10170 matches found
GHSA-6JV3-5F52-599M vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-V4P8-MG3P-G94G vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-4XGF-CPJX-PC3J vulnerabilities
Vulnerabilities for packages: semgrep, airflow, open-webui...
GHSA-PW6J-QG29-8W7F vulnerabilities
Vulnerabilities for packages: mitmproxy, airflow...
CVE-2026-53125
In the Linux kernel, the following vulnerability has been resolved: md: fix arraystate=clear sysfs deadlock When "clear" is written to arraystate, mdattrstore breaks sysfs active protection so the array can delete itself from its own sysfs store method. However, mdattrstore currently drops the...
CVE-2026-53101
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix potential deadlock in mt7921rocabortsync rocabortsync can deadlock with rocwork. rocwork holds dev-mt76.mutex, while cancelworksync waits for rocwork to finish. If the caller already owns the same mutex,...
CVE-2026-52999
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix out-of-bounds read on option matching In nfosfmatch, the nfosfhdrctx structure is initialized once and passed by reference to nfosfmatchone for each fingerprint checked. During TCP option parsing,...
CVE-2026-54904
concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::AtomicReferenceupdate can enter a permanent busy retry loop when the current value is Float::NAN. The issue is caused by the interaction between AtomicReferenceupdate, which retries until compareandsetoldvalue,...
CVE-2026-52918
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: serialize acceptq access btsockpoll walks the accept queue without synchronization, while child teardown can unlink the same socket and drop its last reference. The unsynchronized accept queue walk has existed since th...
SUSE CVE-2026-46606
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by securepopen...
ROS-20260624-73-0030
The vulnerability in Netty is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
GHSA-64MM-VXMG-Q3VJ vulnerabilities
Vulnerabilities for packages: argo-workflows, gitlab-rails-ce-fips, kubeflow-katib, gitlab-rails-ce, kubeflow-pipelines...
CVE-2020-12459 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-J454-PVHH-FCMQ vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-qemu-melange, linux-vmware, linux-azure, linux-gcp...
CVE-2025-68939 vulnerabilities
Vulnerabilities for packages: gitea-fips...
CVE-2026-49468 vulnerabilities
Vulnerabilities for packages: airflow...
SUSE CVE-2026-23879
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...
SUSE CVE-2026-53488
containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config LABEL instruction in Dockerfile to a container without validation. This may result in executing an arbitrary command on the host, via ...
SUSE CVE-2026-55206
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo.read in archiveinfo.py used an On^2 cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted...