GHSA-FMHH-RW3H-785M vulnerabilities

Vulnerabilities for packages: mattermost...

CVE-2025-1647

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue affects Bootstrap: from 3.4.1 before 4.0.0...

CVE-2025-31650 vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-FF77-26X5-69CR vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-3P2H-WQQ4-WF4H vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2025-47278 vulnerabilities

Vulnerabilities for packages: emissary, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, airflow...

CVE-2025-31651 vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-4GRG-W6V8-C28G vulnerabilities

Vulnerabilities for packages: emissary, kubeflow-jupyter-web-app, kubeflow-volumes-web-app, airflow...

CVE-2025-31651 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, thingsboard...

GHSA-4GRG-W6V8-C28G vulnerabilities

Vulnerabilities for packages: airflow-core, nemo, pgadmin4, airflow, mlflow, emissary, kubeflow-jupyter-web-app, kubeflow-volumes-web-app...

GHSA-FF77-26X5-69CR vulnerabilities

Vulnerabilities for packages: camunda-zeebe, thingsboard...

GHSA-3P2H-WQQ4-WF4H vulnerabilities

Vulnerabilities for packages: camunda-zeebe, thingsboard...

CVE-2025-46331 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2025-46836

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...

CVE-2025-31672 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-32873 vulnerabilities

Vulnerabilities for packages: awx...

GHSA-8J24-CJRQ-GR2M vulnerabilities

Vulnerabilities for packages: awx...

CVE-2025-4638

A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary PCL. This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1.14.0, PCL by default uses a zlib...

CVE-2025-3932

It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...

CVE-2025-3877

Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986...