CVE-2024-45993 vulnerabilities

Vulnerabilities for packages: giflib...

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5

CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.12.0-5. A patched version of the package is available...

CVE-2025-58190 affecting package gh for versions less than 2.62.0-13

CVE-2025-58190 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-47911 affecting package docker-compose for versions less than 2.27.0-8

CVE-2025-47911 affecting package docker-compose for versions less than 2.27.0-8. A patched version of the package is available...

CVE-2026-23187 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23187 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23992 affecting package gh for versions less than 2.62.0-13

CVE-2026-23992 affecting package gh for versions less than 2.62.0-13. A patched version of the package is available...

CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6

CVE-2025-58190 affecting package cert-manager for versions less than 1.12.15-6. A patched version of the package is available...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, grafana-operator, go, flux-image-automation-controller, metacontroller, flux-helm-controller, terragrunt, polaris, victoriametrics, flux-source-controller, stakater-reloader, steampipe, flux-notification-controller, pluto,...

CVE-2025-15599 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards...

GHSA-QFFP-2RHF-9H96 vulnerabilities

Vulnerabilities for packages: renovate, node-gyp, prism, sqlpad, tileserver-gl, py3-jupyterlab, npm, pulumi, saf, lerna, pnpm-stage0, kubeflow-katib...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: solr, spark, zookeeper, cassandra-reaper, strimzi-kafka-operator, trino, cloudwatch-exporter, akhq, dependency-track, apache-tika, druid, kafka, confluent-kafka...

GHSA-W36G-F98M-WM99 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-30883

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

CVE-2026-28493

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, an integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted image. This vulnerabili...

CVE-2026-28693

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an integer overflow in DIB coder can result in out of bounds read or write. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

CVE-2026-30937

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a 32-bit unsigned integer overflow in the XWD X Windows encoder can cause an undersized heap buffer allocation. When writing a extremely large image an out of...

ROS-20260310-73-0040

A vulnerability in the signature verification functions GOST DSA, EDDSA and ECDSA of the Nettle library is related to flaws in the cryptographic algorithms used. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by entering an invalid signature...

CVE-2026-28692

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit arithmetic due to incorrect parenthesization resulting in a heap over-read. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

CVE-2026-28689

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write. This...