CVE-2026-43126

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA Open Sound System OSS mixer component. This vulnerability arises when pending calls to kernel control operations are not properly handled during device disconnection, leading to potential Use-After-Free UAF scenarios. A...

trying-to-make-a-website-scanner

trying-to-make-a-website-scanner Web Vulnerability Scanner —...

CVE-2026-44902

creationtimestamp| type| source ---|---|--- 2026-05-06 15:40:57+00:00| published-proof-of-concept| https://github.com/open-telemetry/opentelemetry-js/security/advisories/GHSA-q7rr-3cgh-j5r3 2026-05-27 17:02:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtye5ufzl2t...

CVE-2026-41481 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-41313 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-41314 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-41168 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-41312 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-41182 vulnerabilities

Vulnerabilities for packages: open-webui, langfuse...

CVE-2026-42215 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, checkov...

CVE-2026-42284 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, checkov...

CVE-2026-41205 vulnerabilities

Vulnerabilities for packages: airflow, superset, mlflow, jupyter-base-notebook, open-webui...

CVE-2026-41425 vulnerabilities

Vulnerabilities for packages: airflow, open-webui, mlflow...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gomplate, kargo, xeol, grype, pulumi-language-yaml, dagger, act, skaffold, kyverno, zarf, gitaly, cerbos, argo-workflows, pulumi, syft, terragrunt, trivy-operator, pulumi-language-dotnet, apko, bom, nuclei, osv-scanner, flux-source-controller, scorecard, tfsec,...

EUVD-2026-27663

In the Linux kernel, the following vulnerability has been resolved: hfsplus: pretend special inodes as regular files Since commit af153bb63a33 "vfs: catch invalid modes in mayopen" requires any inode be one of SIFDIR/SIFLNK/SIFREG/SIFCHR/SIFBLK/ SIFIFO/SIFSOCK type, use SIFREG for special inodes...

EUVD-2026-27733

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix post open error handling Closing a queue doesn't guarantee that all associated page pools are terminated right away, let the refcounting do the work instead of releasing the zcrx ctx directly...

EUVD-2026-27690

In the Linux kernel, the following vulnerability has been resolved: ima: verify the previous kernel's IMA buffer lies in addressable RAM Patch series "Address page fault in imarestoremeasurementlist", v3. When the second-stage kernel is booted via kexec with a limiting command line such as "mem="...

CVE-2026-43268

In the Linux kernel, the following vulnerability has been resolved: hfsplus: pretend special inodes as regular files Since commit af153bb63a33 "vfs: catch invalid modes in mayopen" requires any inode be one of SIFDIR/SIFLNK/SIFREG/SIFCHR/SIFBLK/ SIFIFO/SIFSOCK type, use SIFREG for special inodes...

CVE-2026-43174

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix post open error handling Closing a queue doesn't guarantee that all associated page pools are terminated right away, let the refcounting do the work instead of releasing the zcrx ctx directly...

SUSE-SU-2026:1715-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives bsc1259611. - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF bsc1261969. -...