CVE-2026-31790 vulnerabilities

Vulnerabilities for packages: openssl-provider-fips, libcrypto3-2.34, openssl...

Important: giflib update

Please update...

Incorrect Permission Assignment for Critical Resource

Overview @steipete/summarize is a Link → clean text → summary. Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource in the configuration file rewrite process. An attacker can access sensitive credentials by reading files created with overly...

CVE-2026-41150 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, librechat...

CVE-2026-41159 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, librechat...

CVE-2026-45246

Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive credentials by exploiting default filesystem permissions. When the refresh-free path rewrites the configuration file, it creates th...

GHSA-3644-Q5CJ-C5C7 vulnerabilities

Vulnerabilities for packages: open-webui, langfuse...

CVE-2026-44902 vulnerabilities

Vulnerabilities for packages: langfuse...

SUSE CVE-2026-45409

Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as "\u0660" N or "\u30fb" N + "\u6f22" utilize the validcontexto function pri...

CVE-2026-42009

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...

Summarize 安全漏洞

Summarize is a multi-source rapid summarization tool developed by Peter Steinberger. Versions of Summarize prior to 0.15.1 contain security vulnerabilities. These vulnerabilities stem from insecure file permissions in the configuration rewritepath without refreshing, allowing local users to acces...

GHSA-95JQ-RWVF-VJX4 vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-69CC-CV78-QC8G vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-24J9-X2WG-9QV6 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-39852 vulnerabilities

Vulnerabilities for packages: keycloak, apicurio-registry...

GHSA-W5P8-4JCX-2J6R vulnerabilities

Vulnerabilities for packages: zola...

CVE-2026-46483

Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescapetartail without the...

CVE-2026-46483

Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tarVimuntar in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescapetartail without the...

CVE-2026-6966 vulnerabilities

Vulnerabilities for packages: mise...

CVE-2025-54518

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation...