355 matches found
GHSA-HQ66-CQWQ-W95J vulnerabilities
Vulnerabilities for packages: librechat...
GHSA-X52F-23V9-FG5G vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7FP3-MXP6-94W2 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17762 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-XGPF-25JC-XVGF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PRC5-PGX6-37J6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F342-MCRF-WV9H vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17985 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-71192
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, unleash, pulumi, librechat, lerna, kibana, opensearch-dashboards-fips, unleash-proxy, prism, sqlpad, langfuse-fips, unleash-fips, actions-runner, kubeflow-pipelines, renovate, langfuse, code-server, wazuh-dashboard, npm, graalvm,...
GHSA-7RG2-8XRH-RWH8 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-59898
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...
CVE-2026-64547
In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, node-gyp, pulumi, lerna, kibana, opensearch-dashboards-fips, prism, sqlpad, actions-runner, gemini-cli, gitlab-rails-ce, haraka, renovate, code-server, kubeflow-centraldashboard, wazuh-dashboard, npm, graalvm, wazuh-dashboard-fips...
CVE-2026-64439
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...
CVE-2026-64401
In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...
CVE-2026-64285
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...
GHSA-XCPC-8H2W-3J85 vulnerabilities
Vulnerabilities for packages: redisinsight, sqlpad, kibana...