GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: gitaly-fips, rancher-fleet, gitaly, crossplane-fips, mapotf, tfsec, act, rancher-fleet-fips, src-fingerprint, nfpm, grafana, pulumi-language-yaml, terragrunt, argocd-image-updater, jfrog-cli, pulumi-kubernetes-operator, argo-events, snyk-cli, gomplate-fips,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netconsole: The sumutex should be acquired before navigating the configs hierarchy. There is a race between operations that iterate over the cgchildren list and concurrent additions/removals of userdata items through configfs. Th...

CVE-2026-44310 vulnerabilities

Vulnerabilities for packages: cg...

GHSA-7RMH-48MX-2VWC vulnerabilities

Vulnerabilities for packages: cg...

GHSA-7C37-GX6W-8VC5 vulnerabilities

Vulnerabilities for packages: cg...

CVE-2026-44309 vulnerabilities

Vulnerabilities for packages: cg...

CVE-2026-44740 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, rancher-fleet, telegraf, packer-fips, gitaly, terragrunt-fips, chainloop-cli, rancher-fleet-fips, kyverno-fips, rclone-fips, teleport, cerbos, grafana, terragrunt, flux, nemo, syft, seaweedfs-rocksdb, external-secrets-operator-fips, packer,...

GHSA-M3XC-H892-GGX6 vulnerabilities

Vulnerabilities for packages: chainloop-cli-fips, rancher-fleet, telegraf, packer-fips, gitaly, terragrunt-fips, chainloop-cli, rancher-fleet-fips, kyverno-fips, rclone-fips, teleport, cerbos, grafana, terragrunt, flux, nemo, syft, seaweedfs-rocksdb, external-secrets-operator-fips, packer,...

CVE-2026-41507 Remote Code Execution (RCE) via String Literal Injection into math-codegen

math-codegen generates code from mathematical expressions. Prior to version 0.4.3, string literal content passed to cg.parse is injected verbatim into a new Function body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the...

GHSA-P6X5-P4XF-CC4R Remote Code Execution (RCE) via String Literal Injection into math-codegen

Impact String literal content passed to cg.parse is injected verbatim into a new Function body without sanitization. This allows an attacker to execute arbitrary system commands when user-controlled input reaches the parser. Any application exposing a math evaluation endpoint where user input flo...

MINI-V794-PHG5-CFCG

Bulletin has no description...

CVE-2026-25122 vulnerabilities

Vulnerabilities for packages: chainctl, dagdotdev, cg, amazon-ssm-agent...

GHSA-6P9P-Q6WH-9J89 vulnerabilities

Vulnerabilities for packages: chainctl, dagdotdev, cg, amazon-ssm-agent...

CVE-2026-25121 vulnerabilities

Vulnerabilities for packages: chainctl, dagdotdev, cg, amazon-ssm-agent...

GHSA-5G94-C2WX-8PXW vulnerabilities

Vulnerabilities for packages: chainctl, dagdotdev, cg, amazon-ssm-agent...

CVE-2025-23632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhizome Networks CG Button content-glass-button allows Reflected XSS.This issue affects CG Button: from n/a through = 1.0.5.6...

CVE-2025-68319

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...

CVE-2025-68319

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...

CVE-2025-68319 netconsole: Acquire su_mutex before navigating configs hierarchy

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...

RLSA-2025:20518 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...