CVE-2026-64284

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Move the handling of fastpath userspace exits into vendor code to ensure KVM runs vendor specific operations that need to run before userspace gains...

CVE-2026-64273

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforceprocesspacket handles a status report packet id 0x02 by taking a force-feedback effect index straight from the device wire and using it to address the...

CVE-2026-64644 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu...

GHSA-P63J-VCC4-9VMV vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-W62V-XXXG-MG59 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-64642 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-64250

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

CVE-2026-50289 vulnerabilities

Vulnerabilities for packages: homepage, opentelemetry-auto-instrumentations-node...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: celeborn, keycloak, flyway, wavefront-proxy, kserve-modelmesh, infinispan, apache-activemq-artemis, apache-nifi, spark, management-api-for-apache-cassandra-5.0, logstash, tez, neo4j, apicurio-registry, trino, thingsboard, strimzi-kafka-operator, cloudwatch-exporter,...

GHSA-35RM-7J9C-2F7M vulnerabilities

Vulnerabilities for packages: zed...

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu, keep, homepage, keep-fips, langfuse-fips, peerdb-ui...

GHSA-P9J2-GV94-2WF4 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu, keep, homepage, keep-fips, langfuse-fips, peerdb-ui...

SUSE CVE-2026-56684

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

GHSA-V396-V7Q4-X2QJ vulnerabilities

Vulnerabilities for packages: awx, datahub-ingestion-fips, checkov, opal, datahub-ingestion, mlflow...

CVE-2026-16221 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, librechat, wazuh-dashboard-fips, gitlab-rails-ce-fips, kibana, prism, langfuse-fips, yaml-language-server, nextcloud-server, unleash-fips, argo-workflows, gitlab-rails-ce, tileserver-gl-fips, keep, keep-fips, renovate,...

GHSA-2F96-G7MH-G2HX vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

SUSE CVE-2026-59898

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, nuclei, crossplane-provider-aws-memorydb, crossplane-provider-aws-elasticache, crossplane-provider-aws-kms, crossplane-provider-aws-rds, glow, crossplane-provider-aws-eks, crossplane-provider-aws-cloudwatchlogs,...

GHSA-5GVW-P9QM-JGWH vulnerabilities

Vulnerabilities for packages: keycloak, flyway, wavefront-proxy, infinispan, zookeeper, ruby3.2-jrjackson, apache-nifi, confluent-kafka, scala, logstash, spark, tez, apache-nifi-registry, apicurio-registry, trino, thingsboard, sonarqube, gradle, cassandra, strimzi-kafka-operator, druid, opensearc...

CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...