CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21

CVE-2026-2303 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...

CVE-2025-58190 affecting package multus for versions less than 4.0.2-10

CVE-2025-58190 affecting package multus for versions less than 4.0.2-10. A patched version of the package is available...

CVE-2025-39760 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39760 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39683 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39683 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38441 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38441 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39853 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39853 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

GHSA-C87W-642H-M97H vulnerabilities

Vulnerabilities for packages: druid, trino...

firefox: thunderbird: Integer overflow in the JavaScript: Standard Library component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: Standard Library component...

firefox: thunderbird: Incorrect boundary conditions in the Web Audio component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Web Audio component...

firefox: thunderbird: Use-after-free in the DOM: Window and Location component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Window and Location component...

firefox: thunderbird: Undefined behavior in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the DOM: Core & HTML component...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume th...

firefox: thunderbird: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component...

firefox: thunderbird: Sandbox escape in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Graphics: WebRender component...

CVE-2026-27139 FileInfo can escape from a Root in os

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

GO-2026-4602 FileInfo can escape from a Root in os

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: vitess, flux-notification-controller, dagdotdev, openbao, manifest-tool, paranoia, k9s, trivy-operator, tekton-chains, scorecard, istio, trufflehog, flux, lazydocker, vcluster, argo-workflows, vexctl, harbor, flux-kustomize-controller, bento, slsa-verifier, trivy,...

GHSA-VQF4-7M7X-WGFC vulnerabilities

Vulnerabilities for packages: cassandra, debezium-connector-informix, debezium-connector-ibmi, debezium-connector-spanner, debezium-connector-db2, spark, strimzi-kafka-operator, debezium, debezium-connector-vitess, kafka, zipkin...