CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

GO-2024-3269 vulnerabilities

Vulnerabilities for packages: gh...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, tigera-operator, datadog-agent, tigera-operator-fips, gitlab-operator, gitlab-operator-fips...

GO-2026-6007 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, tigera-operator, datadog-agent, tigera-operator-fips, gitlab-operator, gitlab-operator-fips...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: amazon-ssm-agent, scorecard, syft, cerbos-fips, argo-cd-fips, chainloop-cli, rclone, terragrunt-fips, external-secrets-operator-fips, gitlab-rails-ce, packer-fips, grafana, argo-cd, flux, rclone-fips, kyverno-fips, seaweedfs-rocksdb, rancher-fleet, rancher-fleet-fips...

GO-2024-3296 vulnerabilities

Vulnerabilities for packages: gh...

CVE-2026-72898 vulnerabilities

Vulnerabilities for packages: metabase...

GHSA-4H4R-Q9XG-GFMM vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-73412

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...

CVE-2026-67422 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FWG2-594C-JP42 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, litellm...

CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: nemo, open-webui, litellm...

CVE-2026-56818 vulnerabilities

Vulnerabilities for packages: pinot...

GHSA-539M-9XH6-Q6RR vulnerabilities

Vulnerabilities for packages: awx, jupyter-all-spark-notebook...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: syft, redpanda-console, guac, gitea, amazon-ssm-agent-fips, kyverno, packer, argo-events-fips, flux-operator, xeol, kubevela, kyverno-fips, coder, kaniko-fips, mapotf, grafana-alloy-fips, grafana-fips, src-fingerprint-fips, external-secrets-operator, gitaly,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: flux, tfsec, boring-registry, gitsign, gitaly, gitea, act, gomplate, argo-cd, pulumi-language-yaml, goreleaser, kyverno, argocd-image-updater, snyk-cli, witness, cerbos, nfpm, pulumi, pulumi-language-dotnet, crossplane, kubescape, src-fingerprint, zot, argo-workflows...

CVE-2026-50159 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-71438 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-71437 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-71852

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large memory consumption when pypdf/font.py function Font.collectcidcharacterwidths expands unusually large CID font /W width ranges or excessive width entries during text extractio...