GHSA-W7JW-789Q-3M8P vulnerabilities

Vulnerabilities for packages: tileserver-gl, code-server...

GHSA-XM63-5PJX-VRHP vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-R8F8-4PGH-4M8V vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-26157 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-26158 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2017-20240

Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. These versions use Perl's built-in eq comparison. Discrepancies in timing could be used to guess the underlying derived-key...

GHSA-RGXP-2HWP-JWGG vulnerabilities

Vulnerabilities for packages: open-webui, text-generation-inference, dbt-bigquery...

CVE-2026-25087 vulnerabilities

Vulnerabilities for packages: open-webui, text-generation-inference, dbt-bigquery...

CVE-2026-26158 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-R8F8-4PGH-4M8V vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-26157 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-XM63-5PJX-VRHP vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-48914

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...

CVE-2026-48068 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, langfuse, pulumi, opentelemetry-auto-instrumentations-node, cadence-web, kibana...

CVE-2026-48069 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, langfuse, pulumi, opentelemetry-auto-instrumentations-node, cadence-web, kibana...

GHSA-5375-PQ7M-F5R2 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, langfuse, pulumi, opentelemetry-auto-instrumentations-node, cadence-web, kibana...

GHSA-99F4-GRH7-6PCQ vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse-fips, langfuse, pulumi, opentelemetry-auto-instrumentations-node, cadence-web, kibana...

CVE-2026-47701 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

GHSA-CXH2-4639-VMC5 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

CVE-2026-44892

Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, the default configuration of the Http3ConnectionHandler in the Netty HTTP/3 codec lacks an enforced maximum header size limit. When a peer does not explicitly specify...