GHSA-FGPP-Q3PX-3XHC vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-34183 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-42768 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-34180 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-45447 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2024-4741 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

CVE-2026-45446 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-42767 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-48998

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Versions prior to 2.10.2 contain improper Host header validation when parsing raw HTTP request messages and when deriving a server request URI from server variables. An attacker can provide a malformed Host header containing U...

GHSA-WWX6-X28X-8259 vulnerabilities

Vulnerabilities for packages: yazi...

GHSA-C2RX-5R8W-8XR2 vulnerabilities

Vulnerabilities for packages: trino, spark, opensearch...

CVE-2026-46705 vulnerabilities

Vulnerabilities for packages: yazi...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-fluentd-operator, ruby3.3-rails, kube-logging-operator, jruby...

CVE-2026-45033 vulnerabilities

Vulnerabilities for packages: rstudio...

GHSA-WWX6-X28X-8259 vulnerabilities

Vulnerabilities for packages: yazi...

GHSA-9CCR-R5HG-74GF vulnerabilities

Vulnerabilities for packages: rstudio...

CVE-2026-45033 vulnerabilities

Vulnerabilities for packages: rstudio...

CVE-2026-9277 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, code-server, langfuse, arangodb, gitlab-rails-ce, gemini-cli, tileserver-gl-fips, tileserver-gl, py3-captum, argo-workflows...

CVE-2026-42563

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, Dulwich's ProcessMergeDriver substitutes the file path from the git tree, controllable by an attacker via a malicious branch into the merge driver command via the ...