CVE-2026-25541 affecting package azl-compliance for versions less than 1.0.2-3

CVE-2026-25541 affecting package azl-compliance for versions less than 1.0.2-3. A patched version of the package is available...

CVE-2025-39847 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39847 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38528 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38528 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38457 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38457 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38441 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38441 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22796 affecting package edk2 for versions less than 20230301gitf80f052277c8-47

CVE-2026-22796 affecting package edk2 for versions less than 20230301gitf80f052277c8-47. A patched version of the package is available...

GHSA-C87W-642H-M97H vulnerabilities

Vulnerabilities for packages: trino, druid...

firefox: thunderbird: Integer overflow in the JavaScript: Standard Library component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the JavaScript: Standard Library component...

firefox: thunderbird: Incorrect boundary conditions in the Web Audio component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Web Audio component...

firefox: thunderbird: Use-after-free in the DOM: Window and Location component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Window and Location component...

firefox: thunderbird: Undefined behavior in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the DOM: Core & HTML component...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...

firefox: thunderbird: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147. Some of these bugs showed evidence of memory corruption and we presume th...

firefox: thunderbird: Sandbox escape in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Graphics: WebRender component...

CVE-2026-27139 FileInfo can escape from a Root in os

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

GO-2026-4602 FileInfo can escape from a Root in os

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

CVE-2025-15558 vulnerabilities

Vulnerabilities for packages: istio, vcluster, dive, scorecard, vendir, guac, flux-kustomize-controller, ko, kyverno, gitsign, harbor, vault-secrets-webhook, argo-workflows, knative-serving, spire-server, incert, xeol, kubescape-operator, tekton-chains, bento, slsa-verifier, kwok, trivy,...

GHSA-VQF4-7M7X-WGFC vulnerabilities

Vulnerabilities for packages: cassandra, debezium-connector-vitess, debezium-connector-spanner, kafka, debezium-connector-db2, debezium-connector-ibmi, debezium, spark, strimzi-kafka-operator, zipkin, debezium-connector-informix...