CVE-2026-17909 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17893 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17813 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3RR2-3MR9-FF26 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17719 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3WQ4-W788-RHG3 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-18008 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17973 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17955 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17682 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9PWP-9QQC-PR26 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-58063 vulnerabilities

Vulnerabilities for packages: bouncycastle-fips...

CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3

CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...

SUSE CVE-2026-54787

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...

GHSA-MQ44-7P77-Q5H7 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, airflow-core, open-webui, kserve, dask-kubernetes-fips, tritonserver-backend-vllm-cuda-13.0, datahub-ingestion-fips, kserve-models-web-app, lmcache-cuda-12.8, py3.13-scanner-test-libraries-aiohttp, text-generation-inference, py3-cassandra-medusa,...

CVE-2026-69152 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse, pulumi, saf, npm, argo-workflows, ts-patch, sqlpad, serve, prism, nextcloud-server, rancher-api-ui, renovate...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: kserve, open-webui, in-toto, py3-cassandra-medusa, airflow, k8s-sidecar, superset, mycli, mitmproxy, ggshield, semgrep, datadog-agent, kubeflow-volumes-web-app, dask-kubernetes...

GHSA-JR45-8VMC-QM54 vulnerabilities

Vulnerabilities for packages: code-server, langfuse, vitess, renovate...

GHSA-V3R7-H72X-CJCM vulnerabilities

Vulnerabilities for packages: langfuse, pulumi, code-server, npm, vitess, prism, renovate...

CVE-2026-15337

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.utils.translation.checkforlanguage is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory...