CVE-2026-54621 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-32RQ-JHR7-M3HH vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-3FVR-2JW6-CRQ4 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-67355 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-67339 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-67353 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

CVE-2026-67354 vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

GHSA-MQQ9-GXG5-M58G vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-32RQ-JHR7-M3HH vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-67354 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-67339 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-3FVR-2JW6-CRQ4 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-67353 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-67355 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-MJRX-74JH-7XGW vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-6FHJ-CGMM-XFX6 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-6267 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-70368

A stack-based out-of-bounds read vulnerability exists in the "svlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an...

CVE-2026-70367

A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...