GHSA-93WV-JW9V-4972 vulnerabilities

Vulnerabilities for packages: keycloak, druid, spark, zipkin, apache-pulsar, neo4j, kserve-modelmesh, celeborn...

GHSA-34RH-WP3J-6CXC vulnerabilities

Vulnerabilities for packages: kubo, ipfs-cluster, k3s, spegel...

CVE-2026-54909 vulnerabilities

Vulnerabilities for packages: kubo, ipfs-cluster, k3s, spegel...

CVE-2026-54908 vulnerabilities

Vulnerabilities for packages: telegraf, ipfs-cluster, k3s, spegel, kubo...

GHSA-WG4G-WM44-CH5J vulnerabilities

Vulnerabilities for packages: telegraf, ipfs-cluster, k3s, spegel, kubo...

[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43

Native bindings to the libgit2 library...

CVE-2026-54787 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, trivy-operator, falcoctl, flux-source-controller, crossplane, skaffold, tekton-chains, ko, kyverno-notation-aws, kubescape, spire-server, policy-controller, zarf, tkn, kyverno, trivy, goreleaser, zot, aactl...

GHSA-WQQC-JJCQ-VFXM vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, trivy-operator, falcoctl, flux-source-controller, crossplane, skaffold, tekton-chains, ko, kyverno-notation-aws, kubescape, spire-server, policy-controller, zarf, tkn, kyverno, trivy, goreleaser, zot, aactl...

GHSA-WG4G-WM44-CH5J vulnerabilities

Vulnerabilities for packages: ipfs-cluster, rke2-runtime-fips, kubo, rke2-runtime, kubo-fips, telegraf, spegel, spegel-fips, ipfs-cluster-fips, livekit-egress, k3s...

CVE-2026-54908 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, rke2-runtime-fips, kubo, rke2-runtime, kubo-fips, telegraf, spegel, spegel-fips, ipfs-cluster-fips, livekit-egress, k3s...

GHSA-34RH-WP3J-6CXC vulnerabilities

Vulnerabilities for packages: ipfs-cluster, stunnerd, rke2-runtime-fips, kubo, rke2-runtime, kubo-fips, spegel, spegel-fips, ipfs-cluster-fips, livekit-egress, k3s...

CVE-2026-54909 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, stunnerd, rke2-runtime-fips, kubo, rke2-runtime, kubo-fips, spegel, spegel-fips, ipfs-cluster-fips, livekit-egress, k3s...

GHSA-WQQC-JJCQ-VFXM vulnerabilities

Vulnerabilities for packages: falcoctl, ko, kubescape, kubescape-server, spire-server-fips, policy-controller-fips, kyverno-notation-aws, crossplane-fips, zarf-fips, tkn-fips, goreleaser, tekton-chains-fips, cloudbeat-fips, kyverno, trivy-fips, neuvector-sigstore-interface, tkn, crossplane,...

CVE-2026-54787 vulnerabilities

Vulnerabilities for packages: falcoctl, ko, kubescape, kubescape-server, spire-server-fips, policy-controller-fips, kyverno-notation-aws, crossplane-fips, zarf-fips, tkn-fips, goreleaser, tekton-chains-fips, cloudbeat-fips, kyverno, trivy-fips, neuvector-sigstore-interface, tkn, crossplane,...

CVE-2026-67302

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-67302

FreeRDP before 3.29.0 affected versions = 3.28.0 contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecamdevprocessstartstreamsrequest parses a server-controlled CAMMEDIATYPEDESCRIPTION from a StartStreamsRequest PDU but validates only Format and Flags, not...

CVE-2026-67292

FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport libfreerdp/core/gateway/websocket.c. The client's Pong reply reuses a fixed 1024-byte response stream whose length is not sealed to the actual received Ping payload, so a malicious...

CVE-2026-67300

FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOWSTATEORDER and NOTIFYICONSTATEORDER when AsyncUpdate is enabled. When a malicious or compromised RDP server sends crafted update orders, the message proxy shallow-copies...

CVE-2026-67306

FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...

CVE-2026-67312

axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...