190622 matches found
GHSA-7M6H-X95X-82Q5 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...
CVE-2026-73558 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...
GHSA-HP3V-5VW7-FX9W vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-76825 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-3H96-34P3-XM76 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-76825 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-HP3V-5VW7-FX9W vulnerabilities
Vulnerabilities for packages: open-webui...
kernel: fanotify: fix false positive on permission events
A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...
Updated rest packages fix a security vulnerability
Weak random number generation in pkce implementation. CVE-2026-16615...
Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...
Updated diffutils packages fix a security vulnerability
Heap-based Buffer Overflow in GNU diffutils. CVE-2026-53910...
Updated perl-Dancer2 packages fix a security vulnerability
Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. CVE-2026-13577...
CVE-2026-95897
A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function fromnpystack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...
kernel: fanotify: fix false positive on permission events
A flaw was found in the Linux kernel's fanotify subsystem. This vulnerability allows for a bypass of permission checks because the fsnotifygetmarksafe function may incorrectly return false for marks on unrelated groups. This could enable an attacker to perform unauthorized actions by circumventin...
CVE-2026-95897
A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function fromnpystack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...
SUSE CVE-2026-19033
For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to ...
SUSE CVE-2026-19662
An attacker may be able to cause a named resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, a...
SUSE CVE-2026-19667
If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...
SUSE CVE-2026-19668
A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-records-per-type" and "max-types-per-name" help mitigate the exposure. This issue affects BIND 9 versions 9.11.0 through...
SUSE CVE-2026-75029
In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...