GHSA-G6V3-7XMC-W563 vulnerabilities

Vulnerabilities for packages: calico, fq, cilium, telegraf...

CVE-2026-45623 vulnerabilities

Vulnerabilities for packages: vitess, nextcloud-server, langfuse...

CVE-2026-54332 vulnerabilities

Vulnerabilities for packages: calico, fq, cilium, telegraf...

GHSA-6R28-9PPF-4HJ5 vulnerabilities

Vulnerabilities for packages: calico, fq, cilium, telegraf...

GHSA-PP92-CRG2-GFV9 vulnerabilities

Vulnerabilities for packages: ruby4.0-oauth2, gitlab-rails-ce-fips, ruby3.4-oauth2, ruby3.2-oauth2, ruby3.3-oauth2, gitlab-rails-ce...

CVE-2026-54603 vulnerabilities

Vulnerabilities for packages: ruby4.0-oauth2, gitlab-rails-ce-fips, ruby3.4-oauth2, ruby3.2-oauth2, ruby3.3-oauth2, gitlab-rails-ce...

GHSA-FRVP-7C67-39W9 vulnerabilities

Vulnerabilities for packages: gemini-cli, librechat, kibana...

GHSA-G6V3-7XMC-W563 vulnerabilities

Vulnerabilities for packages: cilium, calico, telegraf, calico-fips, fq, cilium-fips...

CVE-2026-54332 vulnerabilities

Vulnerabilities for packages: cilium, calico, telegraf, calico-fips, fq, cilium-fips...

GHSA-6R28-9PPF-4HJ5 vulnerabilities

Vulnerabilities for packages: cilium, calico, telegraf, calico-fips, fq, cilium-fips...

CVE-2026-54345 vulnerabilities

Vulnerabilities for packages: cilium, calico, telegraf, calico-fips, fq, cilium-fips...

gstreamer1-plugins-bad-free: GStreamer: Out-of-bounds read via JPEG segment length validation in VA decoder

An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length value from the bitstream without validating it against available data. A remote attacker could trick a user into opening a specially crafted JPEG file, causi...

CVE-2026-13346

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone...

CVE-2026-5056

GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-18022

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

CVE-2026-13346

pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels. This vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone...

CVE-2026-62995

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding == which are not conforming to the JOSE specifications. This leads to malleability of the JWTs when...

CVE-2026-59919

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...

CVE-2026-14266

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...