GHSA-7F6C-8CHX-2VM5 vulnerabilities

Vulnerabilities for packages: openjdk-crac, openjdk-17-openj9, openjdk-8-openj9, corretto, openjdk, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, cof-corretto...

CVE-2025-30215 vulnerabilities

Vulnerabilities for packages: nats-top, nats-server-fips, nats-top-fips, prometheus-nats-exporter, nats-server...

openSUSE Security Advisory (SUSE-SU-2025:1226-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-356W-63V5-8WF4 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-M454-3XV7-QJ85 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-RR8G-9FPQ-6WMG vulnerabilities

Vulnerabilities for packages: linkerd-await, samply, rustup, atuin, tealdeer, wash, zizmor, buck2, topgrade, sccache, yazi, zellij, kdash, pgcat, zola, netavark, oranda, zed, parseable, uv, ntpd-rs, qdrant, wadm, wasmcloud, linkerd2-proxy, pulumi-watch, yara-x, linkerd-network-validator, lychee,...

GHSA-RR8G-9FPQ-6WMG vulnerabilities

Vulnerabilities for packages: cargo-audit, linkerd-await, berg, wasmcloud, yazi, atuin, oranda, uv, zellij, ztunnel-fips, zed, geckodriver, wasmtime, efs-utils, helix, pgcat, rustup, topgrade, fnm, wizer, qdrant, linkerd-network-validator, nushell, xh, ztunnel, deno, ntpd-rs, pulumi-watch, mdbook...

GHSA-WG47-6JQ2-Q2HH vulnerabilities

Vulnerabilities for packages: minio...

Fedora 41 : upx (2025-c91006eca6)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c91006eca6 advisory. 5.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Fedora 40 : upx (2025-3f77ed652b)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3f77ed652b advisory. 5.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

GHSA-98FP-7V67-4V3Q vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-2C59-37C4-QRX5 vulnerabilities

Vulnerabilities for packages: druid...

assimp-devel-5.4.3-5.1 on GA media (moderate)

assimp-devel-5.4.3-5.1 on GA media Announcement ID: openSUSE-SU-2025:14950-1 Rating: moderate Cross-References: CVE-2025-2591 CVE-2025-2592 CVE-2025-3015 CVE-2025-3016 CVSS scores: CVE-2025-2591 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-2591 SUSE : 6.7...

Fedora 41 : rust-zincati (2025-cc269f80fa)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cc269f80fa advisory. New upstream release v0.0.30 see: https://github.com/coreos/zincati/releases/tag/v0.0.30 ---- Backport polkit rules patch for CVE-2025-27512 -...

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3

CVE-2025-30204 affecting package azcopy for versions less than 10.25.1-3. A patched version of the package is available...

CVE-2025-29786 affecting package keda for versions less than 2.14.1-4

CVE-2025-29786 affecting package keda for versions less than 2.14.1-4. A patched version of the package is available...

GHSA-54VH-QPWP-XFR9 vulnerabilities

Vulnerabilities for packages: samba...

GHSA-VR58-2W95-QCCF vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-HC5X-X2VX-497G vulnerabilities

Vulnerabilities for packages: emissary, superset...

nossrf Server-Side Request Forgery (SSRF)

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF, where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...