GHSA-R92C-9C7F-3PJ8 vulnerabilities

Vulnerabilities for packages: opentofu...

GHSA-39H3-G67R-7G3C vulnerabilities

Vulnerabilities for packages: imagemagick...

GHSA-J3V4-V6H2-F4PP vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-WP53-J4WJ-2CFG vulnerabilities

Vulnerabilities for packages: semgrep, reflex, airflow, open-webui...

CVE-2024-22019 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-GGXC-26FX-987R vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-27983 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-22025 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2023-39333 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-52XJ-VX8W-46QJ vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-66021 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-24116 vulnerabilities

Vulnerabilities for packages: wizer, wasmcloud, zed, yara-x, zellij...

GHSA-XP28-3FV9-33C6 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-27982 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-59466 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-22019 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-52XJ-VX8W-46QJ vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-1484

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

CVE-2026-1467

A flaw was found in libsoup, an HTTP client library. This vulnerability, known as CRLF Carriage Return Line Feed Injection, occurs when an HTTP proxy is configured and the library improperly handles URL-decoded input used to create the Host header. A remote attacker can exploit this by providing ...

CVE-2026-24131

A flaw was found in pnpm, a package manager. When pnpm processes the directories.bin field of a package, it fails to properly validate the path, allowing a malicious npm package to specify a crafted path. This directory traversal vulnerability enables the package to escape its intended directory...