CVE-2026-38974

The python-dulwich package (specifically versions through 1.1.0 ) is vulnerable because it lacks SSH host key verification in the contrib/paramiko_vendor.py component. This flaw can potentially allow for man-in-the-middle attacks during SSH connections. Remediation is available through various di...

CVE-2019-17040

contrib/pmdb2diag/pmdb2diag.c in Rsyslog v8.1908.0 allows out-of-bounds access because the level length is mishandled...