CVE-2026-46325

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGESIZE The current implementation incorrectly handles memory regions MRs with page sizes different from the system PAGESIZE. The core issue is that rxesetpage is called...

GHSA-J86X-FWP2-QH7V vulnerabilities

Vulnerabilities for packages: airflow, airflow-core...

CVE-2026-41843

Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48...

Linux Distros Unpatched Vulnerability : CVE-2026-11633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral...

CVE-2026-45490

Improper authorization in .NET allows an authorized attacker to elevate privileges locally...

GHSA-5XRQ-8626-4RWP vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-42342 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-40181 vulnerabilities

Vulnerabilities for packages: vitess, keycloak...

GHSA-49RJ-9FVP-4H2H vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-46282

In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When devicepropertyreadstring fails, str is left uninitialized but the code falls through to strcmpstr, ..., dereferencing a garbage pointer. Replace manual read/strcm...

CVE-2026-7598 vulnerabilities

Vulnerabilities for packages: libssh2...

CVE-2026-47895

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed...

CVE-2026-8376 vulnerabilities

Vulnerabilities for packages: perl...

GHSA-MPXQ-89H3-QC47 vulnerabilities

Vulnerabilities for packages: perl...

CVE-2026-11099

security update...

brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

A flaw was found in the brace-expansion library. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a large numeric range for expansion. The library allocates excessive memory to generate all intermediate elements before applying the maximum limit, leading to high...

SUSE CVE-2026-22017

unknown...

SUSE CVE-2026-34278

unknown...

SUSE CVE-2026-34304

unknown...

CVE-2026-10725

Protocol::HTTP2 versions before 1.13 for Perl is vulnerable to a HTTP/2 Bomb. Protocol::HTTP2's inbound HPACK path has no header-list size limit, so a small HTTP/2 request can expand into large server memory the "HTTP/2 bomb". The headersdecode method materialises a full key+value copy per indexe...