GHSA-G4RV-C45G-4J68 vulnerabilities

Vulnerabilities for packages: drupal...

GHSA-MRFV-M5WM-5W6W vulnerabilities

Vulnerabilities for packages: datadog-agent, az, superset...

GHSA-38JV-5279-WG99 vulnerabilities

Vulnerabilities for packages: py3-pip, kubeflow-jupyter-web-app, dask-gateway, kubeflow-katib, az, opentelemetry-python-instrumentation, airflow-core, kubeflow-volumes-web-app, tensorflow-cpu-jupyter, py3-cassandra-medusa, nemo, tensorflow-gpu-jupyter, checkov, airflow, jwt-tool, ggshield,...

mariadb: MariaDB Server Crash

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via improper handling of join operations in JOIN::fixallsplittingsinplan...

CVE-2026-21895

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

GHSA-RHFX-M35P-FF5J vulnerabilities

Vulnerabilities for packages: pgcat, ztunnel, atuin, kdash, yazi, uutils, litmus, wasmcloud, nushell, pixi, vector...

USN-7946-1: GnuPG vulnerability

It was discovered that GnuPG incorrectly handled crafted input. A remote attacker could possibly use this issue to crash the program, or execute arbitrary code...

mariadb: MariaDB Server Crash via Item_direct_view_ref

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to crash the database via Itemdirectviewref::derivedfieldtransformerforwhere...

libpng: LIBPNG heap buffer overflow

A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated...

postgresql: CREATE STATISTICS does not check for schema CREATE privilege

A vulnerability has been identified in PostgreSQL’s CREATE STATISTICS command where the database does not check that the user has the required schema CREATE privilege. A table owner user could create a statistics object in any schema, blocking other users who legitimately hold CREATE STATISTICS...

CVE-2025-69230 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, dask-kubernetes, open-webui, checkov, kserve, kubeflow-pipelines-visualization-server...

CVE-2025-64432 affecting package kubevirt for versions less than 0.59.0-33

CVE-2025-64432 affecting package kubevirt for versions less than 0.59.0-33. A patched version of the package is available...

CVE-2025-61915 affecting package cups for versions less than 2.3.3op2-11

CVE-2025-61915 affecting package cups for versions less than 2.3.3op2-11. A patched version of the package is available...

CVE-2025-64433 affecting package kubevirt for versions less than 0.59.0-33

CVE-2025-64433 affecting package kubevirt for versions less than 0.59.0-33. A patched version of the package is available...

CVE-2025-44905 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-44905 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-2310 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-2310 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

GHSA-95H4-W6J8-2RP8 vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2025-9784 vulnerabilities

Vulnerabilities for packages: wildfly...

GHSA-R8F4-HV23-6QP6 vulnerabilities

Vulnerabilities for packages: rancher...

CVE-2025-6037 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...