GHSA-WC69-RHJR-HC9G vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard...

GHSA-Q66R-H3M9-74HH vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15128 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15127 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15123 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15116 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15118 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15124 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15121 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15107 vulnerabilities

Vulnerabilities for packages: chromium...

os: golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

GHSA-FPG8-7664-JC5Q vulnerabilities

Vulnerabilities for packages: dagdotdev...

GHSA-FXHP-MV3V-67QP vulnerabilities

Vulnerabilities for packages: rancher, argo-cd, oras, gogatekeeper, rancher-fleet, zarf, opa-envoy, helm, rancher-agent, ratify, opa, consul-k8s...

SUSE CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

GHSA-FRRJ-87JH-2772 vulnerabilities

Vulnerabilities for packages: cilium-cli, kube-vip...

CVE-2026-49476 vulnerabilities

Vulnerabilities for packages: datadog-agent, kubeflow-pipelines-visualization-server, open-webui...

GHSA-2WC2-FM75-P42X vulnerabilities

Vulnerabilities for packages: datadog-agent, kubeflow-pipelines-visualization-server, open-webui...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: datadog-agent, kubeflow-pipelines-visualization-server, open-webui...

GHSA-HF52-78X8-6W3W vulnerabilities

Vulnerabilities for packages: apache-tomee, geoserver...

CVE-2026-57156

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 on 32-bit builds, FreeRDP clients contain an integer overflow in updatereaddeltapoints in libfreerdp/core/orders.c when multiplying an attacker-controlled point count by sizeofDELTAPOINT, allowing a malicious RDP pee...