CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: nrdot-collector-k8s, beats, karma-fips, telegraf, minio-operator, cloud-sql-proxy-fips, opentelemetry-operator, opentelemetry-collector-fips, trillian-fips, certificate-transparency-fips, google-cloud-otel-ops-collector, minio-operator-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: pgwatch, rke2-cloud-provider, seaweedfs-rocksdb-fips, commercial-chainloop-backend, spicedb, spire-server-fips, rke2-runtime-fips, hydra-fips, goose-fips, bento-fips, wal-g, caddy-fips, temporal-server, splunk-otel-collector-fips, amass, bento, flyte, harbor-fips,...

Google's Android Apps Get Public Verification to Stop Supply Chain Attacks

Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain attacks. "This new public ledger ensures the Google apps on your device are exactly what we intended to build and distribute," Google's product and security teams said. The initiati...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: ctop, flux, juicefs-csi-driver, opa-envoy, dapr, harbor, logstash-exporter, fscrypt, docker-machine-driver-harvester, aws-node-termination-handler, pulumi-language-yaml, oras, spiffe-helper, smokescreen, git-lfs, witness, crossplane-provider-azure-managedidentity,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: runc, grafana-pyroscope, mesosphere-vsphere-csi, kwok, flux, juicefs-csi-driver, crossplane-provider-azure-sql, opa-envoy, crossplane-provider-azure-storage, dapr, harbor, kargo, terraform-provider-random, crossplane, fscrypt, docker-machine-driver-harvester,...

gnutls: Vulnerability in GnuTLS SCT extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

CLEANSTART-2026-YR14817 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68119, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.3.2-r0

Multiple security vulnerabilities affect the certificate-transparency-trillian-ctserver package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-24122

Cosign

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: openfga, minio, tkn, chezmoi, kots, aactl, step-kms-plugin, timestamp-authority, dex, openbao, kine, sqlexporter, terragrunt, witness, crossplane-provider-sql, telegraf, argo-workflows, sftpgo, spire-server, loki, cerbos, fulcio, caddy, kyverno-policy-reporter, dgrap...

Siemens SIMATIC S7-1500 Improper Certificate Validation (CVE-2025-32989)

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

Astra Linux – Vulnerability in gnutls28

A heap-buffer-overread vulnerability was discovered in GnuTLS regarding its handling of the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

Security Bulletin: Allocation of resources without limits, heap-buffer-overread, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency service is vulnerable to allocation of resources without limits, heap-buffer-overread, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-32988 DESCRIPTION: A flaw was found in GnuTLS. A double-free vulnerability...

EUVD-2017-2993

Malware in sbrugna...

gnutls: Vulnerability in GnuTLS SCT extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

gnutls: Vulnerability in GnuTLS SCT extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

EUVD-2025-20927

Malicious code in bioql PyPI...

gnutls: Vulnerability in GnuTLS SCT extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

gnutls: Vulnerability in GnuTLS SCT extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

Security update for gnutls

This update for gnutls fixes the following issues: CVE-2025-32988: Fixed double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName bsc1246232. CVE-2025-32989: Fixed heap buffer overread when handling the CT SCT extension during X.509 certificate...

TencentOS Server 4: gnutls (TSSA-2025:0540)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0540 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...