GHSA-MRRG-439G-X65P vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-4696 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-59028

When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...

GHSA-3C37-WWVX-H642 vulnerabilities

Vulnerabilities for packages: py3-cbor2, vllm-openai-cuda-12.9, py3-vllm-cuda-12.4, localstack, tritonserver-backend-vllm-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...

ROS-20260327-73-0009

Vulnerability in openbabel related to an operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...

CVE-2026-33699

pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider...

CVE-2026-25645 vulnerabilities

Vulnerabilities for packages: py3-pipenv, mlflow, ggshield, kubeflow-volumes-web-app, az, open-webui, pypy-3.11, jupyter-base-notebook, py3-cassandra-medusa, pypy-3.10, tensorflow-cpu-jupyter, kubeflow-katib, k8s-sidecar, airflow, checkov, kubeflow-pipelines, emissary, semgrep, superset,...

GHSA-GFWX-W7GR-FVH7 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, py3-nltk...

GHSA-JM6W-M3J8-898G vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, apache-beam-python-3.13-sdk, apache-beam-python-3.12-sdk, nemo, open-webui, apache-beam-python-3.11-sdk, py3-nltk, label-studio...

CVE-2026-33219 vulnerabilities

Vulnerabilities for packages: kine, telegraf, nats, k3s, nats-top...

CVE-2026-33223 vulnerabilities

Vulnerabilities for packages: kine, telegraf, nats, k3s, nats-top...

CVE-2026-33247 vulnerabilities

Vulnerabilities for packages: kine, telegraf, nats, k3s, nats-top...

GHSA-MF92-479X-3373 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins, thingsboard, apache-nifi-registry...

GHSA-VPRV-35VV-Q339 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, nats-top-fips, kine, nats-fips, rke2-runtime, k3s, prometheus-nats-exporter-fips, milvus, prometheus-nats-exporter, nats, telegraf, nats-top...

GHSA-FCJP-H8CC-6879 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, nats-top-fips, kine, nats-fips, rke2-runtime, k3s, prometheus-nats-exporter-fips, milvus, prometheus-nats-exporter, nats, telegraf, nats-top...

GHSA-9983-VRX2-FG9C vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, nats-top-fips, kine, nats-fips, rke2-runtime, k3s, prometheus-nats-exporter-fips, milvus, prometheus-nats-exporter, nats, telegraf, nats-top...

CVE-2026-33216 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, nats-top-fips, kine, nats-fips, rke2-runtime, k3s, prometheus-nats-exporter-fips, milvus, prometheus-nats-exporter, nats, telegraf, nats-top...

CVE-2026-33217 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, nats-top-fips, kine, nats-fips, rke2-runtime, k3s, prometheus-nats-exporter-fips, milvus, prometheus-nats-exporter, nats, telegraf, nats-top...

CVE-2026-23390

In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dmamapsg tracepoint arrays to prevent buffer overflow The dmamapsg tracepoint can trigger a perf buffer overflow when tracing large scatter-gather lists. With devices like virtio-gpu creating large DRM buffers,...

CVE-2026-23365

In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not ha...