CVE-2026-4460

Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

CVE-2026-4449

Use after free in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

ROS-20260320-73-0005

Vulnerability in jenkins due to failure to take measures to protect web page structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260320-73-0010

A vulnerability in the Golang programming language is related to insufficient control of a resource during its existence. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

GHSA-WJ64-GH9J-XM82 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, kafka-proxy, sftpgo-plugin-pubsub, promxy, octo-sts, kubernetes-event-exporter, dgraph, kube-state-metrics, crossplane-provider-aws-kinesis, falco-exporter, sftpgo-plugin-auth, cass-operator, cluster-api-provider-vsphere,...

GHSA-XH32-C9WX-PHRP vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak...

GHSA-4992-7RV2-5PVQ vulnerabilities

Vulnerabilities for packages: librechat, langfuse, pelias-api, renovate, code-server, jitsucom-jitsu, kibana, langfuse-fips...

GHSA-Q5QW-H33P-QVWR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, kibana, opensearch-dashboards-fips...

SUSE CVE-2026-27459

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to setcookiegeneratecallback returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0....

ROS-20260319-73-0034

Vulnerability in beats related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...

ROS-20260319-73-0007

Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260319-73-0031

Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

CVE-2026-31969

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the BYTEARRAYSTOP method, an out-by-one error in the...

CVE-2026-29777 vulnerabilities

Vulnerabilities for packages: traefik-fips, traefik...

CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5

CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...

CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5

CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...

CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22

CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...

CVE-2026-23246

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...

CVE-2026-23244

In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...