GHSA-XJ96-63GP-2GMR vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.2, openstack-horizon-2025.2-fips, tritonserver-backend-vllm-cuda-13.0, openstack-horizon-2026.1, label-studio, openstack-horizon-2026.1-fips, superset, open-webui, lmcache-cuda-12.8, superset-fips, text-generation-inference,...

GHSA-PMV8-RQ9R-6J72 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, wazuh-dashboard, nextcloud-server, jitsucom-jitsu, langfuse-fips, awx, lerna, prism, wazuh-dashboard-fips, semaphore, librechat, gitlab-rails-ce-fips, langfuse, opensearch-dashboards-fips, redisinsight, kubeflow-centraldashboard, azurite,...

GHSA-HCPX-6FM6-WX23 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, prism, langfuse, jitsucom-jitsu, nextcloud-server, lerna, opensearch-dashboards...

[SECURITY] Fedora 43 Update: rust-fern-0.7.1-6.fc43

Simple, efficient logging...

SUSE CVE-2026-16364

Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

SUSE CVE-2026-16403

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

SUSE CVE-2026-16410

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: nextcloud-server, privatebin, drupal...

GHSA-3JXR-9VMJ-R5CP vulnerabilities

Vulnerabilities for packages: sqlpad, rancher-api-ui, ts-patch, jupyter-base-notebook, prism, saf, pulumi, argo-workflows, renovate, kubeflow-katib, langfuse, serve, nextcloud-server, thingsboard, lerna, opensearch-dashboards...

GHSA-G8R8-53C2-PM3F vulnerabilities

Vulnerabilities for packages: dotnet-sdk, dotnet-bootstrap, powershell, dotnet, promitor...

CVE-2026-16493

A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...

GHSA-HVRP-RF83-W775 vulnerabilities

Vulnerabilities for packages: semgrep, litellm...

GHSA-VJ7Q-GJH5-988W vulnerabilities

Vulnerabilities for packages: semgrep, tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, litellm...

CVE-2026-16355

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16409

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16392

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16357

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Updated haveged package fixes a security vulnerability

The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...