10213 matches found
CVE-2026-42284
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, clone validates multioptions as the original list, then executes shlex.split" ".joinmultioptions. A string like "--branch main --config core.hooksPath=/x" passes validation starts with --branch, but aft...
CVE-2026-41647
Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing error handling could lead an authenticated Incus user to cause a daemon crash through the import of a truncated storage bucket backup file. This issue has been patched in version 7.0.0...
CVE-2026-42011
A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities CAs only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate...
GHSA-W239-58X2-Q8P5 vulnerabilities
Vulnerabilities for packages: k3s, ipfs-cluster, spegel...
CVE-2026-42328 vulnerabilities
Vulnerabilities for packages: spegel-fips, ipfs-cluster-fips, rke2-runtime, rke2-runtime-fips, ipfs-cluster, spegel, k3s...
CVE-2026-41647
Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing error handling could lead an authenticated Incus user to cause a daemon crash through the import of a truncated storage bucket backup file. This issue has been patched in version 7.0.0...
GHSA-CM99-M826-VGG7 vulnerabilities
Vulnerabilities for packages: tiff...
CVE-2026-42338 vulnerabilities
Vulnerabilities for packages: prism, tileserver-gl, renovate, langfuse, kubeflow-pipelines, lerna, pulumi, saf, sqlpad, npm, kubeflow-katib, opensearch-dashboards, code-server...
GHSA-FGW5-HP8F-XFHC vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr, istio...
CVE-2026-40195
Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage bucket import logic allows an authenticated user with access to the storage bucket feature to cause the Incus daemon to crash. The vulnerability is present in the backup...
CVE-2026-40197
Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with access to the storage volume feature to cause the Incus daemon to crash. The custom volume backup import subsystem...
CVE-2026-41305 vulnerabilities
Vulnerabilities for packages: langfuse, saf, kubeflow-katib, pelias-api, gitlab-rails-ce, authentik, arangodb, commercial-gitlab-rails-ee-fips, drupal, langfuse-fips, nextcloud-server, homepage, keep, renovate, py3-captum, vitess, vite, keep-fips, authentik-fips, commercial-gitlab-rails-ee,...
GHSA-QX2V-QP2M-JG93 vulnerabilities
Vulnerabilities for packages: langfuse, saf, kubeflow-katib, pelias-api, gitlab-rails-ce, authentik, arangodb, commercial-gitlab-rails-ee-fips, drupal, langfuse-fips, nextcloud-server, homepage, keep, renovate, py3-captum, vitess, vite, keep-fips, authentik-fips, commercial-gitlab-rails-ee,...
CVE-2026-42203 vulnerabilities
Vulnerabilities for packages: litellm, airflow...
GHSA-57J5-QWP2-VQP6 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips, commercial-grafana...
CVE-2026-41131 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips, commercial-grafana...
CVE-2026-7953
Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...
CVE-2026-6691
The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...