345 matches found
GHSA-7RG2-8XRH-RWH8 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-59898
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...
CVE-2026-64547
In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: pulumi, gemini-cli, renovate, graalvm, code-server, node-gyp, opensearch-dashboards, sqlpad, haraka, npm, lerna, opensearch-dashboards-fips, actions-runner, kibana, kubeflow-centraldashboard...
CVE-2026-64439
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...
CVE-2026-64401
In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...
CVE-2026-64285
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...
GHSA-XCPC-8H2W-3J85 vulnerabilities
Vulnerabilities for packages: sqlpad, redisinsight, kibana...
CVE-2026-43699
A use-after-free issue was addressed with improved memory management...
GHSA-C8MV-CH2P-4GWV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X454-5847-5CWH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VRWX-R2MM-M3QM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2FJR-R86H-FPW3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VR3H-9WM8-MCR4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VR5V-MVJW-PXV5 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q2J9-M6G3-738J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9R7R-6R2R-9FMJ vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13909 vulnerabilities
Vulnerabilities for packages: chromium...