147133 matches found
UBUNTU-CVE-2026-61720
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk.size / SFMODSIZE - 1 without rejecting chunks smaller than one record. A crafted SF2 file containing a zero-sized DMOD chunk makes the...
ROOT-APP-NPM-GHSA-2P49-HGCM-8545 GHSA-2p49-hgcm-8545 in svgo - Patched by Root
Root has patched GHSA-2p49-hgcm-8545 in the svgo package for Root:npm. Multiple fixed versions available...
CVE-2026-72701
creationtimestamp| type| source ---|---|--- 2026-09-17 22:35:34+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-38p6-h87p-r4cg...
DEBIAN-CVE-2026-48977
OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...
CVE-2026-69089
creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w3f4-8pj2-599w...
CVE-2026-69147
creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:09+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-8pw2-6jv3-mj5j...
CVE-2026-63460
creationtimestamp| type| source ---|---|--- 2026-09-17 16:35:13+00:00| published-proof-of-concept| https://github.com/vendurehq/vendure/security/advisories/GHSA-jgm3-qmp2-c4p7...
GHSA-6J36-R6PR-59X4
creationtimestamp| type| source ---|---|--- 2026-09-17 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117287023853537355...
ROOT-APP-PYPI-GHSA-GR75-JV2W-4656 GHSA-gr75-jv2w-4656 in langchain - Patched by Root
Root has patched GHSA-gr75-jv2w-4656 in the langchain package for Root:PyPI. Multiple fixed versions available...
DEBIAN-CVE-2026-42784
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...
UBUNTU-CVE-2026-59944
Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the earlier CVE-2026-59946 binary-path hardening because Composer validates literal parent-directory segments only during dependency resolutio...
GHSA-7GCF-G7XR-8HXJ
creationtimestamp| type| source ---|---|--- 2026-09-16 08:42:54+00:00| seen| https://gist.github.com/konard/c75c144385121c66aab9af215012c487 2026-10-03 08:03:43+00:00| seen| https://gist.github.com/citadelculture/7a9642cc5c961c85323065559272c000...
CVE-2026-78130 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-WC93-H4M4-584V vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-RV8V-63HF-3GJ7 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-34F9-5V7X-JPW3 vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-693G-PPP7-3J2H vulnerabilities
Vulnerabilities for packages: strongswan...
GHSA-Q5PG-PRW5-6C62 vulnerabilities
Vulnerabilities for packages: strongswan...