CVE-2026-4716 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-4709 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-XR3F-844G-572F vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-GW7X-G9XX-WMM2 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-CJ36-HXHV-2QXH vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-C97J-HMJ5-572H vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-4712 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-FMR6-7878-WX6P vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-PQ2Q-RCW4-3HR6 vulnerabilities

Vulnerabilities for packages: k3s...

CVE-2026-27889 vulnerabilities

Vulnerabilities for packages: k3s...

CVE-2026-0394

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...

[SECURITY] Fedora 43 Update: rust-asn1-0.22.0-1.fc43

ASN.1 DER parser and writer for Rust...

CVE-2026-0964

A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue...

CVE-2026-22986 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-vmware, linux-aws, linux-gcp, linux-qemu...

GHSA-7M5P-V483-RC7R vulnerabilities

Vulnerabilities for packages: linux-azure, linux-vmware, linux-aws, linux-gcp, linux-qemu...

CVE-2026-33022 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-chains, tkn...

CVE-2026-33231 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, py3-nltk...

CVE-2026-33231 vulnerabilities

Vulnerabilities for packages: open-webui, py3-nltk, apache-beam-python-3.11-sdk, kubeflow-pipelines-visualization-server, apache-beam-python-3.12-sdk, nemo, label-studio, apache-beam-python-3.13-sdk...

GHSA-RF74-V2FM-23PW vulnerabilities

Vulnerabilities for packages: open-webui, py3-nltk, apache-beam-python-3.11-sdk, kubeflow-pipelines-visualization-server, apache-beam-python-3.12-sdk, nemo, label-studio, apache-beam-python-3.13-sdk...

CVE-2014-125112

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when...