CVE-2026-46038

net: qrtr: ns: Free the node during ctrlcmdbye...

CVE-2026-46056

Bluetooth: hcievent: fix potential UAF in SSP passkey handlers...

CVE-2026-45959

crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree...

CVE-2026-48710

Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header...

CVE-2026-42013

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...

CVE-2026-42015

A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of...

CVE-2026-42012

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...

CVE-2026-5260

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...

GHSA-JGGG-4JG4-V7C6 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, renovate, langfuse, vitess, pulumi...

GHSA-HFFM-XVC3-VPRC vulnerabilities

Vulnerabilities for packages: renovate...

CVE-2026-6951 vulnerabilities

Vulnerabilities for packages: renovate...

CVE-2026-45740 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, renovate, langfuse, vitess, pulumi...

GHSA-Q8MJ-M7CP-5Q26 vulnerabilities

Vulnerabilities for packages: saf, code-server, sqlpad, kubeflow-pipelines, renovate, thingsboard, opensearch-dashboards, kubeflow-centraldashboard, argo-workflows, langfuse, tileserver-gl, prism, json-server...

GHSA-HFFM-XVC3-VPRC vulnerabilities

Vulnerabilities for packages: renovate...

CVE-2026-6951 vulnerabilities

Vulnerabilities for packages: renovate...

CVE-2026-8723 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubescape-grype-offline-db, tileserver-gl-fips, thingsboard, tileserver-gl, gitlab-rails-ce-fips, langfuse-fips, sqlpad, wazuh-dashboard-fips, arangodb, unleash, kubeflow-pipelines, pelias-api, opensearch-dashboards-fips, wazuh-dashboard, langfuse,...

GHSA-Q8MJ-M7CP-5Q26 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubescape-grype-offline-db, tileserver-gl-fips, thingsboard, tileserver-gl, gitlab-rails-ce-fips, langfuse-fips, sqlpad, wazuh-dashboard-fips, arangodb, unleash, kubeflow-pipelines, pelias-api, opensearch-dashboards-fips, wazuh-dashboard, langfuse,...

CVE-2026-41712 vulnerabilities

Vulnerabilities for packages: camunda, camunda-zeebe...

GHSA-Q62F-H9X2-GCQC vulnerabilities

Vulnerabilities for packages: camunda, camunda-zeebe...

USN-8310-1 linux-azure, linux-azure-6.17 vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 Several security issues were discovered in th...