CVE-2026-46521

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

CVE-2026-46557

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-23, due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument. This issue has been patched in version 7.1.2-23...

CVE-2026-42563

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, Dulwich's ProcessMergeDriver substitutes the file path from the git tree, controllable by an attacker via a malicious branch into the merge driver command via the ...

CVE-2026-45358

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder. This issue has been patched in versions 6.9.13-47...

CVE-2026-45664

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

CVE-2026-47166

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process. This issue has been patched in versio...

CVE-2026-47165

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, the distributed pixel cache was originally designed to operate without a challenge–response authentication model. This has been changed in versions 6.9.13-48 an...

CVE-2026-48855

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix. An...

GHSA-9V76-4QCC-FRGH vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-11645 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X2HH-W9MW-3VQ2 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-46644 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-2XF4-CG6J-VHGQ vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-42764

Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer dereference typically causes abnormal termination of the affected QUIC server process and a Denial ...

CVE-2026-34181

Issue Summary: The PKCS12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 PBMAC1 integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user can cause a service...

CVE-2026-7383

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

GHSA-HV4R-MVR4-25VW vulnerabilities

Vulnerabilities for packages: minio...

GHSA-H749-FXX7-PWPG vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-45674 vulnerabilities

Vulnerabilities for packages: akhq, apache-nifi, flyway, infinispan, sonarqube, opensearch, selenium, management-api-for-apache-cassandra-5.0, tez, spark, druid, thingsboard, apicurio-registry, zipkin, celeborn, strimzi-kafka-operator, wildfly, trino, apache-pulsar, keycloak...

CVE-2026-47244 vulnerabilities

Vulnerabilities for packages: keycloak-fips, strimzi-kafka-operator, kafbat-ui, airbyte-server-fips, apache-pulsar-fips, airbyte-server, opensearch, docker-selenium, flyway, spark, pinot-fips, wavefront-proxy, request-9047-keycloak-fips, knative-kafka-broker, apache-pulsar, kafbat-ui-fips,...