CVE-2026-25674 vulnerabilities

Vulnerabilities for packages: label-studio, authentik-fips, awx...

CVE-2026-29063 vulnerabilities

Vulnerabilities for packages: rancher-api-ui, authentik-fips, gitlab-rails-ce, authentik, gitlab-rails-ce-fips, vitess, kubeflow-katib, argo-workflows...

CVE-2025-66566 vulnerabilities

Vulnerabilities for packages: kafka, debezium-connector-vitess, spark, strimzi-kafka-operator, debezium-connector-informix, sonarqube, debezium-connector-db2, debezium-connector-ibmi, debezium, cassandra, zipkin, debezium-connector-spanner...

CVE-2026-29068

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17...

GHSA-M2CM-222F-QW44 vulnerabilities

Vulnerabilities for packages: debezium...

CVE-2026-28804 vulnerabilities

Vulnerabilities for packages: litellm...

GHSA-QPX9-HPMF-5GMW vulnerabilities

Vulnerabilities for packages: vitess, prism, kubeflow-katib, renovate, kubeflow-centraldashboard...

CVE-2026-23238

In the Linux kernel, the following vulnerability has been resolved: romfs: check sbsetblocksize return value romfsfillsuper ignores the return value of sbsetblocksize, which can fail if the requested block size is incompatible with the block device's configuration. This can be triggered by settin...

CVE-2026-23233

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid mapping wrong physical block for swapfile Xiaolong Guo reported a f2fs bug in bugzilla 1 1 https://bugzilla.kernel.org/showbug.cgi?id=220951 Quoted: "When using stress-ng's swap stress test on F2FS filesystem...

CVE-2026-2913 vulnerabilities

Vulnerabilities for packages: libvips...

GHSA-55XF-4PMG-V3XM vulnerabilities

Vulnerabilities for packages: libvips...

GHSA-V5RP-3MCX-FR73 vulnerabilities

Vulnerabilities for packages: libvips...

CVE-2026-20777

A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch db9a9a63. A specially crafted .wft file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

GHSA-QW3H-8VXV-JF6C vulnerabilities

Vulnerabilities for packages: postgresql...

GHSA-F3VJ-J2M6-8HFJ vulnerabilities

Vulnerabilities for packages: postgresql...

GHSA-2RW7-X74F-JG35 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-3195

A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730...

CVE-2026-3196

An integer overflow vulnerability was found in the virtio-snd device via PCMINFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition...

GHSA-MW96-CPMX-2VGC vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, librechat, vitess, nextcloud-server, vite...

CVE-2026-3408

A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available...