CVE-2026-6919 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6921 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6919 vulnerabilities

Vulnerabilities for packages: chromium...

gdb: Fix of CVE-2019-1010180

CVE-2019-1010180: add warning for corrupt ELF section size larger than file...

GHSA-FH64-R2VC-XVHR vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2026-6752 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-H3RR-2Q6V-G8RC vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-6764 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-5MFF-CXQ5-82JV vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-6757 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-6759 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

CVE-2026-42198

pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication. A malicious server can instruct the driver to perform SCRAM authentication with a very large iteration count...

CVE-2026-40194 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-MJW2-V2HM-WJ34 vulnerabilities

Vulnerabilities for packages: dagster, dagster-fips...

SUSE CVE-2026-35329

unknown...

GHSA-CMXV-58FP-FM3G vulnerabilities

Vulnerabilities for packages: druid, apache-pulsar, tez...

GHSA-X2QX-6953-8485 vulnerabilities

Vulnerabilities for packages: mlflow-fips, checkov, mlflow, datahub-ingestion-fips, open-webui, opal, awx...

GHSA-28JG-CGG7-J4WC vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, apache-nifi, debezium, debezium-connector-spanner, debezium-connector-ibmi...

CVE-2026-31676

In the Linux kernel, the following vulnerability has been resolved: rxrpc: only handle RESPONSE during service challenge Only process RESPONSE packets while the service connection is still in RXRPCCONNSERVICECHALLENGING. Check that state under statelock before running response verification and...