CVE-2021-36151

In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions = 0.15.0. Users should update to version 0.16.0 which addresses this issue...

GHSA-7975-2QR9-G542 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-37372 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-37372 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2025-47779

Asterisk is an open-source private branch exchange PBX. Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE RFC 3428 authentication do not get proper alignment. An authenticated attacker...

CVE-2025-5024

A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer bei...

CVE-2025-4123

A cross-site scripting XSS vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permission...

CVE-2024-6839 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, kubeflow-volumes-web-app...

CVE-2024-6866 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, kubeflow-volumes-web-app...

CVE-2024-6844 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, kubeflow-volumes-web-app...

GHSA-43QF-4RQW-9Q2G vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, superset, kubeflow-volumes-web-app...

CVE-2024-6866 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, superset, kubeflow-jupyter-web-app...

GHSA-8VGW-P6QM-5GR7 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, superset, kubeflow-jupyter-web-app...

GHSA-43QF-4RQW-9Q2G vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, superset, kubeflow-jupyter-web-app...

CVE-2025-3887

GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may...

webkit2gtk3 security update

2.48.2-1 - Update to 2.48.2 - Reenable JIT...

expat security update

2.5.0-5 - Fix CVE-2024-8176 - Resolves: RHEL-57489 2.5.0-4 - Fix CVE-2024-50602 - Resolves: RHEL-65066...

CVE-2025-48060

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...

CVE-1999-0515

An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv...

CVE-2024-23337

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue...