GHSA-48P4-8XCF-VXJ5 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, dask-kubernetes, tensorflow-cpu-jupyter, kubeflow-katib, reflex, pypy-3.10, py3-pipenv, barman, datadog-agent-fips, nemo, k8s-sidecar, py3-cassandra-medusa, py3.9-pip, kubeflow-jupyter-web-app, py3-pip, tensorflow-gpu-jupyter, ggshield,...

GHSA-G8XG-6V3J-W97F vulnerabilities

Vulnerabilities for packages: mariadb...

CVE-2025-50182 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, dask-kubernetes, tensorflow-cpu-jupyter, kubeflow-katib, reflex, pypy-3.10, py3-pipenv, barman, datadog-agent-fips, nemo, k8s-sidecar, py3-cassandra-medusa, py3.9-pip, kubeflow-jupyter-web-app, py3-pip, tensorflow-gpu-jupyter, ggshield,...

CVE-2023-52969 vulnerabilities

Vulnerabilities for packages: mariadb...

GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, dask-kubernetes, tensorflow-cpu-jupyter, kubeflow-katib, pypy-3.10, openstack-kolla-toolbox-2025.2-fips, request-1276, py3-pipenv, barman, datadog-agent-fips, nemo, ansible-operator, nvidia-nsight-compute-13.3, graalvm, k8s-sidecar,...

CVE-2025-6274

A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...

CVE-2025-6274

A vulnerability was found in WebAssembly wabt up to 1.0.37. It has been classified as problematic. Affected is the function OnDataCount of the file src/interp/binary-reader-interp.cc. The manipulation leads to resource consumption. Attacking locally is a requirement. The exploit has been disclose...

CVE-2025-6271

A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2. This affects the function wavconvert2mono in the library lib/wav.c of the component wav2swf. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been...

CVE-2025-6270

A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5FSsectfindnode of the file H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which...

CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which...

CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

CVE-2025-49763

ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted. Users can use a new setting for the plugin --max-inclusion-depth to limit it. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.5,...

CVE-2025-31698

ACL configured in ipallow.config or remap.config does not use IP addresses that are provided by PROXY protocol. Users can use a new setting proxy.config.acl.subjects to choose which IP addresses to use for the ACL if Apache Traffic Server is configured to accept PROXY protocol. This issue affects...

CVE-2025-4565 vulnerabilities

Vulnerabilities for packages: kserve...

CVE-2025-4565 vulnerabilities

Vulnerabilities for packages: spamcheck, kserve, request-1276, text-generation-inference, ghidra, awx, nemo...

CVE-2022-50093

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: avoid invalid memory access via nodeonlineNUMANONODE KASAN reports: 4.668325 T0 BUG: KASAN: wild-memory-access in dmarparseonerhsa arch/x86/include/asm/bitops.h:214 arch/x86/include/asm/bitops.h:226...

CVE-2022-50164

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double listadd at iwlmvmmacwaketxqueue After successfull station association, if station queues are disabled for some reason, the related lists are not emptied. So if some new element is added to the list ...

CVE-2022-50068

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix dummy res NULL ptr deref bug Check the bo-resource value before accessing the resource memtype. v2: Fix commit description unwrapped warning 40.191227 T184 general protection fault, probably for non-canonical address...

CVE-2022-50059

In the Linux kernel, the following vulnerability has been resolved: ceph: don't leak snaprwsem in handlecapgrant When handlecapgrant is called on an IMPORT op, then the snaprwsem is held and the function is expected to release it before returning. It currently fails to do that in all cases which...