GHSA-5R57-JCC8-JHH3 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-26527

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

GHSA-G4V5-6F5P-M38J vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2025-24965

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...

CVE-2025-25474

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h...

CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

GHSA-JGFP-53C3-624W vulnerabilities

Vulnerabilities for packages: local-static-provisioner, nodetaint, aws-efs-csi-driver, kapp, emissary, kubernetes-dns-node-cache, yunikorn-k8shim, kubernetes, kubernetes-csi-driver-hostpath, rancher-fleet, ip-masq-agent, kubernetes-csi-driver-nfs, argo-rollouts, spark-operator, rancher-webhook,...

GHSA-7G2V-JJ9Q-G3RG vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, ruby3.3-rack, kube-fluentd-operator, ruby4.0-rack, logstash, ruby3.4-rack...

CVE-2024-57000 vulnerabilities

Vulnerabilities for packages: kserve...

CVE-2025-25188 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy, shadowsocks-rust...

CVE-2025-0938

The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in...

CVE-2024-50664

gpac 2.4 contains a heap-buffer-overflow at isomedia/sampledescs.c:1799 in gfisomnewmphadescription in gpac/MP4Box...

GHSA-5VPC-35F4-R8W6 vulnerabilities

Vulnerabilities for packages: buildah, podman...

CVE-2025-21646

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs if someone actually does that: kafs tries to create a directory under /proc/net/afs/ with the name o...

CVE-2024-57894

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-0436 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QCGG-J2X8-H9G8 vulnerabilities

Vulnerabilities for packages: py3-django...

CVE-2024-57877

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NTARMPOE Currently poeset doesn't initialize the temporary 'ctrl' variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will b...

CVE-2024-49571

In the Linux kernel, the following vulnerability has been resolved: net/smc: check ipareaoffset and ipv6prefixescnt when receiving proposal msg When receiving proposal msg in server, the field ipareaoffset and the field ipv6prefixescnt in proposal msg are from the remote client and can not be ful...

CVE-2024-57793

In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors In CoCo VMs it is possible for the untrusted host to cause setmemorydecrypted to fail such that an error is returned and the resulting memory is shared. Callers...