CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: airflow, py3-vllm-cuda-12.4, request-1276, airflow-core, text-generation-inference, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, py3-cassandra-medusa, dask-kubernetes...

GHSA-9548-QRRJ-X5PJ vulnerabilities

Vulnerabilities for packages: airflow, py3-vllm-cuda-12.4, request-1276, airflow-core, text-generation-inference, apache-beam-python-3.11-sdk, py3.13-scanner-test-libraries-aiohttp, py3-cassandra-medusa, dask-kubernetes...

GHSA-25XR-QJ8W-C4VF vulnerabilities

Vulnerabilities for packages: tomcat...

CVE-2025-53816

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

CVE-2025-7339

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead. Users should upgrade to version 1.1.0 to receive a patch. Uses are...

CVE-2025-1713

When setting up interrupt remapping for legacy PCI-X devices, including PCI-X bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock...

CVE-2025-22227 vulnerabilities

Vulnerabilities for packages: apache-nifi, opensearch, druid, thingsboard, flyway...

CVE-2025-40924

Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a usually SHA-1 hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This information is of low entropy. The PID wil...

GHSA-4Q2V-9P7V-3V22 vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, camunda-zeebe, opensearch, conductor, flyway, apache-nifi, druid, elasticsearch, thingsboard, conductor-fips...

CVE-2025-3415

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01,...

CVE-2025-5994

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to...

SUSE CVE-2025-30761

unknown...

SUSE CVE-2025-50059

unknown...

SUSE CVE-2025-53026

unknown...

GHSA-XH69-987W-HRP8 vulnerabilities

Vulnerabilities for packages: jruby, ruby...

CVE-2025-24294 vulnerabilities

Vulnerabilities for packages: jruby, ruby...

CVE-2025-24294 vulnerabilities

Vulnerabilities for packages: jruby, truffleruby, ruby...

CVE-2025-5994

A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet ECS. Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to...

CVE-2025-40777

If a named caching resolver is configured with serve-stale-enable yes, and with stale-answer-client-timeout set to 0 the only allowable value other than disabled, and if the resolver, in the process of resolving a query, encounters a CNAME chain involving a specific combination of cached or...

CVE-2025-30761

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Scripting. Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and 11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows...