CVE-2025-54468 vulnerabilities

Vulnerabilities for packages: harvester, harvester-fips...

GHSA-4G2F-XCPH-2335 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

CVE-2025-3260 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-CQP7-WF4C-3XGC vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-4PWP-CX67-5CPX vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-42183 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, kubeflow-pipelines-fips, argo-workflows, kubeflow-pipelines-driver-fips, kubeflow-pipelines...

GHSA-WPHV-VFRH-23Q5 vulnerabilities

Vulnerabilities for packages: localstack, airflow...

CVE-2026-48990 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-WPHV-VFRH-23Q5 vulnerabilities

Vulnerabilities for packages: airflow...

Linux Distros Unpatched Vulnerability : CVE-2026-14381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-53337

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bonding: fix NULL pointer dereference in bonddoioctl In bonddoioctl, slavedev is obtained via devgetbyname which can return NULL if the requested interfac...

Linux Distros Unpatched Vulnerability : CVE-2026-53331

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slimbus: qcom-ngd-ctrl: Avoid ABBA on txlock/ctrl-lock During the SSR/PDR down notification the txlock is taken with the intent to provide synchronization with...

Linux Distros Unpatched Vulnerability : CVE-2026-57963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the createconfig path in awscli/customizations/codedeploy/register.py. An attacker can read the CodeDeploy on-premises configuration file by accessing it on the same Unix-like ho...

CVE-2026-33343 vulnerabilities

Vulnerabilities for packages: juicefs...

GHSA-Q64V-9MH2-3XCQ vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-29FM-4HPP-5P7G vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-RWCR-6886-9VFQ vulnerabilities

Vulnerabilities for packages: firefox-esr...

CVE-2024-3865 vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-X945-JM33-F3QV vulnerabilities

Vulnerabilities for packages: firefox-esr...