355 matches found
CVE-2026-43699
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpecte...
GHSA-V9PM-V9P5-H96X vulnerabilities
Vulnerabilities for packages: qemu...
GHSA-XX3P-5M4J-RHW8 vulnerabilities
Vulnerabilities for packages: qemu...
CVE-2026-54297
Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. From 1.0.0 until 1.10.6 and 2.14.3, Faraday::NestedParamsEncoder, the default nested query parameter encoder/decoder in Faraday, decodes nested query strings without enforcing a maximum nestin...
GHSA-H67P-54HQ-RP68 vulnerabilities
Vulnerabilities for packages: ts-patch, renovate, langfuse, code-server, argo-workflows, lerna, pulumi, sqlpad, py3-jupyterlab, kubeflow-katib, opensearch-dashboards, kubeflow-pipelines, airflow, prism, thingsboard, vitess, saf, tileserver-gl, eslint...
CVE-2026-12012 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-1764
A flaw was found in GNOME localsearch previously known as tracker-miners MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags, a missing bounds check in the extractperformerstags function can lead to a heap buffer overflow. This vulnerability allows a remote attacker...
CVE-2026-44894
Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the application does not set one. Prior to version 4.2.15.Final, its writeToken returns false server will not send Retry — acceptable, but validateToken...
GHSA-M2RP-HQMH-CM5F vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MHRM-MF55-J4P7 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-56WM-H6F8-C34V vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-47162
Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in the netrw plugin runtime/pack/dist/opt/netrw/autoload/netrw.vim when serializing browsed directory paths to the history file /.vim/.netrwhist. A...
CVE-2026-44488 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards, awx, wazuh-dashboard, opensearch-dashboards-fips, kubeflow-katib, gitlab-rails-ce-fips, wazuh-dashboard-fips, nextcloud-server...
CVE-2025-66236 vulnerabilities
Vulnerabilities for packages: airflow-core, airflow...
GHSA-GH93-JMVR-G4F3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-457M-JPVX-PQX9 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9892 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-10014 vulnerabilities
Vulnerabilities for packages: chromium...