstack, nemo, nvidia-nsight-compute-13.1, graalvm, emissary, kubeflow-katib, k8s-sidecar, openstack-kolla-toolbox-2025.2, mlflow, confluent-docker-utils, py3-pipenv, py3.13-scanner-test-libraries, dask-gateway, datadog-agent,...
mariadb: MariaDB Server Crash
A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via improper handling of join operations in JOIN::fixallsplittingsinplan...
CVE-2026-21895
The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...
GHSA-RHFX-M35P-FF5J vulnerabilities
Vulnerabilities for packages: nushell, litmus, kdash, pixi, ztunnel, atuin, uutils, wasmcloud, yazi, pgcat, vector...
USN-7946-1: GnuPG vulnerability
It was discovered that GnuPG incorrectly handled crafted input. A remote attacker could possibly use this issue to crash the program, or execute arbitrary code...
mariadb: MariaDB Server Crash via Item_direct_view_ref
A flaw was found in MariaDB Server. This vulnerability may allow an attacker to crash the database via Itemdirectviewref::derivedfieldtransformerforwhere...
libpng: LIBPNG heap buffer overflow
A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated...
postgresql: CREATE STATISTICS does not check for schema CREATE privilege
A vulnerability has been identified in PostgreSQL’s CREATE STATISTICS command where the database does not check that the user has the required schema CREATE privilege. A table owner user could create a statistics object in any schema, blocking other users who legitimately hold CREATE STATISTICS...
CVE-2025-69230 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, open-webui, py3-cassandra-medusa, checkov, dask-kubernetes...
