GHSA-4JWC-W2HC-78QV vulnerabilities

Vulnerabilities for packages: atuin, buck2, wash, parseable, qdrant, wadm...

CVE-2024-47609 vulnerabilities

Vulnerabilities for packages: wadm, parseable, wash, buck2, qdrant, atuin...

CVE-2024-7804

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-25977 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-94VH-GPHV-8PM8 vulnerabilities

Vulnerabilities for packages: nushell, pixi, wasm-pack, geckodriver, deno...

GHSA-2GH3-RMM4-6RQ5 vulnerabilities

Vulnerabilities for packages: parseable, rust-analyzer, qdrant, yara-x...

CVE-2025-2487

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it...

CVE-2025-29787

zip is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routine of affected versions of the zip crate starting with version 1.3.0 and prior to version 2.3.0, symbolic links earlier in the archive are allowed to be used for later files in the...

CVE-2025-29787

zip is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routine of affected versions of the zip crate starting with version 1.3.0 and prior to version 2.3.0, symbolic links earlier in the archive are allowed to be used for later files in the...

GHSA-3WGM-2GW2-VH5M vulnerabilities

Vulnerabilities for packages: longhorn-share-manager, harvester-fips, spark-operator-fips, longhorn-manager, rke2-runtime-fips, argo-cd-fips, vcluster, longhorn-manager-fips, kubernetes, azure-container-networking, harvester, longhorn-share-manager-fips...

GHSA-WMCC-9VCH-JMX4 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2021-44521 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2025-24855

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal...

GHSA-G5QP-3JX2-P69R vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2025-21857

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

CVE-2025-21860

In the Linux kernel, the following vulnerability has been resolved: mm/zswap: fix inconsistency when zswapstorepage fails Commit b7c0ccdfbafd "mm: zswap: support large folios in zswapstore" skips charging any zswap entries when it failed to zswap the entire folio. However, when some base pages ar...

CVE-2025-21864

In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hitting the WARN in xfrm6tunnelnetexit while running tests that boil down to: - create a pair of netns - run a basic TCP test over ipcomp6 - delete the...

GHSA-968P-4WVH-CQC8 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, jitsucom-jitsu, ts-patch, prism, argo-workflows...

CVE-2025-1550

The Keras Model.loadmodel function permits arbitrary code execution, even with safemode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, ...

CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...