CVE-2026-78935 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: prism, yaml-language-server, opensearch-dashboards, vitess, argo-workflows, tileserver-gl, jupyter-base-notebook...

GHSA-WWV5-G3V4-889X vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mitmproxy, kubeflow-pipelines-visualization-server...

GHSA-8423-8FGW-73VQ vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mitmproxy, kubeflow-pipelines-visualization-server...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, kube-logging-operator...

SUSE CVE-2026-13608

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

SUSE CVE-2026-71223

unknown...

SUSE CVE-2026-80229

When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

SUSE CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

GHSA-8WV5-X4W7-5GWW vulnerabilities

Vulnerabilities for packages: cadence, milvus, nri-kafka, temporal-server, datadog-agent, grafana-geomys-fips, minio-fips, tempo-fips, vault, seaweedfs-fips, amazon-cloudwatch-agent-fips, solr-fips, jitsucom-bulker, telegraf, grafana-fips, nri-cassandra-fips, commercial-grafana, seaweedfs,...

CVE-2026-63379 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63379 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63385 affecting package mysql for versions less than 8.0.46-2

CVE-2026-63385 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...

CVE-2026-63379 affecting package mysql for versions less than 8.0.46-2

CVE-2026-63379 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...

CVE-2026-63387 affecting package mysql for versions less than 8.0.46-2

CVE-2026-63387 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...

CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63379 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63379 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63382 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63382 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-15806 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: awx, lerna, semaphore, librechat, wazuh-dashboard-fips, azurite, gitlab-rails-ce-fips, kibana, prism, langfuse-fips, nextcloud-server, jitsucom-jitsu, gitlab-rails-ce, kubeflow-centraldashboard, redisinsight, wazuh-dashboard, opensearch-dashboards-fips,...