354 matches found
GHSA-X52F-23V9-FG5G vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7FP3-MXP6-94W2 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17762 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XGPF-25JC-XVGF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PRC5-PGX6-37J6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F342-MCRF-WV9H vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17985 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-71192
In OpenStack Swift through 2.38.0, the S3API middleware does not sanit...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: unleash-fips, langfuse-fips, unleash-proxy, opensearch-dashboards, pulumi, opensearch-dashboards-fips, unleash, npm, lerna, code-server, kubeflow-pipelines...
GHSA-7RG2-8XRH-RWH8 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-59898
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...
CVE-2026-64547
In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: gemini-cli, node-gyp, kibana, sqlpad, opensearch-dashboards, pulumi, kubeflow-centraldashboard, gitlab-rails-ce, opensearch-dashboards-fips, npm, haraka, actions-runner, graalvm, renovate, lerna, code-server...
CVE-2026-64439
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...
CVE-2026-64401
In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...
CVE-2026-64285
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...
GHSA-XCPC-8H2W-3J85 vulnerabilities
Vulnerabilities for packages: redisinsight, sqlpad, kibana...
CVE-2026-43699
A use-after-free issue was addressed with improved memory management...