CVE-2026-6313 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PVXC-VJ6P-FP82 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-5871 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-33116 vulnerabilities

Vulnerabilities for packages: dotnet-sdk, dotnet, dotnet-sdk-stage0, promitor, powershell, dotnet-bootstrap...

GHSA-W3X6-4M5H-CXQF vulnerabilities

Vulnerabilities for packages: dotnet-sdk, dotnet, dotnet-sdk-stage0, promitor, powershell, dotnet-bootstrap...

GHSA-G4VJ-CJJJ-V7HG vulnerabilities

Vulnerabilities for packages: dotnet, azure-functions-host, dotnet-bootstrap, dotnet-sdk, dotnet-sdk-stage0...

CVE-2026-33116 vulnerabilities

Vulnerabilities for packages: dotnet, powershell, dotnet-bootstrap, dotnet-sdk, promitor, dotnet-sdk-stage0...

GHSA-W3X6-4M5H-CXQF vulnerabilities

Vulnerabilities for packages: dotnet, powershell, dotnet-bootstrap, dotnet-sdk, promitor, dotnet-sdk-stage0...

CVE-2026-34479 vulnerabilities

Vulnerabilities for packages: celeborn, akhq, logstash, solr, spark, flink, druid, kafka, sonarqube, kserve-modelmesh...

[SECURITY] Fedora 43 Update: nix-2.31.4-1.fc43

Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis o...

CVE-2026-40190 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, librechat...

CVE-2026-35469

spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...

CVE-2026-41035

In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X aka --xattrs. On Linux, many but not all common configurations are vulnerable. Non-Linux platforms are more widely vulnerable...

CVE-2026-6310

Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-6315

Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-6308

Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-21727

--- title: Cross-Tenant Legacy Correlation Disclosure and Deletion draft: false hero: image: /static/img/heros/hero-legal2.svg content: " Cross-Tenant Legacy Correlation Disclosure and Deletion" date: 2026-01-29 product: Grafana severity: Low cve: CVE-2026-21727 cvssscore: "3.3" cvssvector:...

CVE-2026-6309

Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-6319

Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-6312

Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...