CVE-2023-52971 vulnerabilities

Vulnerabilities for packages: mariadb...

CVE-2023-52970 vulnerabilities

Vulnerabilities for packages: mariadb...

CVE-2025-50181 vulnerabilities

Vulnerabilities for packages: pypy-3.11, mlflow, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines, kserve, dask-gateway, nemo, openstack-kolla-toolbox-2025.1, tensorflow-gpu-jupyter, ggshield, py3-pipenv, datadog-agent-fips, apache-beam-python-3.11-sdk, tensorflow-cpu-jupyter,...

GHSA-48P4-8XCF-VXJ5 vulnerabilities

Vulnerabilities for packages: pypy-3.11, mlflow, py3.9-pip, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines, kserve, dask-gateway, reflex, nemo, tensorflow-gpu-jupyter, ggshield, py3-pipenv, datadog-agent-fips, apache-beam-python-3.11-sdk, tensorflow-cpu-jupyter,...

GHSA-G8XG-6V3J-W97F vulnerabilities

Vulnerabilities for packages: mariadb...

CVE-2025-50182 vulnerabilities

Vulnerabilities for packages: pypy-3.11, mlflow, py3.9-pip, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines, kserve, dask-gateway, reflex, nemo, tensorflow-gpu-jupyter, ggshield, py3-pipenv, datadog-agent-fips, apache-beam-python-3.11-sdk, tensorflow-cpu-jupyter,...

CVE-2023-52969 vulnerabilities

Vulnerabilities for packages: mariadb...

GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: pypy-3.11, mlflow, dask-kubernetes, py3-cassandra-medusa, kubeflow-pipelines, kserve, dask-gateway, nemo, openstack-kolla-toolbox-2025.1, tensorflow-gpu-jupyter, ggshield, py3-pipenv, datadog-agent-fips, apache-beam-python-3.11-sdk, tensorflow-cpu-jupyter,...

CVE-2025-6274

A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...

CVE-2025-6274

A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...

CVE-2025-6271

A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2. This affects the function wavconvert2mono in the library lib/wav.c of the component wav2swf. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been...

CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which...

CVE-2025-6270

A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5FSsectfindnode of the file H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which...

CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

CVE-2025-49763

ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted. Users can use a new setting for the plugin --max-inclusion-depth to limit it. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.5,...

CVE-2025-31698

ACL configured in ipallow.config or remap.config does not use IP addresses that are provided by PROXY protocol. Users can use a new setting proxy.config.acl.subjects to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol. This issue affects...

CVE-2025-4565 vulnerabilities

Vulnerabilities for packages: kserve...

CVE-2025-4565 vulnerabilities

Vulnerabilities for packages: nemo, request-1276, awx, text-generation-inference, ghidra, kserve, spamcheck...

CVE-2022-50025

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmapzalloc must be balanced by a corresponding bitmapfree in the error handling path of afuallocateirqs...