GHSA-G3R4-PHHF-PX98 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3Q78-FQJ5-G3MC vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

ROS-20260805-73-0018

The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-59881 vulnerabilities

Vulnerabilities for packages: awx, puppygraph-python, apache-beam-python-3.13-sdk, tritonserver-backend-vllm-cuda-13.0, kserve-huggingfaceserver-cuda-13.3, datahub-ingestion-fips, text-generation-inference, kserve, dask-kubernetes, py3.13-scanner-test-libraries-aiohttp, open-webui,...

GHSA-MFX4-HV73-Q22V vulnerabilities

Vulnerabilities for packages: awx, puppygraph-python, apache-beam-python-3.13-sdk, tritonserver-backend-vllm-cuda-13.0, kserve-huggingfaceserver-cuda-13.3, datahub-ingestion-fips, text-generation-inference, kserve, dask-kubernetes, py3.13-scanner-test-libraries-aiohttp, open-webui,...

GHSA-32RQ-JHR7-M3HH vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-88FW-V6X4-3F58 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

CVE-2026-67289

FreeRDP before 3.29.0 affected versions = 3.28.0 does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written directly into the...

CVE-2026-41607 affecting package thrift for versions less than 0.24.0-1

CVE-2026-41607 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

GHSA-3CHG-M5W7-QFV5 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

SUSE CVE-2026-18001

Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

ROS-20260729-73-0033

The vulnerability in coredns is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

GHSA-3FXJ-6JH8-HVHX vulnerabilities

Vulnerabilities for packages: cosmo-router, fluxcd-kustomize-mutating-webhook-fips, kyverno, commercial-kyverno, cosmo-router-fips, karma, karma-fips, zitadel, telegraf, fluxcd-kustomize-mutating-webhook...

CVE-2026-64308

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPVLEKLOAD Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and...

GHSA-2X63-GW47-W4MM vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, pghero, gitlab-rails-ce, pghero-fips, commercial-gitlab-rails-ee, ruby4.0-rails, gitlab-rails-ce-fips...

ROS-20260724-73-0017

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

ROS-20260724-73-0039

The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-65901

DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...

ROS-20260723-73-0041

The vulnerability in Chromium is related to insufficient resource management during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

bind: bind9: Unnecessary validation of DNSSEC signed records

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...