GHSA-FJRM-76X2-C4Q4 vulnerabilities

Vulnerabilities for packages: authentik-fips, keep-fips, keep, authentik, py3-jwcrypto...

GHSA-V6X5-CG8R-VV6X vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, logstash, kube-fluentd-operator...

GHSA-Q4QF-9J86-F5MH vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rack, logstash, kube-fluentd-operator, ruby3.4-rack, ruby4.0-rack, ruby3.2-rack, ruby3.4-rails...

GHSA-H2JQ-G4CQ-5PPQ vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rack, logstash, kube-fluentd-operator, ruby3.4-rack, ruby4.0-rack, ruby3.2-rack, ruby3.4-rails...

CVE-2026-34230 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rack, logstash, kube-fluentd-operator, ruby3.4-rack, ruby4.0-rack, ruby3.2-rack, ruby3.4-rails...

GHSA-CFR8-F5Q7-84WQ vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-21713 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-6R7G-3MM3-FHW7 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2026-5732 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-40200

An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms o...

CVE-2026-40227

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element...

GHSA-3P68-RC4W-QGX5 vulnerabilities

Vulnerabilities for packages: prism, jitsucom-jitsu, lerna, opensearch-dashboards, langfuse, nextcloud-server, kubeflow-pipelines, saf, kubeflow-centraldashboard...

GHSA-3P68-RC4W-QGX5 vulnerabilities

Vulnerabilities for packages: langfuse, wazuh-dashboard, saf, prism, jitsucom-jitsu, kubeflow-pipelines, langfuse-fips, kibana, kubeflow-centraldashboard, lerna, redisinsight, nextcloud-server, librechat, opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-5500

wolfSSL's wcPKCS7DecodeAuthEnvelopedData does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check. A man-in-the-middle can therefore truncate the mac field from 16 bytes to 1 byte, reducing the tag check from 2⁻¹²⁸ to 2⁻⁸...

GHSA-3MWP-WVH9-7528 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4, vllm-openai-cuda-12.9...

GHSA-43RW-359F-4H89 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-39859 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-MJMQ-GWGM-5QHM vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GHSA-JR6H-R7VG-F9MC vulnerabilities

Vulnerabilities for packages: druid...

CVE-2026-33034 vulnerabilities

Vulnerabilities for packages: awx, authentik, authentik-fips, label-studio...