10213 matches found
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: ipfs-cluster, spegel, k3s, kubo...
CVE-2026-64452
In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpannhcdouncompression looks up an NHC descriptor while holding lowpannhclock. If the descriptor has no uncompress callback, the error path drops the lock before printing...
CVE-2026-64366
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...
CVE-2026-64352
In the Linux kernel, the following vulnerability has been resolved: bpf: Allow LPM map access from sleepable BPF programs trielookupelem annotates its rcudereferencecheck walks with only rcureadlockbhheld. Because rcudereferencecheckp, c resolves to "c || rcureadlockheld", this passes for XDP/NAP...
CVE-2026-64323
In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual partition's start offset straight from the on-disk VAT 2.0 header without checking it against the VAT inode size:...
CVE-2026-64278
In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is powered down On some i.MX platforms, certain I2C client drivers keep a periodic workqueue which continues to trigger I2C transfers. During system suspend/resume, there exists a ti...
GHSA-Q53C-4PRM-W95Q Shescape: Home-directory disclosure in assignment context on Unix with Dash
Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Dash, or true when the default shell is Dash, using the escape and escapeAll APIs in assignments prefixed to a command. An attacker may be able to obtain the location of the home directory and, depending on h...
GHSA-6V4M-FW66-8R4X Shescape: Path disclosure on Unix with Zsh
Impact This impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST exacerbate the problem. In certain case, an attacker can leverage home directory...
GHSA-45RX-2JWX-CXFR vulnerabilities
Vulnerabilities for packages: langfuse-fips, gemini-cli, librechat, langfuse, kibana, cadence-web...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-64645 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
CVE-2026-64209
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...
CVE-2026-59898 vulnerabilities
Vulnerabilities for packages: conductor, camunda, request-9047-keycloak-fips, s3proxy, spark-fips, trino, commercial-elasticsearch, elasticsearch, strimzi-kafka-operator-fips, apache-camel-karavan-devmode, kafka-bridge, thingsboard, apache-pulsar, apicurio-registry, kafka-bridge-fips,...
CVE-2026-55831 vulnerabilities
Vulnerabilities for packages: conductor, camunda, request-9047-keycloak-fips, s3proxy, spark-fips, trino, commercial-elasticsearch, elasticsearch, strimzi-kafka-operator-fips, apache-camel-karavan-devmode, kafka-bridge, thingsboard, apache-pulsar, apicurio-registry, kafka-bridge-fips,...
CVE-2026-56820 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez, cassandra...