firefox: thunderbird: Incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...

ROS-20260209-73-0021

Vulnerability in nextcloud-app-mail caused by failure to take measures to protect web page structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260209-73-0008

A vulnerability in the bytes.decode function of the Python programming language interpreter CPython is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to affect the availability of protected information...

ROS-20260209-73-0034

A vulnerability in the python-jose library is related to incorrect processing of highly compressed input data. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260209-73-0007

A vulnerability in the bytes.decode function of the Python programming language interpreter CPython is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to affect the availability of protected information...

GHSA-4J3G-RWWQ-4P54 vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2026-25749

Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the gettagfname function in src/tag.c. When processing help file tags,...

GHSA-R6V5-FH4H-64XC vulnerabilities

Vulnerabilities for packages: bat, atuin, xh, eza, typst, berg, fnm, parseable, nushell, py3-xet-core, sqlx, buck2, ztunnel-fips, quiche, starship, topgrade, komodo, pixi, virtiofsd, wasmcloud, mountpoint-s3, zizmor, zola, wadm, yazi, zed, yara-x, geckodriver, lychee, wasm-pack, cargo-c, wash,...

GHSA-6P9P-Q6WH-9J89 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, cg, chainctl, dagdotdev...

CVE-2026-1998

A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mpimportall of the file py/runtime.c. This manipulation causes memory corruption. The attack needs to be launched locally. The exploit has been published and may be used. Patch name:...

CVE-2026-1991

A vulnerability was detected in libuvc up to 0.0.7. Affected is the function uvcscanstreaming of the file src/device.c of the component UVC Descriptor Handler. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be use...

CVE-2026-24827 affecting package lua for versions less than 5.4.4-2

CVE-2026-24827 affecting package lua for versions less than 5.4.4-2. A patched version of the package is available...

CVE-2026-24809 affecting package memcached for versions less than 1.6.22-3

CVE-2026-24809 affecting package memcached for versions less than 1.6.22-3. A patched version of the package is available...

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21941 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21936 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21936 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68468 affecting package avahi for versions less than 0.8-5

CVE-2025-68468 affecting package avahi for versions less than 0.8-5. A patched version of the package is available...

CVE-2025-61099 affecting package frr for versions less than 8.5.5-5

CVE-2025-61099 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

CVE-2025-55131 affecting package nodejs18 for versions less than 18.20.3-11

CVE-2025-55131 affecting package nodejs18 for versions less than 18.20.3-11. A patched version of the package is available...

firefox: thunderbird: Incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...