GHSA-JRX7-5CR9-C5V4 vulnerabilities

Vulnerabilities for packages: upx...

CVE-2025-32022

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...

CVE-2025-4373

A flaw was found in GLib, which is vulnerable to an integer overflow in the gstringinsertunichar function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite...

CVE-2025-4373

A flaw was found in GLib, which is vulnerable to an integer overflow in the gstringinsertunichar function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite...

CVE-2024-53209 affecting package kernel for versions less than 6.6.85.1-1

CVE-2024-53209 affecting package kernel for versions less than 6.6.85.1-1. A patched version of the package is available...

CVE-2025-43857 vulnerabilities

Vulnerabilities for packages: jruby, kube-fluentd-operator...

GHSA-J3G3-5QV5-52MJ vulnerabilities

Vulnerabilities for packages: truffleruby, kube-fluentd-operator, jruby...

CVE-2024-58237

In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers. Making...

CVE-2025-21763 affecting package kernel for versions less than 5.15.180.1-1

CVE-2025-21763 affecting package kernel for versions less than 5.15.180.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-58005 affecting package kernel for versions less than 5.15.179.1-1

CVE-2024-58005 affecting package kernel for versions less than 5.15.179.1-1. A patched version of the package is available...

CVE-2025-21639 affecting package kernel for versions less than 5.15.179.1-1

CVE-2025-21639 affecting package kernel for versions less than 5.15.179.1-1. A patched version of the package is available...

CVE-2025-47268

ping in iputils before 20250602 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication...

GHSA-859W-5945-R5V3 vulnerabilities

Vulnerabilities for packages: vite...

CVE-2025-3501 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2025-3910 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2025-46565 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, vite...

CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

GHSA-GCQF-F89C-68HV vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

CVE-2025-37799

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3processxdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 that is, packet sizes between 128 - 3k bytes. We noticed MTU-related connectivity issues with Cilium's...