GHSA-H5PR-3M5W-7GM8 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-13639 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6PGW-376W-JRXX vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-64715 vulnerabilities

Vulnerabilities for packages: hubble-ui, hubble-ui-backend-fips...

CVE-2025-13635 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-13636 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-13638 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6JXR-VC7P-9HQV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X93G-7WJC-5JQW vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-64715 vulnerabilities

Vulnerabilities for packages: hubble-ui...

GHSA-QPXX-2FWX-F5QJ vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2025-66628

ImageMagick is a software suite to create, edit, compose, or convert bitmap images. In versions 7.1.2-9 and prior, the TIM PSX TIM image parser contains a critical integer overflow vulnerability in its ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file...

CVE-2025-12084 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-12084 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-14087

A flaw was found in GLib Gnome Lib. This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: policy-controller, ratify, tekton-chains, flux-source-controller, witness, spire-server, aactl, goreleaser, kyverno-notation-aws, gitsign, zot, zarf, kubescape, ko, tflint, teleport, docker-cli-buildx, cosign, tkn, vexctl, neuvector-sigstore-interface, falcoctl, gh,...

CVE-2025-66564 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface-fips, ratify-fips, teleport-operator-fips, tkn-fips, cloudbeat, crossplane, kyverno-notation-aws, sigstore-scaffolding-fips, tflint-fips, policy-controller, goreleaser, image-factory, skaffold-fips, spire-server-fips, ko,...

CVE-2022-50667

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix memory leak in vmwmksstataddioctl If the copy of the description string from userspace fails, then the page for the instance descriptor doesn't get freed before returning -EFAULT, which leads to a memleak...

CVE-2022-50661

In the Linux kernel, the following vulnerability has been resolved: seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing struct seccompfilter and some objects included in it. We can reproduce...

CVE-2024-38798

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact Confidentiality...