GHSA-XJ6V-33Q6-WVXJ vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-3MWP-7C29-VP5V vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-8RFC-PHX9-6VC2 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-29G8-XP94-2R42 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-PP6F-JF25-X95P vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-JV2W-P5JV-GRR5 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-24W5-CQC3-H379 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-16369 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-16350 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-16354 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-RJR7-JGGH-PGCP vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2025-12506 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-18047

A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a trailing slash to the URL, an unauthenticated attacker can bypass the Tomcat authentication constraint while RESTEasy still...

GHSA-C2RV-HWQM-WJPG vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2026-13676 vulnerabilities

Vulnerabilities for packages: yaml-language-server, kibana, wazuh-dashboard-fips, opensearch-dashboards-fips...

CVE-2026-64554

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a pointer into the skb head, from ip6find1stfragopt, then calls skbchecksumhelp. For a cloned skb skbchecksumhelp reallocates the head via...

CVE-2026-66053

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603...

CVE-2026-57497 vulnerabilities

Vulnerabilities for packages: kubo, ipfs-cluster, k3s...

CVE-2026-64452

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC descriptor while holding lowpannhclock. If the descriptor has no uncompress callback, the error path drops the lock before printing...

CVE-2026-64366

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...