SUSE CVE-2026-55512

unknown...

SUSE CVE-2026-55513

unknown...

SUSE CVE-2026-55636

unknown...

CVE-2026-12996

A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...

SUSE CVE-2026-55701

unknown...

SUSE CVE-2026-55770

unknown...

SUSE CVE-2026-55828

unknown...

SUSE CVE-2026-55866

unknown...

SUSE CVE-2026-55887

unknown...

SUSE CVE-2026-56443

Token public-only scope bypassed on Limited-visibility owners Repository + Package categories - residual after CVE-2026-25714 / PR 37118...

SUSE CVE-2026-56654

Privilege Escalation via Access Token Scope Escalation in API...

SUSE CVE-2026-56657

Gitea SSH Key Parser Denial of Service...

SUSE CVE-2026-56755

Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...

SUSE CVE-2026-56846

A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion. This vulnerability affects Node.js 24.x and 22.x...

SUSE CVE-2026-56848

A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

SUSE CVE-2026-57886

Cross-repository issue/comment attachment re-linking can expose private attachment content...

SUSE CVE-2026-57894

Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration...

SUSE CVE-2026-57897

Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs...

SUSE CVE-2026-58041

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...

SUSE CVE-2026-58042

A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...