CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-45446 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-42767 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-48998

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 contain improper Host header validation when parsing raw HTTP request messages and when deriving a server request URI from server variables. An attacker can provide a malformed Host header containing U...

GHSA-C2RX-5R8W-8XR2 vulnerabilities

Vulnerabilities for packages: trino, opensearch, spark...

CVE-2026-46705 vulnerabilities

Vulnerabilities for packages: yazi...

GHSA-WWX6-X28X-8259 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-45033 vulnerabilities

Vulnerabilities for packages: rstudio...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, jruby, ruby3.3-rails, kube-fluentd-operator...

GHSA-WWX6-X28X-8259 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-45033 vulnerabilities

Vulnerabilities for packages: rstudio...

GHSA-9CCR-R5HG-74GF vulnerabilities

Vulnerabilities for packages: rstudio...

CVE-2026-9277 vulnerabilities

Vulnerabilities for packages: langfuse, tileserver-gl, gemini-cli, argo-workflows, arangodb, py3-captum, gitlab-rails-ce-fips, gitlab-rails-ce, code-server, tileserver-gl-fips...

CVE-2026-47165

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, the distributed pixel cache was originally designed to operate without a challenge–response authentication model. This has been changed in versions 6.9.13-48 an...

CVE-2026-46521

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

CVE-2026-42563

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, Dulwich's ProcessMergeDriver substitutes the file path from the git tree, controllable by an attacker via a malicious branch into the merge driver command via the ...

CVE-2026-46557

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-23, due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument. This issue has been patched in version 7.1.2-23...

CVE-2026-45664

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

CVE-2026-45358

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder. This issue has been patched in versions 6.9.13-47...

CVE-2026-47166

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process. This issue has been patched in versio...