10127 matches found
CVE-2026-33481 vulnerabilities
Vulnerabilities for packages: wolfictl, kubescape, zarf, k9s, kubescape-operator, xeol, guac...
GHSA-QPXP-75PX-XJCP vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
cpython: POP3 command injection in user-controlled commands
A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...
CVE-2026-33349 vulnerabilities
Vulnerabilities for packages: tileserver-gl, prism, saf, kubeflow-pipelines, langfuse, renovate...
CVE-2026-27980 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: caddy...
CVE-2026-33155 vulnerabilities
Vulnerabilities for packages: dbt-core, dbt-bigquery, dbt-snowflake, localstack...
CVE-2026-33154 vulnerabilities
Vulnerabilities for packages: awx...
GHSA-PCGW-QCV5-H8CH vulnerabilities
Vulnerabilities for packages: neuvector-fips, neuvector, teleport, teleport-operator-fips...
GHSA-86JH-GRMM-2V3H vulnerabilities
Vulnerabilities for packages: python...
GHSA-86JH-GRMM-2V3H vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-32953
Tillitis TKey Client package is a Go package for a TKey client. Versions 1.2.0 and below contain a critical bug in the tkeyclient Go module which causes 1 out of every 256 User Supplied Secrets USS to be silently ignored, producing the same Compound Device Identifier CDI—and thus the same key...
GHSA-6GX3-4362-RF54 vulnerabilities
Vulnerabilities for packages: pixi, uv, wasmcloud...
GHSA-WFV2-PWC8-CRG5 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-30951 vulnerabilities
Vulnerabilities for packages: sqlpad...
SUSE CVE-2026-32829
lz4flex is a pure Rust implementation of LZ4 compression/decompression. In versions 0.11.5 and below, and 0.12.0, decompressing invalid LZ4 data can leak sensitive information from uninitialized memory or from previous decompression operations. The library fails to properly validate offset values...
ROS-20260320-73-0014
Vulnerability in glpi related to a flaw in the deserialization mechanism. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
CVE-2026-2369
A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...