GHSA-V74W-7MR3-4QG3 vulnerabilities

Vulnerabilities for packages: thingsboard, tez, management-api-for-apache-cassandra-5.0...

GHSA-R292-9MHP-454M vulnerabilities

Vulnerabilities for packages: node-gyp, code-server, pulumi, npm, lerna, renovate, sqlpad, prism, saf, kubeflow-centraldashboard, opensearch-dashboards...

CVE-2026-57497 vulnerabilities

Vulnerabilities for packages: spegel, ipfs-cluster, k3s, kubo...

GHSA-G35J-M5XG-VH3Q vulnerabilities

Vulnerabilities for packages: spegel, ipfs-cluster, k3s, kubo...

GHSA-JPCW-4WR7-C3VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, gitness, crossplane-provider-aws-cloudfront, terraform-provider-grafana, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs,...

GHSA-R277-6W6Q-XMQW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, gitness, crossplane-provider-aws-cloudfront, terraform-provider-grafana, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs,...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: opensearch, wildfly, akhq, apicurio-registry, logstash, debezium-connector-ibmi, debezium, cassandra-reaper, strimzi-kafka-operator, sonarqube, debezium-connector-informix, debezium-connector-spanner, zipkin, druid, kafka, cassandra, apache-pulsar, spark,...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: opensearch, wildfly, akhq, apicurio-registry, logstash, debezium-connector-ibmi, debezium, cassandra-reaper, strimzi-kafka-operator, sonarqube, debezium-connector-informix, debezium-connector-spanner, zipkin, druid, kafka, cassandra, apache-pulsar, spark,...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: traccar-fips, cassandra-reaper, apache-nifi, opensearch, strimzi-kafka-operator-fips, debezium-connector-ibmi, apache-pulsar, debezium-connector-informix, debezium, dd-trace-java, conductor-fips, spark-kubernetes-operator-fips, spark-fips, confluent-kafka,...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: traccar-fips, cassandra-reaper, apache-nifi, opensearch, strimzi-kafka-operator-fips, debezium-connector-ibmi, apache-pulsar, debezium-connector-informix, debezium, dd-trace-java, conductor-fips, spark-kubernetes-operator-fips, spark-fips, confluent-kafka,...

GHSA-XQP3-JQ6G-X3QM vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-54089 vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-64386

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix queryinfo replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2queryinfoinit fails before the next send, cleanup retains the previous buffer type and...

CVE-2026-64529

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

CVE-2026-64528

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when the console flow is engaged 1. When console flow control is enabled UPFCONSFLOW, s3c24xxserialstoptx calls...

CVE-2026-64526

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnlopscomplete tsconfigpreparedata calls ethnlopsbegin, we need to call ethnlopscomplete before returning the error...

CVE-2026-64524

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolutioncount and fix WIN8 fallback A SYNTHVIDRESOLUTIONRESPONSE with resolutioncount 64 walks past the supportedresolutionSYNTHVIDMAXRESOLUTIONCOUNT array in the parse loop. Bound resolutioncount against t...

CVE-2026-64523

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshakenlacceptdoit needs the file pointer backing req-hrsk-sksocket to survive the window between handshakereqnext and the subsequent FDPREPARE and getfile. The...

CVE-2026-64520

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Bound PARTITIONINFOGETREGS copies The register-based PARTITIONINFOGET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index...

CVE-2026-64521

In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs node may deadlock. pinconfpinsshow holds pctldev-mutex, and the platform driver calls pinctrlfindgpiorangefrompin, which tries to acquire the same...