144156 matches found
CVE-2026-46108 affecting package kernel for versions less than 6.6.141.1-1
CVE-2026-46108 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-46107 affecting package kernel for versions less than 6.6.141.1-1
CVE-2026-46107 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-46131 affecting package kernel for versions less than 6.6.141.1-1
CVE-2026-46131 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-46031 affecting package kernel for versions less than 6.6.141.1-1
CVE-2026-46031 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...
Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update
An update for openstack-keystone is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the YAML processing. An attacker can execute arbitrary code by supplying crafted YAML input that triggers unsafe class loading during operations such as CloudFormation deployments or CloudFoundry...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation via the getUsdtInfo function in the USDT note parser. An attacker can cause the process to crash or exhaust memory by supplying a crafted ELF file with manipulated note sizes. This is only exploitable if a gadg...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: vitess, prism, node-gyp, npm, code-server, saf, renovate...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: vitess, prism, node-gyp, npm, code-server, saf, renovate...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: vitess, prism, node-gyp, npm, code-server, saf, renovate...
UBUNTU-CVE-2026-54293
NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10.0-rc1, nltk.data.load in NLTK is vulnerable to path traversal via URL-encoded path separators and traversal segments...
UBUNTU-CVE-2026-50169
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...
CVE-2026-54288 Hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.25, the Body Limit Middleware trusts the request's Content-Length header to decide whether a body is within the limit. On AWS Lambda API Gateway v1/v2, ALB, VPC Lattice, and Lambda@Edge the body is...
UBUNTU-CVE-2026-49241
The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Service VS Code extension reads the custom TypeScript SDK paths typescript.tsdk and js/ts.tsdk.path directly from workspace configurations...
Important: Red Hat Security Advisory: OpenShift Virtualization v4.22 Images
Red Hat OpenShift Virtualization release v4.22 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...
CVE-2026-8823
Mattermost versions 11.7.x = 11.7.0, 10.11.x = 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-privileged administrator to degrade arbitrary bot accounts via the standard demote-user API.. Mattermost Advisory ID: MMSA-2026-00669...
EUVD-2026-38248
Mattermost versions 11.7.x = 11.7.0, 10.11.x = 10.11.17 fail to enforce bot-specific permission checks on the user active status endpoint, which allows a User Manager with user management write access but no Integrations access to deactivate bot accounts via the PUT /api/v4/users/id/active API...
GHSA-39J6-789Q-QXVH
creationtimestamp| type| source ---|---|--- 2026-06-22 13:09:18+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mouxgsffum2z...
Important: Red Hat Security Advisory: evince security update
An update for evince is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...