CVE-2025-12084 affecting package python3 for versions less than 3.12.9-7

CVE-2025-12084 affecting package python3 for versions less than 3.12.9-7. A patched version of the package is available...

CVE-2025-61661 affecting package grub2 for versions less than 2.06-26

CVE-2025-61661 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4. A patched version of the package is available...

CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1. A patched version of the package is available...

CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-2924 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-2924 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

GHSA-4F6G-68PF-7VHV vulnerabilities

Vulnerabilities for packages: open-webui...

wireshark: Access of Uninitialized Pointer in Wireshark

An uninitialized pointer access has been discovered in Wireshark. An attacker who can provide crafted input may be able to leverage this pointer access weakness to crash the application...

ROS-20260112-7309

A vulnerability in the llcpsock.c component of the Linux kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service as well...

GHSA-VPFW-47H7-XJ4G vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.2-rack, ruby3.3-rack, ruby4.0-rack, gitlab-rails-ce...

CVE-2026-22703

Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...

GHSA-WP33-7FRP-G7VG vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...

CVE-2017-1000255 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...

GHSA-G7MW-CR59-R458 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...

GHSA-4VRG-GM73-C852 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...

GHSA-F8CM-6447-X5H2 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-G4RV-C45G-4J68 vulnerabilities

Vulnerabilities for packages: drupal...

GHSA-MRFV-M5WM-5W6W vulnerabilities

Vulnerabilities for packages: airflow, az, datadog-agent...

GHSA-38JV-5279-WG99 vulnerabilities

Vulnerabilities for packages: py3-pip, airflow-core, ansible-operator-fips, ansible-operator, py3-hashin, az, label-studio, graalvm, nvidia-nsight-compute-13.1, openstack-kolla-toolbox-2025.2-fips, jupyter-base-notebook, apache-beam-python-3.11-sdk, openstack-kolla-toolbox-2025.1,...