10213 matches found
CVE-2026-67338
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...
SUSE CVE-2026-55244
ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROMPY in asteval/astutils.py exposes BaseException, SystemExit, KeyboardInterrupt, and GeneratorExit to expressions evaluated by asteval.Interpreter.eval, while run and eval in asteval/asteval.py catch Exception rather...
SUSE CVE-2026-55777
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...
CVE-2026-53669 vulnerabilities
Vulnerabilities for packages: keycloak, vitess...
GHSA-94P4-4CQ8-9G67 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-VJC4-5QP5-M44J vulnerabilities
Vulnerabilities for packages: open-webui, superset...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, keycloak-config-cli, zipkin...
GHSA-CHX6-HX7R-MCP5 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-5F52-PX6M-C5HW vulnerabilities
Vulnerabilities for packages: wget...
CVE-2026-58470 vulnerabilities
Vulnerabilities for packages: wget...
GHSA-H8FP-F39C-Q6MH vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-FXF9-RXPJ-26GX vulnerabilities
Vulnerabilities for packages: wget...
SUSE CVE-2026-55998
The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...
SUSE CVE-2026-62291
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...
GHSA-724G-MXRG-4QVM vulnerabilities
Vulnerabilities for packages: renovate...
CVE-2026-16399 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16403 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16409 vulnerabilities
Vulnerabilities for packages: firefox...