GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: ruby3.3-net-imap, gitlab-rails-ce, ruby4.0-rails, kube-logging-operator, ruby4.0-net-imap, ruby3.2-rails, logstash, ruby3.2-net-imap, gitlab-rails-ce-fips, ruby3.4-net-imap, ruby3.3-rails, ruby3.4-rails, logstash-fips, kube-fluentd-operator...

CVE-2026-33419 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-6PJF-3R9X-M592 vulnerabilities

Vulnerabilities for packages: gitness, zot, kots, envoy-gateway, portieris...

GHSA-R73J-PQJ5-W3X7 vulnerabilities

Vulnerabilities for packages: superset, kubeflow-pipelines-visualization-server...

CVE-2026-28780

Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to modproxyajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue...

ROS-20260505-73-0033

A vulnerability in the Content-Length component of the Python programming language interpreter is associated with uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial of service...

GHSA-JJ28-P98R-MWQJ vulnerabilities

Vulnerabilities for packages: ffmpeg...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS

After accepting an untrusted certificate, handling an empty PKCS7 sequence as part of the certificate data could have led to a crash. This crash is believed to be exploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

CVE-2026-31673 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31673 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23302 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-23302 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31446 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31446 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-23255 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-23255 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-33558 vulnerabilities

Vulnerabilities for packages: wildfly, druid, strimzi-kafka-operator...

CVE-2026-40458 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-JCJ3-VP6R-4J69 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-aws, linux-azure...

GHSA-48XP-R2J8-CFX4 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-aws, linux-azure...

GHSA-5J7X-34CH-2FXF vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-aws, linux-azure...

CVE-2026-5928 vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-43018

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in hcileremoteconnparamreqevt hciconn lookup and field access must be covered by hdev lock in hcileremoteconnparamreqevt, otherwise it's possible it is freed concurrently. Extend the...

CVE-2026-43051

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacomintuosbtirq The wacomintuosbtirq function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short report can trigger an out-of-bounds read when...