CVE-2020-12459 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-J454-PVHH-FCMQ vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-qemu-melange, linux-aws...

CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-49468 vulnerabilities

Vulnerabilities for packages: airflow...

SUSE CVE-2026-23879

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...

SUSE CVE-2026-53488

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config LABEL instruction in Dockerfile to a container without validation. This may result in executing an arbitrary command on the host, via ...

SUSE CVE-2026-55206

py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo.read in archiveinfo.py used an On^2 cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted...

SUSE CVE-2026-55774

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:leaseid in one namespace could revoke a lease in another namespace when the foreign leaseid was known, bypassing namespace ACL isolation. The affected lease lookup...

ROS-20260623-73-0024

Vulnerability in Python 3.9 related to the failure to address CRWL sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-49214 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-34XG-WGJX-8XPH vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-6733 vulnerabilities

Vulnerabilities for packages: node-gyp, npm, code-server, saf, vitess, renovate, prism...

CVE-2026-9679 vulnerabilities

Vulnerabilities for packages: node-gyp, npm, code-server, saf, vitess, renovate, prism...

CVE-2026-12151 vulnerabilities

Vulnerabilities for packages: node-gyp, npm, code-server, saf, vitess, renovate, prism...

GHSA-VXPW-J846-P89Q vulnerabilities

Vulnerabilities for packages: node-gyp, npm, code-server, saf, vitess, renovate, prism...

CVE-2026-56410

xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...

CVE-2026-56409

xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-rails, logstash, ruby3.4-rails...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, ruby3.2-rails, ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator, cinc-auditor, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-rails...

SUSE CVE-2026-48930

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...