4438 matches found
CVE-2026-54275 vulnerabilities
Vulnerabilities for packages: mlflow-fips, apache-beam-python-3.13-sdk, metaflow-service-fips, apache-beam-python-3.12-sdk, airflow, py3-vllm-cuda-13.0, authentik, mlflow, py3-vllm-cuda-12.9, dask-kubernetes-fips, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, request-1276, awx,...
CVE-2026-54274 vulnerabilities
Vulnerabilities for packages: mlflow-fips, apache-beam-python-3.13-sdk, metaflow-service-fips, apache-beam-python-3.12-sdk, airflow, py3-vllm-cuda-13.0, authentik, mlflow, py3-vllm-cuda-12.9, dask-kubernetes-fips, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, request-1276, awx,...
CVE-2026-54277 vulnerabilities
Vulnerabilities for packages: mlflow-fips, apache-beam-python-3.13-sdk, metaflow-service-fips, apache-beam-python-3.12-sdk, airflow, py3-vllm-cuda-13.0, authentik, mlflow, py3-vllm-cuda-12.9, dask-kubernetes-fips, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, request-1276, awx,...
CVE-2026-54276 vulnerabilities
Vulnerabilities for packages: mlflow-fips, apache-beam-python-3.13-sdk, metaflow-service-fips, apache-beam-python-3.12-sdk, airflow, py3-vllm-cuda-13.0, authentik, mlflow, py3-vllm-cuda-12.9, dask-kubernetes-fips, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, request-1276, awx,...
CVE-2026-54279 vulnerabilities
Vulnerabilities for packages: mlflow-fips, apache-beam-python-3.13-sdk, metaflow-service-fips, apache-beam-python-3.12-sdk, airflow, py3-vllm-cuda-13.0, authentik, mlflow, py3-vllm-cuda-12.9, dask-kubernetes-fips, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, request-1276, awx,...
CVE-2026-54280 vulnerabilities
Vulnerabilities for packages: mlflow-fips, apache-beam-python-3.13-sdk, metaflow-service-fips, apache-beam-python-3.12-sdk, airflow, py3-vllm-cuda-13.0, authentik, mlflow, py3-vllm-cuda-12.9, dask-kubernetes-fips, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, request-1276, awx,...
GHSA-G3CQ-J2XW-WF74 vulnerabilities
Vulnerabilities for packages: mlflow-fips, apache-beam-python-3.13-sdk, metaflow-service-fips, apache-beam-python-3.12-sdk, airflow, py3-vllm-cuda-13.0, authentik, mlflow, py3-vllm-cuda-12.9, dask-kubernetes-fips, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, request-1276, awx,...
GHSA-5W86-C3RQ-VJJ7 vulnerabilities
Vulnerabilities for packages: celeborn, pinot-fips, thingsboard, management-api-for-apache-cassandra-5.0...
CVE-2026-50011 vulnerabilities
Vulnerabilities for packages: celeborn, pinot-fips, thingsboard, management-api-for-apache-cassandra-5.0...
GHSA-C653-97M9-RCG9 vulnerabilities
Vulnerabilities for packages: docker-selenium, apache-pulsar-fips, elasticsearch, thingsboard, spark-kubernetes-operator, spark-kubernetes-operator-fips, infinispan, kafka, logstash-fips, request-9047-keycloak-fips, strimzi-kafka-operator-fips, druid, tez, knative-kafka-broker-fips, wazuh-indexer...
CVE-2026-50010 vulnerabilities
Vulnerabilities for packages: docker-selenium, apache-pulsar-fips, elasticsearch, thingsboard, spark-kubernetes-operator, spark-kubernetes-operator-fips, infinispan, kafka, logstash-fips, request-9047-keycloak-fips, strimzi-kafka-operator-fips, druid, tez, knative-kafka-broker-fips, wazuh-indexer...
CVE-2026-48522 vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2-fips, openstack-keystone-2025.1, openstack-placement-2026.1-fips, openstack-placement-2025.1, datadog-agent-fips, netbox, litellm, openstack-glance-2025.2, openstack-glance-2025.1-fips, metaflow-service-fips, ggshield,...
GHSA-993G-76C3-P5M4 vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2-fips, openstack-keystone-2025.1, openstack-placement-2026.1-fips, openstack-placement-2025.1, datadog-agent-fips, netbox, litellm, openstack-glance-2025.2, openstack-glance-2025.1-fips, metaflow-service-fips, ggshield,...
PT-2026-50149
Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.8.1 Description The node:crypto.checkPrime and crypto.checkPrimeSync functions failed to perform Miller-Rabin rounds when the options.checks variable was left at its default value of 0. In this state, the software only...
SUSE CVE-2026-9076
Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kekunwrapkey. Impact summary: A heap buffer over-read may trigger a crash which leads to Denial of...
SUSE CVE-2026-42766
Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...
SUSE CVE-2026-42770
Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...
SUSE CVE-2026-45447
Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS7 or S/MIME signed...