CVE-2026-42574 vulnerabilities

Vulnerabilities for packages: dagdotdev...

CVE-2026-42576 vulnerabilities

Vulnerabilities for packages: dagdotdev...

GHSA-JV87-32HW-HH99 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-34204 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-33419 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-3RH2-V3GR-35P9 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-42311 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, mlflow, superset...

CVE-2026-42038 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kubeflow-katib, prism, jitsucom-jitsu, redisinsight, kubeflow-centraldashboard, arangodb, saf, opensearch-dashboards, wazuh-dashboard-fips, awx, kibana, wazuh-dashboard, lerna, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce,...

CVE-2026-42264 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, librechat, kubeflow-katib, prism, jitsucom-jitsu, redisinsight, kubeflow-centraldashboard, saf, opensearch-dashboards, wazuh-dashboard-fips, awx, kibana, wazuh-dashboard, lerna, opensearch-dashboards-fips, nextcloud-server, gitlab-rails-ce,...

CVE-2026-41888 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, zot, gitlab-rails-ce, portieris, envoy-gateway, portieris-fips, argocd-image-updater, gitness, kots, envoy-gateway-fips, argocd-image-updater-fips...

CVE-2026-43070

In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register ID for BPFEND value tracking When a register undergoes a BPFEND byte swap operation, its scalar value is mutated in-place. If this register previously shared a scalar ID with another register e.g., after an r1...

CVE-2026-43062

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix type confusion in l2capecredreconfrsp l2capecredreconfrsp casts the incoming data to struct l2capecredconnrsp the ECRED connection response, 8 bytes with result at offset 6 instead of struct...

Malicious code in nf-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d1fc3aadbb204f6da1c0db37a6e1b540bdcc3964bd033d5657a067d7e246cc The package nf-ui-components was found to contain malicious code. Source: ghsa-malware 4ab8cac0b0cae1864121f4fd7223e6cb7bb0168d113ece4974f94aae4e2418...

dotnet: .NET: Denial of Service via stack overflow

A flaw was found in .NET. A remote attacker could exploit a stack overflow vulnerability during encrypted key nested decryption, leading to a Denial of Service DoS. This could make the affected system unavailable to legitimate users...

We Scanned 1 Million Exposed AI Services. Here's How Bad the Security Actually Is

While the software industry has made genuine strides over the past few decades to deliver products securely, the furious pace of AI adoption is putting that progress at risk. Businesses are moving fast to self-host LLM infrastructure, drawn by the promise of AI as a force multiplier and the...

GHSA-F6WW-3GGP-FR8H vulnerabilities

Vulnerabilities for packages: saf, sqlpad, npm...

CVE-2026-41672 vulnerabilities

Vulnerabilities for packages: saf, sqlpad, npm...

GHSA-2V35-W6HQ-6MFW vulnerabilities

Vulnerabilities for packages: saf, sqlpad, npm...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local...

CVE-2026-35527

Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image import flow issues an outbound HEAD request to a user-supplied URL before validating the request against project restrictions such as restricted.images.servers. The imgPostURLInfo function...