SUSE CVE-2026-58417

REST API exposes organization membership of private organizations to public...

SUSE CVE-2026-58418

SSRF via HTTP Redirect in Repository Migration...

SUSE CVE-2026-58421

Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service...

SUSE CVE-2026-58425

OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation...

SUSE CVE-2026-58427

Private org member list leaked via /members API endpoint - incomplete fix for PR 38145...

SUSE CVE-2026-58431

Public-only API token restriction is not enforced on team API routes...

SUSE CVE-2026-58434

Private Repository Metadata Remains Accessible After Access Revocation...

SUSE CVE-2026-58438

Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...

SUSE CVE-2026-58439

Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...

SUSE CVE-2026-58442

Repository migration SSRF via multi-answer DNS allow-list bypass...

SUSE CVE-2026-58443

Public-only repository tokens can update private PR head branches...

SUSE CVE-2026-58445

Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API...

SUSE CVE-2026-58507

Private Repository Existence Disclosure via go-get Meta Endpoint...

SUSE CVE-2026-59766

unknown...

SUSE SLES15 Security Update : podman (SUSE-SU-2026:3536-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3536-1 advisory. - CVE-2026-55686: specially crafted image where the WORKDIR path contains a symlink allows for directory creation and ownership...

SUSE SLED15 / SLES15 Security Update : python-ujson (SUSE-SU-2026:3539-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3539-1 advisory. This update for python-ujson fixes the following issue: - CVE-2026-44660: memory leak in ujson.dump on write failure ca...

SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2026:3534-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3534-1 advisory. - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713. Tenable has extracted the preceding description block directly fro...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:3535-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3535-1 advisory. - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713. Tenable has extracted the preceding description block directly fro...

SUSE-SU-2026:23229-1 Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. - CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution ...

SUSE-SU-2026:23228-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues - CVE-2026-54058: out-of-bounds read via attacker-controlled row stride on mmap path bsc1271419. - CVE-2026-59197: heap out-of-bounds write in ImageFilter.RankFilter via integer overflow in ImagingExpand bsc1271418. - CVE-2026-59198:...