GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-8CW4-87C7-C6XX vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

GHSA-RGJ7-G3M4-5G8C vulnerabilities

Vulnerabilities for packages: tileserver-gl...

ROS-20260911-73-0209

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to improper authentication procedures. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-88051

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...

CVE-2026-88048

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni and no against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in...

CVE-2026-53024 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-F2M7-5M7M-7G2C vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-8M3C-C648-2XJJ vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips, kibana, langfuse-fips, unleash...

GHSA-M93F-WJ8C-RP8P vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-75596 vulnerabilities

Vulnerabilities for packages: logstash, trino, commercial-elasticsearch, flyway, kayenta, spark-fips, drain-cleaner, apache-hop, cassandra, strimzi-kafka-operator, cruise-control, hadoop-fips, pinot, cassandra-reaper, floci, elasticsearch-fips, zookeeper-fips, flyway-fips, knative-kafka-broker,...

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

Updated wget packages fix a security vulnerability

Denial of Service in GNU wget. CVE-2026-16599...

CVE-2026-87822

t-digest versions 3.1 through 3.3 fail to validate centroid means during deserialization in MergingDigest.fromBytes, allowing attackers to inject NaN values that bypass validation checks. Attackers can craft malicious serialized digests containing NaN centroids that degrade sorting performance fr...

CVE-2026-87795

zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashe...

GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: cosign-fips, crossplane-provider-aws-cur, helm-operator, crossplane-provider-aws-lightsail-fips, flagger, teleport-operator-fips, virt-controller-fips, crossplane-provider-aws-fsx, crossplane-provider-aws-wafv2-fips, etcd-fips, trillian-fips, podman-fips, steampipe,...

CVE-2026-87732

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...

firefox: thunderbird: Site isolation issue in the WebExtensions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the WebExtensions component...

firefox: thunderbird: Privilege escalation in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component...

firefox: thunderbird: Privilege escalation in the Graphics: CanvasWebGL component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Graphics: CanvasWebGL component...