GHSA-7H2J-956F-4VF2 vulnerabilities

Vulnerabilities for packages: renovate, lerna, pulumi, node-gyp, npm, sqlpad...

CVE-2026-23048

In the Linux kernel, the following vulnerability has been resolved: udp: call skborphan before skbattemptdeferfree Standard UDP receive path does not use skb-destructor. But skmsg layer does use it, since it calls skbsetownersksafe from udpreadskb. This then triggers this warning in...

CVE-2025-61652

Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from before 1.43.4, 1.44.1...

ROS-20260202-73-0020

Vulnerability in kernel-lt related to lack of memory release after effective lifetime. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-71182

In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939sessionactivate fail if device is no longer registered syzbot is still reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 even after commit 93a27b5891b8 "can: j1939: add missing...

EUVD-2025-206554

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper allocation of resources...

GHSA-W2PG-HW7V-F7M9 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-22796

Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS7 data where an ASN1TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS7 data. Impact summary: An application...

GHSA-6475-R3VJ-M8VF vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse...

CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-12735 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-VXMC-5X29-H64V vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2022-50868

In the Linux kernel, the following vulnerability has been resolved: hwrng: amd - Fix PCI device refcount leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice says that it will increase the reference count for the returned pcidev and also decrease the reference count for...

CVE-2023-54227

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix tags leak when shrink nrhwqueues Although we don't need to realloc set-tags when shrink nrhwqueues, we need to free them. Or these tags will be leaked. How to reproduce: 1. mount -t configfs configfs /mnt 2. modprobe...

CVE-2023-54201

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If t...

GHSA-GPHJ-4H6P-37XQ vulnerabilities

Vulnerabilities for packages: sonarqube, ruby4.0-elasticsearch...

CVE-2025-68130 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: vale, jaeger, datadog-agent, coredns, verticadb-operator, opentelemetry-collector-contrib, k8sgpt, k8sgateway, kubeflow-pipelines, k3s, kargo, grafana-alloy, kserve, argo-rollouts, kine, aws-otel-collector, amazon-cloudwatch-agent, nats, splunk-otel-collector, argo-c...

GHSA-9WWW-PQCC-JM28 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2023-53744

In the Linux kernel, the following vulnerability has been resolved: soc: ti: pm33xx: Fix refcount leak in am33xxpmprobe wkupm3ipcget takes refcount, which should be freed by wkupm3ipcput. Add missing refcount release in the error paths...