193437 matches found
GHSA-J4PR-3WM6-XX2R vulnerabilities
Vulnerabilities for packages: ruby, jruby...
GHSA-J4PR-3WM6-XX2R vulnerabilities
Vulnerabilities for packages: logstash, jruby, truffleruby, ruby...
Important Photon OS Security Update - PHSA-2026-5.0-0731
Updates of 'linux-esx', 'linux' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2026-5.0-90-0732
Updates of 'capstone' packages of Photon OS have been released...
Moderate Photon OS Security Update - PHSA-2026-4.0-0941
Updates of 'curl' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-91-0731
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2025-1323)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1323 advisory. crypto/x509: excluded subdomain constraint does not restrict wildcard SANs An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf...
Amazon Linux 2023 : glib2, glib2-devel, glib2-static (ALAS2023-2025-1349)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1349 advisory. Buffer underflow on Glib through glib/gvariant via bytestringparse or stringparse leads to OOB Write. CVE-2025-14087 Tenable has extracted the preceding description block directly from the tested produ...
Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2025-1356)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1356 advisory. When building nested elements using xml.dom.minidom methods such as appendChild that have a dependency on clearidcache the algorithm is quadratic. Availability can be impacted when building...
Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2025-1347)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1347 advisory. Use after free due to connection being cleaned up after error CVE-2025-62408 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus h...
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2026-1015)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious Package
Overview rt-live-hero is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview rt-long-form-content is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-69263
pnpm is a package manager. Versions 10.26.2 and below store HTTP tarball dependencies and git-hosted tarballs in the lockfile without integrity hashes. This allows the remote server to serve different content on each install, even when a lockfile is committed. An attacker who publishes a package...
adopt-a-doodle (>=0.0.1, <=0.0.3), bark-simulator (>=0.0.1, <=0.1.0) +109 more potentially affected by CVE-2026-22188 via panda3d (>=1.10.7, <=1.10.16)
panda3d PYPI version =1.10.7, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.1.1, =0.0.3, =0.1.0, =1.0.0, =21.2.0, =22.4.0, =20.12.0, =1.0.0, =0.0.1, =0.0.5 and more Source cves: CVE-2026-22188 Source advisory: SNYK:PYTHON-PANDA3D-14931134...
CVE-2019-12875
Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key...
RLSA-2021:1968 Moderate: mingw packages security and bug fix update
MinGW is a free and open source software development environment to create Microsoft Windows applications. The following packages have been upgraded to a later upstream version: mingw-sqlite 3.26.0.0. BZ1845475 Security Fixes: sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c...
mingw packages security and bug fix update
An update is available for mingw-binutils, mingw-bzip2, mingw-sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MinGW is a free and open source software...
Malicious Package
Overview wifzap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...