GHSA-QFFP-2RHF-9H96 vulnerabilities

Vulnerabilities for packages: sqlpad, prism, saf, py3-jupyterlab, node-gyp, kubeflow-katib, pnpm-stage0, lerna, renovate, tileserver-gl, npm, pulumi...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: solr, trino, kafka, zookeeper, strimzi-kafka-operator, confluent-kafka, cloudwatch-exporter, cassandra-reaper, akhq, dependency-track...

GHSA-W36G-F98M-WM99 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-28693

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

CVE-2026-30883

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

CVE-2026-30937

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a 32-bit unsigned integer overflow in the XWD X Windows encoder can cause an undersized heap buffer allocation. When writing a extremely large image an out of...

CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

CVE-2026-28493

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, an integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted image. This vulnerabili...

ROS-20260310-73-0040

A vulnerability in the signature verification functions GOST DSA, EDDSA and ECDSA of the Nettle library is related to flaws in the cryptographic algorithms used. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by entering an invalid signature...

CVE-2026-28689

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write. This...

CVE-2026-28692

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

GHSA-W36G-F98M-WM99 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2025-59059 vulnerabilities

Vulnerabilities for packages: trino, druid...

GHSA-C87W-642H-M97H vulnerabilities

Vulnerabilities for packages: trino, druid...

CVE-2025-38262 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38262 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38699 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38699 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-47911 affecting package cni for versions less than 1.0.1-21

CVE-2025-47911 affecting package cni for versions less than 1.0.1-21. A patched version of the package is available...

CVE-2025-38617 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38617 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-59059 vulnerabilities

Vulnerabilities for packages: druid, trino...

CVE-2026-3706

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...