10162 matches found
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, homepage, peerdb-ui, keep-fips, langfuse, keep...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: gradle, logstash, dependency-track, scala, keycloak-config-cli, spdx-tools-java, infinispan, apicurio-registry, druid, wildfly, sonarqube, apache-nifi, strimzi-kafka-operator, flyway, tez, cass-config-builder, opensearch, akhq, spark, apache-nifi-registry...
GHSA-5QHF-9PHG-95M2 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby4.0-rails, ruby3.2-rails...
GHSA-V56Q-MH7H-F735 vulnerabilities
Vulnerabilities for packages: rancher-api-ui, vitess, nextcloud-server...
CVE-2026-59880 vulnerabilities
Vulnerabilities for packages: arangodb, rancher-api-ui, vitess, authentik-fips, keep-fips, authentik, nextcloud-server, keep...
GHSA-V396-V7Q4-X2QJ vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
GHSA-956X-8GVW-WG5V vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
CVE-2026-16221 vulnerabilities
Vulnerabilities for packages: renovate, opensearch-dashboards, prism, langfuse, argo-workflows, yaml-language-server, vitess, tileserver-gl...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
SUSE CVE-2026-59901
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
SUSE CVE-2026-59919
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...
GHSA-C97M-VXHJ-P7J6 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-serverlessrepo, crossplane-provider-aws-opensearchserverless, crossplane-provider-aws-ssoadmin-fips, crossplane-provider-aws-kinesisanalyticsv2-fips, crossplane-provider-aws-account-fips, crossplane-provider-aws-transcribe,...
CVE-2026-59889 vulnerabilities
Vulnerabilities for packages: gradle, thingsboard, logstash, zookeeper, cassandra, scala, wavefront-proxy, keycloak-config-cli, jenkins-plugin-manager, infinispan, apicurio-registry, druid, apache-tika, sonarqube, ruby3.2-jrjackson, apache-nifi, confluent-kafka, strimzi-kafka-operator, flyway,...
GHSA-C97M-VXHJ-P7J6 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3, crossplane-provider-aws-iam, gptscript, crossplane-provider-aws-route53, crossplane-provider-keycloak, dagger, crossplane-provider-aws-cloudfront, osv-scanner, crossplane-provider-aws-eks, mods, mattermost,...
CVE-2026-56852 vulnerabilities
Vulnerabilities for packages: terraform-provider-grafana, stern, kaf, op-geth, grafana-mimir, rancher-system-agent, k8s-device-plugin, pulumi-language-dotnet, snyk-cli, crossplane-provider-aws-route53, k3s, descheduler, dagger, kustomize, mcp-grafana, conftest, apisix-ingress-controller, teleport...
SUSE CVE-2026-47013
unknown...
SUSE CVE-2026-47035
unknown...
SUSE CVE-2026-50524
unknown...
SUSE CVE-2026-61666
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...