CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4. A patched version of the package is available...

GHSA-4F6G-68PF-7VHV vulnerabilities

Vulnerabilities for packages: open-webui...

wireshark: Access of Uninitialized Pointer in Wireshark

An uninitialized pointer access has been discovered in Wireshark. An attacker who can provide crafted input may be able to leverage this pointer access weakness to crash the application...

ROS-20260112-7309

A vulnerability in the llcpsock.c component of the Linux kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service as well...

GHSA-VPFW-47H7-XJ4G vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, ruby3.4-rack, ruby4.0-rack, gitlab-rails-ce, ruby3.3-rack...

CVE-2026-22703

Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...

GHSA-WP33-7FRP-G7VG vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-qemu, linux-vmware...

CVE-2017-1000255 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-qemu, linux-vmware...

GHSA-G7MW-CR59-R458 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-qemu, linux-vmware...

GHSA-4VRG-GM73-C852 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-qemu, linux-vmware...

GHSA-F8CM-6447-X5H2 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-G4RV-C45G-4J68 vulnerabilities

Vulnerabilities for packages: drupal...

GHSA-MRFV-M5WM-5W6W vulnerabilities

Vulnerabilities for packages: datadog-agent, az, airflow...

GHSA-38JV-5279-WG99 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, py3.13-scanner-test-libraries, kubeflow-katib, pgadmin4-fips, nvidia-nsight-compute-13.3, awx, dask-gateway, ansible-operator, emissary, openstack-kolla-toolbox-2025.2-fips, dask-kubernetes, mlflow, py3-pip, ggshield, airflow-core,...

mariadb: MariaDB Server Crash

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via improper handling of join operations in JOIN::fixallsplittingsinplan...

CVE-2026-21895

The rsa crate is an RSA implementation written in rust. Prior to version 0.9.10, when creating a RSA private key from its components, the construction panics instead of returning an error when one of the primes is 1. Version 0.9.10 fixes the issue...

GHSA-RHFX-M35P-FF5J vulnerabilities

Vulnerabilities for packages: yazi, litmus, vector, nushell, atuin, pixi, kdash, uutils, wasmcloud, ztunnel, pgcat...

USN-7946-1: GnuPG vulnerability

It was discovered that GnuPG incorrectly handled crafted input. A remote attacker could possibly use this issue to crash the program, or execute arbitrary code...

mariadb: MariaDB Server Crash via Item_direct_view_ref

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to crash the database via Itemdirectviewref::derivedfieldtransformerforwhere...

libpng: LIBPNG heap buffer overflow

A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated...