CVE-2026-4541

A flaw has been found in janmojzis tinyssh up to 20250501. Impacted is an unknown function of the file tinyssh/cryptosigned25519tinyssh.c of the component Ed25519 Signature Handler. This manipulation causes improper verification of cryptographic signature. The attack is restricted to local...

GHSA-RF6F-7FWH-WJGH vulnerabilities

Vulnerabilities for packages: vitess, kubeflow-katib, eslint, langfuse, renovate, prism, sqlpad...

GHSA-RF6F-7FWH-WJGH vulnerabilities

Vulnerabilities for packages: prism, arangodb, langfuse, langfuse-fips, renovate, sqlpad, vitess, wazuh-dashboard, wazuh-dashboard-fips, gitlab-rails-ce, gitlab-rails-ce-fips, drupal, authentik, authentik-fips, eslint, librechat, semaphore, kubeflow-katib...

CVE-2026-32829 vulnerabilities

Vulnerabilities for packages: py3-xet-core, vector, parseable, qdrant...

CVE-2026-23275

In the Linux kernel, the following vulnerability has been resolved: iouring: ensure ctx-rings is stable for task work flags manipulation If DEFERTASKRUN | SETUPTASKRUN is used and task work is added while the ring is being resized, it's possible for the OR'ing of IORINGSQTASKRUN to happen in the...

GHSA-4FCP-JXH7-23X8 vulnerabilities

Vulnerabilities for packages: vale...

GHSA-PCGW-QCV5-H8CH vulnerabilities

Vulnerabilities for packages: teleport...

CVE-2026-32942

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fixed in version 2.17...

CVE-2026-1525 vulnerabilities

Vulnerabilities for packages: code-server, langfuse, renovate, jitsucom-jitsu...

CVE-2026-4460

Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

CVE-2026-4449

Use after free in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

ROS-20260320-73-0005

Vulnerability in jenkins due to failure to take measures to protect web page structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260320-73-0010

A vulnerability in the Golang programming language is related to insufficient control of a resource during its existence. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

GHSA-WJ64-GH9J-XM82 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-P77J-4MVH-X3M3 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, crossplane-provider-aws-lambda, vcluster, podman, cri-tools, docker-compose, distribution, kwok, kubernetes-csi-driver-hostpath, hydra, k6, terraform-provider-aws, hubble, cluster-api-azure-controller, dagdotdev, kserve-rest-proxy, seaweedf...

GHSA-XH32-C9WX-PHRP vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-4992-7RV2-5PVQ vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, kibana, renovate, jitsucom-jitsu, pelias-api, code-server, gemini-cli, librechat...

GHSA-Q5QW-H33P-QVWR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, librechat, opensearch-dashboards, kibana...

SUSE CVE-2026-27459

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to setcookiegeneratecallback returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0....

ROS-20260319-73-0031

Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...