GHSA-RF74-V2FM-23PW vulnerabilities

Vulnerabilities for packages: label-studio, apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, apache-beam-python-3.12-sdk, open-webui, py3-nltk, kubeflow-pipelines-visualization-server, nemo...

CVE-2014-125112

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when...

CVE-2026-32748

Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...

Linux Distros Unpatched Vulnerability : CVE-2026-4897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary vi...

CVE-2026-33223 vulnerabilities

Vulnerabilities for packages: kine, k3s, nats, rke2-runtime, prometheus-nats-exporter-fips, nats-fips, telegraf, rke2-runtime-fips, milvus, nats-top-fips, nats-top, prometheus-nats-exporter...

GHSA-X6G4-F6Q3-FQVV vulnerabilities

Vulnerabilities for packages: kine, k3s, nats, rke2-runtime, prometheus-nats-exporter-fips, nats-fips, telegraf, rke2-runtime-fips, milvus, nats-top-fips, nats-top, prometheus-nats-exporter...

CVE-2026-33246 vulnerabilities

Vulnerabilities for packages: kine, k3s, nats, rke2-runtime, prometheus-nats-exporter-fips, nats-fips, telegraf, rke2-runtime-fips, milvus, nats-top-fips, nats-top, prometheus-nats-exporter...

CVE-2026-33215 vulnerabilities

Vulnerabilities for packages: kine, k3s, nats, rke2-runtime, prometheus-nats-exporter-fips, nats-fips, telegraf, rke2-runtime-fips, milvus, nats-top-fips, nats-top, prometheus-nats-exporter...

GHSA-V722-JCV5-W7MC vulnerabilities

Vulnerabilities for packages: kine, k3s, nats, rke2-runtime, prometheus-nats-exporter-fips, nats-fips, telegraf, rke2-runtime-fips, milvus, nats-top-fips, nats-top, prometheus-nats-exporter...

CVE-2026-33219 vulnerabilities

Vulnerabilities for packages: kine, k3s, nats, rke2-runtime, prometheus-nats-exporter-fips, nats-fips, telegraf, rke2-runtime-fips, milvus, nats-top-fips, nats-top, prometheus-nats-exporter...

SUSE CVE-2026-21717

A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the...

MAL-2026-2200 Malicious code in json-lucide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d05056fbe7eca08a66d7297aac2b03763073361f0cb33c238a4463f64a0867 The package json-lucide was found to contain malicious code. Source: ghsa-malware 30298bc83e4bdadd246cfdec7006f865348448a5147e0a8258cd4d4feaf7b27f An...

MAL-2026-2199 Malicious code in omicnavigatorwebapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327bf8baa88f730faf7a3b96a6acc527533ef6b39c5274246cfc00c72d6c30d2 The package omicnavigatorwebapp was found to contain malicious code. Source: ghsa-malware...

CVE-2026-23358

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it goes to out label for error handling. There it could make decision based on uninitialized hive pointer and could result i...

CVE-2026-23281

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbsfreeadapter The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before the structure is freed. This is incorrect because timerdelete does n...

CVE-2026-33169 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, gitlab-rails-ce-fips, ruby3.4-rails, cinc-auditor, ruby3.2-rails, kube-logging-operator...

GHSA-CG4J-Q9V8-6V38 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, gitlab-rails-ce-fips, ruby3.4-rails, cinc-auditor, ruby3.2-rails, kube-logging-operator...

EUVD-2026-15161

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to enumerate a user's installed apps...

EUVD-2026-15129

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash...

EUVD-2026-15148

An information leakage was addressed with additional validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to access sensitive user data...