CVE-2026-47770

jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operator exhausts the C stack on jq's ordinary command-line surface, resulting in denial of service via stack exhaustion uncontrolled recursion. The crash occurs in jq's recursive...

CVE-2026-49839

jq is a command-line JSON processor. Prior to 1.8.2, jq --rawfile can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assertion-disabled builds. When jvloadfileraw=1 reads an attacker-controlled file, it repeatedly appends file chunks to the...

CVE-2026-54679

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

CVE-2026-57456

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim executes reconstructed function and class definitions from the current buffer with exec as part of populating the completion...

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

CVE-2026-42388

Incomplete validation of the SOA record present in a catalog zone might lead to a crash...

CVE-2026-12246

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes...

GHSA-X9G3-XRWR-CWFG vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-55388 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-54513 vulnerabilities

Vulnerabilities for packages: apache-tomee, request-9047-keycloak-fips, strimzi-kafka-operator-fips, infinispan...

GHSA-J3RV-43J4-C7QM vulnerabilities

Vulnerabilities for packages: apache-tomee, request-9047-keycloak-fips, strimzi-kafka-operator-fips, infinispan...

CVE-2026-54512 vulnerabilities

Vulnerabilities for packages: apache-tomee, request-9047-keycloak-fips, strimzi-kafka-operator-fips, infinispan...

GHSA-RMJ7-2VXQ-3G9F vulnerabilities

Vulnerabilities for packages: apache-tomee, request-9047-keycloak-fips, strimzi-kafka-operator-fips, infinispan...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, infinispan, apache-tomee, request-9047-keycloak-fips, apache-activemq-fips...

GHSA-HGJ6-7826-R7M5 vulnerabilities

Vulnerabilities for packages: apache-tomee, request-9047-keycloak-fips, strimzi-kafka-operator-fips, infinispan...

GHSA-9FXM-VC8V-HJ55 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, infinispan, apache-tomee, request-9047-keycloak-fips, apache-activemq-fips...

CVE-2026-54516 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, infinispan, apache-tomee, request-9047-keycloak-fips, apache-activemq-fips...

CVE-2026-54517 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, infinispan, apache-tomee, request-9047-keycloak-fips, apache-activemq-fips...

CVE-2026-54514 vulnerabilities

Vulnerabilities for packages: apache-tomee, request-9047-keycloak-fips, strimzi-kafka-operator-fips, infinispan...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, infinispan, apache-tomee, request-9047-keycloak-fips, apache-activemq-fips...