GHSA-V273-448J-V4QJ vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2020-15250 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2016-5725 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

[SECURITY] Fedora 43 Update: mbedtls-3.6.6-1.fc43

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

GHSA-P9FF-H696-F583 vulnerabilities

Vulnerabilities for packages: langfuse, vite, vitess...

CVE-2026-39363 vulnerabilities

Vulnerabilities for packages: langfuse, vite, vitess...

CVE-2026-39853

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS7 signature, the code copies the digest value from a parsed...

GHSA-5458-7HH9-V7P4 vulnerabilities

Vulnerabilities for packages: nextflow...

GHSA-53MR-6C8Q-9789 vulnerabilities

Vulnerabilities for packages: litellm, airflow...

GHSA-WH4C-J3R5-MJHP vulnerabilities

Vulnerabilities for packages: saf, sqlpad...

GHSA-9F5J-8JWJ-X28G vulnerabilities

Vulnerabilities for packages: awx, airflow...

CVE-2026-35172 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, gitness, envoy-gateway, portieris, zot, portieris-fips, kots...

GHSA-V3RJ-XJV7-4JMQ vulnerabilities

Vulnerabilities for packages: renovate...

CVE-2026-34525 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, airflow, open-webui, dask-kubernetes, checkov, py3-cassandra-medusa, kserve...

CVE-2026-31789

Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior. If an attacker c...

CVE-2026-28387

Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of potential consequenc...

GHSA-8CPQ-38P9-67GX vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-27121 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-27901 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

GHSA-HQMJ-H5C6-369M vulnerabilities

Vulnerabilities for packages: py3-onnx...