GHSA-MC57-H6J3-3HMV vulnerabilities

Vulnerabilities for packages: dapr...

CVE-2026-46384 vulnerabilities

Vulnerabilities for packages: dapr...

GHSA-W8J3-PQ8G-8M7W vulnerabilities

Vulnerabilities for packages: dapr...

CVE-2026-46385 vulnerabilities

Vulnerabilities for packages: dapr...

[SECURITY] Fedora 43 Update: doctl-1.164.0-1.fc43

The official command line interface for the DigitalOcean API...

httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime

A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...

[SECURITY] Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

SUSE CVE-2026-54787

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...

resource-agents security update

4.9.0-54.36 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598...

CVE-2026-67864

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component...

CVE-2026-67869

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against runtime-resolved InputArguments metadata...

osbuild-composer security update

175-1.0.1 - Track github upstream...

freerdp security update

2:3.10.3-12.7 - Add codecID checks for CACHEBITMAPV3ORDER CVE-2026-55827 - Fix boundary checks in gdiBitmapDecompress CVE-2026-55827 Resolves: RHEL-194327...

CVE-2026-67863

In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UASubscriptionlocalPublish continues to use the current UANotification after a callback invokes UAServerdeleteMonitoredItem for the current local MonitoredItem. This allows a...

httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies

A flaw was found in httplib2, a Python HTTP client library. This vulnerability allows a malicious or compromised HTTP server to send a small compressed data payload that, when decompressed by httplib2, expands to an extremely large size in memory. This unbounded decompression can lead to a Denial...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: graalvm, langfuse-fips, sqlpad, wazuh-dashboard-fips, kibana, unleash-fips, opensearch-dashboards, opensearch-dashboards-fips, pulumi, kubeflow-pipelines, npm, langfuse, actions-runner, librechat, code-server, prism, lerna, renovate, unleash-proxy, unleash,...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: graalvm, langfuse-fips, sqlpad, wazuh-dashboard-fips, kibana, unleash-fips, opensearch-dashboards, opensearch-dashboards-fips, pulumi, kubeflow-pipelines, npm, langfuse, actions-runner, librechat, code-server, prism, lerna, renovate, unleash-proxy, unleash,...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: graalvm, langfuse-fips, sqlpad, wazuh-dashboard-fips, kibana, unleash-fips, opensearch-dashboards, opensearch-dashboards-fips, pulumi, kubeflow-pipelines, npm, langfuse, actions-runner, librechat, code-server, prism, lerna, renovate, unleash-proxy, unleash,...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: graalvm, langfuse-fips, sqlpad, wazuh-dashboard-fips, kibana, unleash-fips, opensearch-dashboards, opensearch-dashboards-fips, pulumi, kubeflow-pipelines, npm, langfuse, actions-runner, librechat, code-server, prism, lerna, renovate, unleash-proxy, unleash,...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: graalvm, langfuse-fips, sqlpad, wazuh-dashboard-fips, kibana, unleash-fips, opensearch-dashboards, opensearch-dashboards-fips, pulumi, kubeflow-pipelines, npm, langfuse, actions-runner, librechat, code-server, prism, lerna, renovate, unleash-proxy, unleash,...