266249 matches found
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: pulumi, prism, kubeflow-centraldashboard, sqlpad, code-server, node-gyp, opensearch-dashboards, renovate, saf, lerna, npm...
GHSA-R277-6W6Q-XMQW vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-route53, crossplane-provider-azure-sql, crossplane-provider-family-azure, kubevela, crossplane-provider-aws-s3, crossplane-provider-family-aws, terraform-provider-grafana, crossplane-provider-aws-cloudformation, crossplane-provider-aws-kinesis...
Updated wget packages fix security vulnerabilities
Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...
DEBIAN-CVE-2026-64509
In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...
DEBIAN-CVE-2026-64429
In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...
DEBIAN-CVE-2026-64326
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
DEBIAN-CVE-2026-64330
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdmconsumemodes In svdmconsumemodes, the SVID value is read from pmdata-svids using pmdata-svidindex as an array index without bounds validation: paltmode-svid =...
DEBIAN-CVE-2026-64323
In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual partition's start offset straight from the on-disk VAT 2.0 header without checking it against the VAT inode size:...
CVE-2026-64321
In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmetrdmaqueueconnect calls nvmetrdmafindgetdevice which acquires a reference on the returned ndev via krefget. On the path where the host queue backlog is exceeded and...
EUVD-2026-49023
In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unused loongson-rng The loongson-rng rngalg has several vulnerabilities, including not providing forward security, and a use-after-free bug due to the use of waitforcompletioninterruptible...
kernel: Fix of 43 CVEs
Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...
CVE-2026-56817 vulnerabilities
Vulnerabilities for packages: tez, management-api-for-apache-cassandra-5.0, thingsboard, celeborn...
GHSA-4QHR-G3C6-FCFX vulnerabilities
Vulnerabilities for packages: tez, management-api-for-apache-cassandra-5.0, thingsboard, celeborn...
GHSA-4W2J-M93H-CJ5J vulnerabilities
Vulnerabilities for packages: xh, zola, cargo-audit, pixi, sccache, deno, berg...
GHSA-RX9V-2FJR-MHX5 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...
GHSA-3PJW-73GF-8QR5 vulnerabilities
Vulnerabilities for packages: nacos-docker, wso2is, spark, elasticsearch, flyway, hadoop-fips, opensearch-fips, lmcache-cuda-12.8, sonarqube, apache-nifi, akhq, opensearch, jenkins, elasticsearch-fips...
GHSA-RX9V-2FJR-MHX5 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-72GW-FMMR-C4R4 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...