CVE-2026-34538 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-Q5FH-2HC8-F6RQ vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-3505

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all pg modules. This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java,...

CVE-2026-5598

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all core modules. This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84...

SUSE CVE-2026-33999

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...

SUSE CVE-2026-34001

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially...

CVE-2026-0988 affecting package glib for versions less than 2.71.0-10

CVE-2026-0988 affecting package glib for versions less than 2.71.0-10. A patched version of the package is available...

org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method

A flaw was found in plexus-utils. This vulnerability, known as a Directory Traversal, exists within the extractFile method. An attacker can exploit this to execute unauthorized code on the system in the context of the current working user...

CVE-2026-39983 vulnerabilities

Vulnerabilities for packages: code-server, opensearch-dashboards, langfuse...

CVE-2026-39406 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-39407 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-39410 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-26PP-8WGV-HJVM vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-CHQC-8P9Q-PQ6Q vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, code-server, opensearch-dashboards-fips, langfuse-fips, kibana, wazuh-dashboard...

ROS-20260414-73-0048

Vulnerability in kernel-lt related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260414-73-0059

Vulnerability in kernel-lt related to integer overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

ROS-20260414-73-0004

Vulnerability in kernel-lt related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260414-73-0057

Vulnerability in kernel-lt related to insufficient control of the resource during its existence. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260414-73-0010

Vulnerability in kernel-lt related to implementation of incorrect control flow. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

CVE-2026-4786

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...