CVE-2026-82552

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

CVE-2026-82552 Linux Foundation Magma gNB Termination ngap_amf.c denial of service

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

EUVD-2026-68272

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

PT-2026-83589

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

GHSA-W67G-5RQW-F597 vulnerabilities

Vulnerabilities for packages: juicefs-csi-driver, etcd, rancher-telemetry, infinispan-operator, verticadb-operator, kubevela, kubernetes, aws-node-termination-handler, guac, jitsucom-bulker, op-geth, emissary, cloudflared, redis-operator, amazon-cloudwatch-agent...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, peerdb-flow, flagger-fips, helm-operator-fips, knative-kafka-broker-fips, flux-notification-controller, crossplane-function-patch-and-transform, blob-csi-fips, vault, neuvector-sigstore-interface-fips, step-issuer, gitlab-cng-fips, tailscale,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, peerdb-flow, flagger-fips, helm-operator-fips, knative-kafka-broker-fips, flux-notification-controller, crossplane-function-patch-and-transform, blob-csi-fips, vault, neuvector-sigstore-interface-fips, step-issuer, gitlab-cng-fips, tailscale,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: db-operator, crossplane-provider-aws-ec2, witness, undock, kubernetes-dashboard-metrics-scraper, tkn, k8sgpt-operator, gcp-compute-persistent-disk-csi-driver, kubernetes-replicator, fluxcd-kustomize-mutating-webhook, rancher-fleet, libnvidia-container,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, flux-notification-controller, blob-csi-fips, step-issuer, blobfuse2, teleport-operator-fips, nginx-kubernetes-ingress, dragonfly-operator-fips, cluster-proportional-autoscaler, seaweedfs-rocksdb, newrelic-nri-kube-events,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: gitlab-runner, juicefs-csi-driver, terraform-provider-kubernetes, linkerd2, cloudnative-pg, aws-node-termination-handler, kargo, trivy, emissary, kwok, postgres-operator, skaffold, cilium, argo-workflows, cilium-cli, kpt, kubeflow-pipelines, hubble, k3s, k8sgpt,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kiali-fips, gpu-operator, kubeflow-pipelines, linkerd2-fips, k8ssandra-client-fips, argo-cd-fips, postgres-operator-fips, cloudbeat, headlamp, gitlab-kas, kcp, percona-server-mongodb-operator-fips, teleport-operator-fips, cloudbeat-fips, skaffold, trident-fips,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: db-operator, witness, s5cmd, node-problem-detector, buf, dockerize, kubernetes-dashboard-metrics-scraper, tkn, k8sgpt-operator, kubernetes-replicator, fluxcd-kustomize-mutating-webhook, rancher-fleet, wuzz, libnvidia-container, nri-kafka, step-kms-plugin,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, db-operator, trillian, cloudnative-pg, keda, witness, yunikorn-k8shim, argo-workflows, prometheus-operator, kubernetes-csi-driver-hostpath, newrelic-infrastructure-agent, hubble-ui, cerbos, gitlab-pages, nginx-prometheus-exporter,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: gitlab-runner, kubernetes-csi-external-attacher, db-operator, terragrunt, trillian, juicefs, restic, keda, cloudflared, crossplane-provider-aws-ec2, crossplane-provider-aws-lambda, jaeger, skaffold, witness, argo-workflows, calico, crossplane-provider-aws-sqs,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: peerdb-flow, opentelemetry-collector-contrib-fips, kubeflow-pipelines, helm-operator-fips, flux-notification-controller, crossplane-function-patch-and-transform, blob-csi-fips, vault, neuvector-sigstore-interface-fips, nemo, gitlab-cng-fips, kapp,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: peerdb-flow, opentelemetry-collector-contrib-fips, kubeflow-pipelines, helm-operator-fips, flux-notification-controller, crossplane-function-patch-and-transform, blob-csi-fips, vault, neuvector-sigstore-interface-fips, nemo, gitlab-cng-fips, kapp,...

CVE-2026-28799 PJSIP: Heap use-after-free in PJSIP presence subscription termination handler

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, nats, mongodb-kubernetes-operator, trillian, juicefs, pvc-autoresizer, restic, wait-for-port, speedtest-go, skaffold, whereabouts, yunikorn-k8shim, s5cmd, extism, kubernetes-csi-driver-hostpath, mage, go-bindata, src-fingerprint,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: wait-for-port, pombump, s5cmd, undock, src-fingerprint, dockerize, kubernetes-dashboard-metrics-scraper, k8sgpt-operator, hello-world-golang, helm-docs, kubernetes-replicator, protoc-gen-go-grpc, wuzz, step-kms-plugin, rancher-loglevel, http-echo, incert, kbld, guac,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, nats, mongodb-kubernetes-operator, trillian, juicefs, pvc-autoresizer, restic, wait-for-port, speedtest-go, skaffold, whereabouts, yunikorn-k8shim, s5cmd, extism, kubernetes-csi-driver-hostpath, mage, go-bindata, src-fingerprint,...