5641 matches found
CVE-2026-31969
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the BYTEARRAYSTOP method, an out-by-one error in the...
CVE-2026-29777 vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...
CVE-2026-23246
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...
CVE-2026-23244
In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...
GHSA-JR27-M4P2-RC6R vulnerabilities
Vulnerabilities for packages: keep, apache-beam-python-3.12-sdk, gitlab-cng-fips, superset, kubeflow-pipelines-visualization-server, awx, datadog-agent, synapse, mlflow, apache-beam-python-3.13-sdk, ansible-operator, kubeflow-volumes-web-app, barman, litellm, pgadmin4, request-1276, authentik-fip...
GHSA-QJXF-F2MG-C6MC vulnerabilities
Vulnerabilities for packages: mitmproxy, airflow, kubeflow-pipelines-visualization-server, dask-kubernetes...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
CVE-2026-4271
A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can exploit this by sending specially crafted HTTP/2 requests that cause authentication failures. This can lead to the...
GHSA-GMQ8-994R-JV83 vulnerabilities
Vulnerabilities for packages: code-server, opensearch-dashboards, renovate...
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...
GHSA-82W6-2JQH-PVW5 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GC25-M8G6-JP4F vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3916 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3924 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q3VM-F267-X4QX vulnerabilities
Vulnerabilities for packages: chromium...