Important: Red Hat Security Advisory: RHSA: Submariner 0.19.4 - bug fix and enhancement update

Submariner 0.19 packages that fix various bugs and add various enhancements that are now available for Red Hat Advanced Cluster Management for Kubernetes version 2.12. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CV...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

GHSA-7MPR-5M44-H73R markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

PT-2025-17965

Name of the Vulnerable Software and Affected Versions python-markdownify aka markdownify versions prior to 0.14.1 Description The issue allows large headline prefixes, such as , in addition to the standard through tags. This can cause excessive memory consumption. Recommendations For versions pri...

python-markdownify 安全漏洞

python-markdownify is a tool for converting HTML to Markdown by Matthew Dapena-Tretter, an individual developer. A security vulnerability exists in python-markdownify versions prior to 0.14.1, which stems from support for oversized title prefixes, which may lead to memory consumption...

CVE-2025-46656

CVE-2025-46656 affects python-markdownify (markdownify) prior to 0.14.1. The flaw allows oversized heading prefixes (e.g., ) which can trigger excessive memory consumption when processing HTML to Markdown. Impact is Low (availability impact listed as Low in CVSS data; local attack vector with low...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

CVE-2025-46656

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

Denial Of Service (DoS)

github.com/traefik/traefik is vulnerable to Denial Of Service DoS. The vulnerability is due to improper input validation and insufficient handling of malformed tokens during parsing, allows the attacker to exploit the system by sending a crafted token that triggers excessive memory consumption...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rekor (SUSE-SU-2025:1332-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1332-1 advisory. - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many...

Important: Red Hat Security Advisory: Multicluster Engine for Kubernetes 2.7.4 security updates

Multicluster engine for Kubernetes v2.7.4 General Availability release, with updates to container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SUSE-SU-2025:1333-1 Security update for cosign

This update for cosign fixes the following issues: - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...

SUSE-SU-2025:1332-1 Security update for rekor

This update for rekor fixes the following issues: - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many headers bsc1236519 - CVE-2024-6104: rekor: hashicorp/go-retryablehttp: Fixed sensitive information disclosure inside log file bsc1227053 -...

Amazon Linux 2 : containerd (ALASDOCKER-2025-055)

The version of containerd installed on the remote host is prior to 1.7.27-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2025-055 advisory. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including suppo...

Amazon Linux 2 : docker (ALASDOCKER-2025-056)

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-056 advisory. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

Important: Red Hat Security Advisory: VolSync 0.11.2 security fixes and enhancements for RHEL 9

VolSync v0.11.2 general availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

K000150879: OpenSSH vulnerability CVE-2025-26466

Security Advisory Description A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep...