CVE-2026-1190 vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-VC2W-4V3P-2MQW vulnerabilities

Vulnerabilities for packages: solr...

GHSA-QR3P-2XJ2-Q7HQ vulnerabilities

Vulnerabilities for packages: solr...

GHSA-QR3P-2XJ2-Q7HQ vulnerabilities

Vulnerabilities for packages: solr...

GHSA-GM8Q-M8MV-JJ5M vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2026-24688 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-9G9P-9GW9-JX7F vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2025-68740 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68740 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2026-24678

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecamchannelwrite. This vulnerability is fixed in 3.22.0...

CVE-2026-24676

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the capture thread continues using audin-format, leading to a use after free in audioformatcompatible. This vulnerability is fixed in 3.22.0...

CVE-2026-2245

A vulnerability was identified in CCExtractor up to 183. This affects the function parsePAT/parsePMT in the library src/libccx/tstables.c of the component MPEG-TS File Parser. Such manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is...

CVE-2026-24683

FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...

CVE-2026-24491

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0...

GHSA-4J3G-RWWQ-4P54 vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2025-0395 affecting package glibc for versions less than 2.35-8

CVE-2025-0395 affecting package glibc for versions less than 2.35-8. A patched version of the package is available...

GHSA-3966-F6P6-2QR9 vulnerabilities

Vulnerabilities for packages: vitess, code-server, saf, renovate, npm...

GHSA-6426-9FV3-65X8 vulnerabilities

Vulnerabilities for packages: label-studio, authentik, authentik-fips, awx...

CVE-2025-13473 vulnerabilities

Vulnerabilities for packages: label-studio, authentik, authentik-fips, awx...

CVE-2026-1285 vulnerabilities

Vulnerabilities for packages: label-studio, authentik, authentik-fips, awx...

CVE-2025-22873

It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For example, Root.Open"../" would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained with...