SUSE CVE-2026-23879

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...

SUSE CVE-2026-53488

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config LABEL instruction in Dockerfile to a container without validation. This may result in executing an arbitrary command on the host, via ...

SUSE CVE-2026-55206

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo.read in archiveinfo.py used an On^2 cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted...

ROS-20260623-73-0024

Vulnerability in Python 3.9 related to the failure to address CRWL sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-49214 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-34XG-WGJX-8XPH vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: npm, saf, prism, renovate, node-gyp, code-server, vitess...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: npm, saf, prism, renovate, node-gyp, code-server, vitess...

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: npm, saf, prism, renovate, node-gyp, code-server, vitess...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: npm, saf, prism, renovate, node-gyp, code-server, vitess...

CVE-2026-54604

Unknown description...

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, ruby3.4-rails, kube-logging-operator...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator...

SUSE CVE-2026-48930

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

SUSE CVE-2026-48933

A flaw in Node.js WebCrypto implementation can crash the process if the input of subtle.encrypt is a multiple of 2GiB. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

SUSE CVE-2026-54278

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, during cleanup it is possible for a compressed request body to be decompressed into memory in one chunk. An attacker may be able to send a compressed payload in specific situations that could be...

CVE-2026-9697 vulnerabilities

Vulnerabilities for packages: renovate, code-server, vitess, langfuse...

CVE-2026-3196

An integer overflow vulnerability was found in the virtio-snd device via PCMINFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition...