CVE-2026-24515 affecting package expat for versions less than 2.6.4-3

CVE-2026-24515 affecting package expat for versions less than 2.6.4-3. A patched version of the package is available...

CVE-2026-24401 affecting package avahi for versions less than 0.8-5

CVE-2026-24401 affecting package avahi for versions less than 0.8-5. A patched version of the package is available...

CVE-2025-55131 affecting package nodejs18 for versions less than 18.20.3-11

CVE-2025-55131 affecting package nodejs18 for versions less than 18.20.3-11. A patched version of the package is available...

CVE-2026-0990 affecting package libxml2 for versions less than 2.10.4-10

CVE-2026-0990 affecting package libxml2 for versions less than 2.10.4-10. A patched version of the package is available...

CVE-2025-68119 affecting package msft-golang for versions less than 1.24.12-1

CVE-2025-68119 affecting package msft-golang for versions less than 1.24.12-1. A patched version of the package is available...

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

WordPress Hubbub Lite plugin < 1.32.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Tycho Niestadt in WordPress Plugin Hubbub Lite versions 1.32.0...

WordPress Relevanssi Premium plugin < 2.25.0 - Unauthenticated Private/Draft Post Disclosure vulnerability

Unauthenticated Private/Draft Post Disclosure vulnerability discovered by Krzysztof Zając CERT PL in WordPress Plugin Relevanssi Premium versions 2.25.0...

AZL-76827 CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76935 CVE-2025-47911 affecting package keda for versions less than 2.4.0-32

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76983 CVE-2025-47911 affecting package prometheus-adapter for versions less than 0.10.0-19

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76824 CVE-2025-47911 affecting package cert-manager for versions less than 1.11.2-27

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76848 CVE-2025-47911 affecting package cri-tools for versions less than 1.29.0-9

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76944 CVE-2025-47911 affecting package kubernetes for versions less than 1.28.4-25

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

firefox: thunderbird: Mitigation bypass in the DOM: Security component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

firefox: thunderbird: Information disclosure in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Networking component...

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

firefox: thunderbird: Use-after-free in the JavaScript: GC component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

firefox: thunderbird: Incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...