10213 matches found
GHSA-F26W-GH5M-QQ77 vulnerabilities
Vulnerabilities for packages: k3s...
GHSA-VGQ5-3255-V292 vulnerabilities
Vulnerabilities for packages: logstash, strimzi-kafka-operator, apicurio-registry, zipkin, apache-nifi, thingsboard, opensearch, wildfly, druid...
GHSA-2X5J-VHC8-9CWM vulnerabilities
Vulnerabilities for packages: crossplane-provider-gcp, crossplane-provider-aws, hydra-fips, kyverno-notation-aws, crossplane-provider-azure-authorization, crossplane-provider-azure-storage, argo-cd-fips, rclone-fips, crossplane-provider-family-aws, crossplane-provider-aws-kms,...
CVE-2025-5986
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data e.g. using /dev/urandom on Linux or to...
CVE-2025-5991
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a POST request and the simultaneous...
CVE-2025-5991
There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/2 handling, HTTP handling is not affected by this at all. This happens due to a race condition between how QHttp2Stream uploads the body of a POST request and the simultaneous...
[SECURITY] Fedora 42 Update: qt6-qttranslations-6.9.1-1.fc42
Qt6 - QtTranslations module...
[SECURITY] Fedora 42 Update: qt6-qtquick3dphysics-6.9.1-1.fc42
The Qt 6 Quick3D Physics library...
[SECURITY] Fedora 42 Update: qt6-qtdeclarative-6.9.1-1.fc42
Qt6 - QtDeclarative component...
CVE-2025-49091
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...
CVE-2025-49133
Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bounds OOB read vulnerability. The...
CVE-2024-47081 vulnerabilities
Vulnerabilities for packages: mlflow, emissary, jwt-tool, kubeflow-pipelines-visualization-server, jupyter-base-notebook, dask-gateway, py3-pipenv, k8s-sidecar, airflow, kubeflow-katib, jupyter-docker-stacks, py3-requests, pypy-3.10, reflex, az, pypy-3.11, superset, ggshield,...
GHSA-9HJG-9R4M-MVJ7 vulnerabilities
Vulnerabilities for packages: mlflow, emissary, jwt-tool, kubeflow-pipelines-visualization-server, jupyter-base-notebook, dask-gateway, py3-pipenv, k8s-sidecar, airflow, kubeflow-katib, jupyter-docker-stacks, py3-requests, pypy-3.10, reflex, az, pypy-3.11, superset, ggshield,...
CVE-2025-30167 vulnerabilities
Vulnerabilities for packages: jupyter-docker-stacks, tensorflow-gpu-jupyter, kubeflow-pipelines-visualization-server...
CVE-2025-30165 vulnerabilities
Vulnerabilities for packages: py3.10-vllm-cuda-12.6...
CVE-2025-47950 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs...
GHSA-CVX7-X8PJ-X2GW vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, juicefs...
GHSA-3749-GHW9-M3MG vulnerabilities
Vulnerabilities for packages: py3-torch-cuda-12.4, py3-torch-cuda-12.6...