CVE-2026-26018 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, kubernetes-dns-node-cache, eks-distro...

CVE-2026-27965 affecting package vitess for versions less than 17.0.7-15

CVE-2026-27965 affecting package vitess for versions less than 17.0.7-15. A patched version of the package is available...

CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

GHSA-78CV-MQJ4-43F7 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mitmproxy, airflow, tensorflow-cpu-jupyter, kubeflow-pipelines-visualization-server...

firefox: thunderbird: Incorrect boundary conditions in the Networking: JAR component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Networking: JAR component...

GHSA-RV5F-CCPM-XJJ4 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-9R5J-7R2X-RV4G vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-F7PM-6HR8-7GGM vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2025-70873

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...

CVE-2026-31853

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

SUSE CVE-2026-3836

unknown...

CVE-2026-3805

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory...

php: heap-based buffer overflow in array_merge()

A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...

GHSA-W5R5-M38G-F9F9 vulnerabilities

Vulnerabilities for packages: localstack...

GHSA-XPQW-6GX7-V673 vulnerabilities

Vulnerabilities for packages: librechat, vitess...

GHSA-WC8C-QW6V-H7F6 vulnerabilities

Vulnerabilities for packages: librechat, langfuse, opensearch-dashboards, wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, kibana, langfuse-fips...

ROS-20260311-73-0015

Vulnerability in expat related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260311-73-0014

Vulnerability in expat related to integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-23212 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23212 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2025-58160 affecting package rust for versions less than 1.75.0-25

CVE-2025-58160 affecting package rust for versions less than 1.75.0-25. A patched version of the package is available...