9841 matches found
CVE-2026-10536
A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this final cleanup phase, libcurl...
SUSE CVE-2026-48758
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.2.1, the preAuthEncoding function in @sigstore/core uses Node.js ascii encoding when converting the PAE string to bytes, allowing payloadType to be mutated after signing without invalidating the signature...
SUSE CVE-2026-48978
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...
SUSE CVE-2026-49835
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency and request count metric vectors before routing, allowing an...
CVE-2026-49838
Unknown description...
CVE-2026-12932
metadata buffer leak...
CVE-2025-66001 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips...
CVE-2025-0312 vulnerabilities
Vulnerabilities for packages: mods...
CVE-2024-23332 vulnerabilities
Vulnerabilities for packages: xeol...
GHSA-7RP8-R62P-Q6WC vulnerabilities
Vulnerabilities for packages: wolfictl...
CVE-2026-29049 vulnerabilities
Vulnerabilities for packages: wolfictl...
GHSA-7F2V-3QQ3-VVJF vulnerabilities
Vulnerabilities for packages: py3-jupyterlab...
GHSA-95FC-G4GJ-MQMX vulnerabilities
Vulnerabilities for packages: rancher...
GHSA-P2WH-W96X-W232 vulnerabilities
Vulnerabilities for packages: mods...
CVE-2024-8063 vulnerabilities
Vulnerabilities for packages: mods...
CVE-2023-26248 vulnerabilities
Vulnerabilities for packages: k3s...
CVE-2026-42295 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...
GHSA-8R5M-3F66-QPR3 vulnerabilities
Vulnerabilities for packages: vault, splunk-otel-collector-fips, splunk-otel-collector, vault-fips...