10156 matches found
GHSA-26PV-HGM3-4WJ5 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-18010 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17886 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-18007 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17912 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17887 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17675 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17656 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13506 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-58061 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
GHSA-PXW2-F34F-XJVR vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-58060 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-67590
Removed by vendor...
GHSA-MC57-H6J3-3HMV vulnerabilities
Vulnerabilities for packages: bento, dapr...
GHSA-94P8-87FF-W336 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-47781
PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...
python-pillow: Pillow: Denial of Service via crafted PCF font data
A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing specially crafted PCF font data. This data, when processed, can lead to excessive memory allocation because the library does not properly check for decompression bombs. The primar...
CVE-2026-47763
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...