GHSA-PHWV-C562-GVMH vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-27901 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-F7GR-6P89-R883 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-22RM-WP4X-V5CX vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2026-4636 vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak...

CVE-2026-34976 vulnerabilities

Vulnerabilities for packages: dgraph...

CVE-2026-34976 vulnerabilities

Vulnerabilities for packages: dgraph...

CVE-2026-4224 vulnerabilities

Vulnerabilities for packages: python...

GHSA-H46W-FFVP-4PW5 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-3644 vulnerabilities

Vulnerabilities for packages: python...

GHSA-VF33-88PF-HWP3 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-2625

A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager RPM file. During the RPM signature verification process, this crafted file can trigger an error in the OpenPGP signature parsing code, leading to an...

CVE-2026-23444

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: always free skb on ieee80211txprepareskb failure ieee80211txprepareskb has three error paths, but only two of them free the skb. The first error path ieee80211txprepare returning TXDROP does not free it, while...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, jitsucom-jitsu, semaphore, gitlab-rails-ce-fips, sqlpad, langfuse, kubeflow-centraldashboard, tensorflow-gpu-jupyter, kubeflow-katib, jupyter-base-notebook, redisinsight, json-server, npm, prism, vitess, py3-jupyterlab,...

GHSA-M5WQ-R4R4-4QRH vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, argo-workflows, vitess, prism, json-server, jitsucom-jitsu, code-server, langfuse, npm, opensearch-dashboards, saf, jupyter-base-notebook, sqlpad, kubeflow-katib, renovate, ts-patch, kubeflow-centraldashboard, kubeflow-pipelines...

GHSA-M5WQ-R4R4-4QRH vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-34835

Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, including /, ?, , and @. Because req.hos...

CVE-2026-34763

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Directory interpolates the configured root path directly into a regular expression when deriving the displayed directory path. If root contains regex metacharacters such as +, , or ., the prefix...

CVE-2026-34831

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Filesfail sets the Content-Length response header using Stringsize instead of Stringbytesize. When the response body contains multibyte UTF-8 characters, the declared Content-Length is smaller than the...