10208 matches found
CVE-2026-71556 vulnerabilities
Vulnerabilities for packages: argo-events, kaniko-fips, jfrog-cli, nfpm, grype-db, flux-source-controller-fips, amazon-ssm-agent-fips, dagger, flux, guac, snyk-cli, zot, rancher-fleet, pulumi-language-dotnet, gomplate, mapotf, gptscript, flux-image-automation-controller, chainloop-cli,...
CVE-2026-71557 vulnerabilities
Vulnerabilities for packages: pulumi-language-dotnet, flux-image-automation-controller, nfpm, nuclei, argocd-image-updater, flux-source-controller, pulumi-language-java, witness, gomplate, src-fingerprint, syft, kots, flux, gitsign, bom, pulumi, trivy-operator, boring-registry,...
CVE-2026-50159 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, langfuse-fips, langfuse, gitlab-rails-ce-fips...
CVE-2026-71437 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, langfuse-fips, langfuse, gitlab-rails-ce-fips...
CVE-2026-71438 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, langfuse-fips, langfuse, gitlab-rails-ce-fips...
CVE-2026-71852
pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...
CVE-2026-56850 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-64638
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...
CVE-2026-12074 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
GHSA-6HM5-JGCP-P838 vulnerabilities
Vulnerabilities for packages: nemo, open-webui...
CVE-2026-34191
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...
GHSA-5H86-PH4P-6P7W vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.3-elasticsearch...
CVE-2026-69244 vulnerabilities
Vulnerabilities for packages: airflow, open-webui, kserve, py3-cassandra-medusa, dask-kubernetes...
CVE-2026-59881 vulnerabilities
Vulnerabilities for packages: airflow, open-webui, kserve, py3-cassandra-medusa, dask-kubernetes...
GHSA-WVWR-3HFJ-VC2V vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RCF3-4779-3G67 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JFRF-4G9Q-HWQJ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M2G4-4J4W-R7Q3 vulnerabilities
Vulnerabilities for packages: chromium...