GHSA-G4RG-993R-MGX7 vulnerabilities

Vulnerabilities for packages: py3-captum...

CVE-2022-3517 vulnerabilities

Vulnerabilities for packages: py3-captum...

CVE-2026-53066 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53066 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53061 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53061 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-35387 affecting package openssh for versions less than 9.8p1-8

CVE-2026-35387 affecting package openssh for versions less than 9.8p1-8. A patched version of the package is available...

CVE-2026-56114 affecting package dhcpcd for versions less than 10.0.8-2

CVE-2026-56114 affecting package dhcpcd for versions less than 10.0.8-2. A patched version of the package is available...

CVE-2026-39828 affecting package gh for versions less than 2.62.0-17

CVE-2026-39828 affecting package gh for versions less than 2.62.0-17. A patched version of the package is available...

CVE-2026-39822

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...

GHSA-RMMH-P597-PPVV vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard-fips, wazuh-dashboard, opensearch-dashboards...

CVE-2026-53139 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu, linux-azure, linux-qemu-melange...

CVE-2026-53147 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu, linux-azure, linux-qemu-melange...

ROS-20260708-73-0039

The vulnerability in glibc is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

GHSA-X8XR-RM9R-7MVF vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

CVE-2014-3517 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2...

python: Fix of 2 CVEs

CVE-2025-15366: reject control characters in IMAP commands in imaplib.IMAP4.command to prevent command injection via newlines - CVE-2025-15367: reject control characters in POP3 commands in poplib.POP3.putcmd to prevent command injection via newlines...

CVE-2026-54161

upsmon: remote OS command injection RCE via attacker-controlled ups.alarm in NOTIFYCMD execution...

GHSA-FX2H-PF6J-XCFF vulnerabilities

Vulnerabilities for packages: nextcloud-server...

ROS-20260703-73-0027

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-13117

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage...

CVE-2026-11771

OpenVPN version 2.1.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server...