GHSA-HRH9-M4MW-766H vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-FHC2-C9VH-XRG3 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-54W4-5MRC-HFP8 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-16402 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-16401 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-XJFQ-6RHW-XJ37 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-CPFR-CVMP-53MX vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-XJ6V-33Q6-WVXJ vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-QCXP-GM7M-4J5V vulnerabilities

Vulnerabilities for packages: apicurio-registry...

[SECURITY] Fedora 43 Update: pack-0.40.8-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

RHCOS 4 : OpenShift Container Platform 4.15.67 (RHSA-2026:43225)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:43225 advisory. - google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation...

PT-2026-66778

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

GHSA-X445-F3H2-J279 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, langfuse...

GHSA-R28C-9Q8G-F849 vulnerabilities

Vulnerabilities for packages: nextcloud-server, jitsucom-jitsu, vitess, langfuse...

CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

SUSE CVE-2026-17829

Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17855

Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17931

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-17987

Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

SUSE CVE-2026-18015

Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...