5175 matches found
GHSA-52CP-R559-CP3M vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, code-server, eslint, lerna, pulumi, ts-patch, prism, vitess, kubeflow-centraldashboard, sqlpad...
CVE-2026-59869 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, code-server, eslint, lerna, pulumi, ts-patch, prism, vitess, kubeflow-centraldashboard, sqlpad...
GHSA-H95V-H523-3MW8 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-64831
FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...
CVE-2026-55717
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...
GHSA-XJ96-63GP-2GMR vulnerabilities
Vulnerabilities for packages: superset, superset-fips, openstack-horizon-2025.2-fips, text-generation-inference, tensorflow-gpu-jupyter, mlflow, lmcache-cuda-12.8, label-studio, openstack-horizon-2026.1-fips, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2,...
GHSA-PMV8-RQ9R-6J72 vulnerabilities
Vulnerabilities for packages: langfuse-fips, lerna, azurite, wazuh-dashboard-fips, kubeflow-centraldashboard, awx, opensearch-dashboards, kibana, prism, redisinsight, wazuh-dashboard, langfuse, semaphore, jitsucom-jitsu, nextcloud-server, librechat, opensearch-dashboards-fips...
GHSA-HCPX-6FM6-WX23 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, lerna, nextcloud-server, langfuse, prism, kubeflow-centraldashboard, jitsucom-jitsu...
SUSE CVE-2026-16364
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
SUSE CVE-2026-16403
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
SUSE CVE-2026-16410
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
GHSA-WM3W-8RRP-J577 vulnerabilities
Vulnerabilities for packages: drupal, privatebin, nextcloud-server...
GHSA-3JXR-9VMJ-R5CP vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, lerna, rancher-api-ui, jupyter-base-notebook, serve, thingsboard, nextcloud-server, pulumi, renovate, langfuse, prism, ts-patch, sqlpad, saf...
GHSA-G8R8-53C2-PM3F vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, powershell, promitor, dotnet, dotnet-sdk...
CVE-2026-16493
A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...
GHSA-VJ7Q-GJH5-988W vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, lmcache-cuda-12.8, litellm, semgrep...
GHSA-HVRP-RF83-W775 vulnerabilities
Vulnerabilities for packages: litellm, semgrep...
CVE-2026-16355
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
CVE-2026-16350
Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
