CVE-2025-62879 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

GHSA-FCW5-X6J4-CCMP vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

Astra Linux – Vulnerability in SOX

A vulnerability was discovered in SoX, where a heap buffer overflow occurs in the startread function in the hcom.c file. This vulnerability can be exploited by using a specially crafted hcomn file, which may cause the application to crash...

GHSA-WXV8-W48J-R2F4 vulnerabilities

Vulnerabilities for packages: python...

GHSA-4M7W-QMGQ-4WJ5 vulnerabilities

Vulnerabilities for packages: mlflow-fips, text-generation-inference, py3-vllm-cuda-12.9, py3-vllm-cuda-12.4, mlflow, authentik, metaflow-service-fips, request-1276, authentik-fips, tritonserver-backend-vllm-cuda-13.0...

GHSA-4FVR-RGM6-GQMC vulnerabilities

Vulnerabilities for packages: mlflow-fips, text-generation-inference, py3-vllm-cuda-12.9, py3-vllm-cuda-12.4, mlflow, authentik, metaflow-service-fips, request-1276, authentik-fips, tritonserver-backend-vllm-cuda-13.0...

CVE-2026-5222 affecting package rust for versions less than 1.90.0-9

CVE-2026-5222 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...

CVE-2026-40034 affecting package rust for versions less than 1.90.0-9

CVE-2026-40034 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...

Updated nghttp2 packages fix security vulnerability

Denial of service: Assertion failure due to missing state validation. CVE-2026-27135...

CVE-2026-11701 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WX4M-978H-JHX3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-M67C-5QCR-Q2MM vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11692 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HMRH-MQV8-RVVR vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-V446-XWFM-X7MR vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-48856

Sensitive Data Exposure vulnerability in Erlang OTP inets httpcresponse module allows Retrieve Embedded Sensitive Data. The httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the redirect crosses an origin boundary...

CVE-2026-48859

Observable Timing Discrepancy vulnerability in Erlang/OTP ssh sshauth, sshoptions modules allows unauthenticated remote username enumeration via timing side-channel in password authentication. When the SSH daemon is configured with the userpasswords or password option, sshauth:checkpassword/3...

CVE-2026-44250 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, thingsboard, tez, trino...

GHSA-8X6R-G9MW-2R78 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-RPM7-PHH8-26F7 vulnerabilities

Vulnerabilities for packages: chromium...