CVE-2026-25952

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfSetWindowMinMaxInfo dereferences a freed xfAppWindow pointer because xfrailgetwindow in xfrailserverminmaxinfo returns an unprotected pointer from the railWindows hash table, and the main thread can...

CVE-2026-27204 vulnerabilities

Vulnerabilities for packages: wasmcloud, yara-x, zellij, zed, wizer...

GHSA-243V-98VX-264H vulnerabilities

Vulnerabilities for packages: wasmcloud, yara-x, zellij, zed, wizer...

CVE-2026-1456 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-CF2V-M456-7QJF vulnerabilities

Vulnerabilities for packages: gitlab-runner...

firefox: thunderbird: Use-after-free in the Graphics: ImageLib component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: ImageLib component...

CVE-2026-21720 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-21722 vulnerabilities

Vulnerabilities for packages: grafana...

GHSA-67PG-WM7F-Q7FJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-2473 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-22802

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

GHSA-7P94-766C-HGJP vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, py3-nltk...

GHSA-GQ3J-XVXP-8HRF vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-2447 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-27588

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP host request matcher is documented as case-insensitive, but when configured with a large host list 100 entries it becomes case-sensitive due to an optimized matching path. An attacker can bypass...

CVE-2026-27587

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP path request matcher is intended to be case-insensitive, but when the match pattern contains percent-escape sequences %xx it compares against the request's escaped path without lowercasing. An...

CVE-2025-68154 vulnerabilities

Vulnerabilities for packages: kibana, gemini-cli...

GHSA-WPHJ-FX3Q-84CH vulnerabilities

Vulnerabilities for packages: kibana, gemini-cli...

CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22

CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22. A patched version of the package is available...

GHSA-QVHC-9V3J-5RFW vulnerabilities

Vulnerabilities for packages: dotnet...