GHSA-68VW-XV3C-52VP vulnerabilities

Vulnerabilities for packages: expat...

GHSA-V9PM-V9P5-H96X vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-6519 vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2021-20255 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-3QX7-FF8P-6J2R vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-6505 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-93QH-VWRM-C5PW vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-R8QX-5VFX-8W6R vulnerabilities

Vulnerabilities for packages: expat...

GHSA-JHV6-83WH-9VJ5 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-68VW-XV3C-52VP vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56404 vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56131 vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56409 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-XQW9-F65G-5QXW vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56408 vulnerabilities

Vulnerabilities for packages: expat...

GHSA-V2J6-3Q6Q-GM3G vulnerabilities

Vulnerabilities for packages: expat...

CVE-2026-56769 Huly Platform - Server-Side Request Forgery via /import Endpoint

Huly Platform through 0.7.423, fixed in commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspace users to make arbitrary server requests. Attackers can exploit this by supplying malicious URLs to fetch internal...

CVE-2026-54679

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

CVE-2026-54679

CVE-2026-54679 affects the jq tool prior to version 1.8.2 on 32-bit systems. The vulnerability is in jvp_string_append where an integer overflow could trigger a massive buffer overrun, with a local attack vector and potential high impact on availability as described in the CVE. The issue is fixed...

CVE-2026-54679 jq: potential integer overflow in jvp_string_append

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...