CVE-2026-40347 vulnerabilities

Vulnerabilities for packages: synapse, wazuh-manager-fips, keep-fips, tritonserver-backend-vllm-cuda-12.9, tritonserver-backend-vllm-cuda-13.0, kserve, airflow, vllm-openai-cuda-12.9, airflow-core, litellm, wazuh-manager, semgrep, keep...

GHSA-XPHW-CQX3-667J vulnerabilities

Vulnerabilities for packages: rust-analyzer, typst, ruff...

CVE-2026-34479 vulnerabilities

Vulnerabilities for packages: geoserver, commercial-elasticsearch, akhq, kafka, hadoop-fips, elasticsearch, logstash-fips, pinot-fips, flink, druid, zaproxy, celeborn, elasticsearch-fips, nuxeo, opensearch, pinot, kafka-fips, spark-fips, solr, kserve-modelmesh, spark, logstash, sonarqube...

UBUNTU-CVE-2026-41015

radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git not a release, the date range for the vulnerable code was less than a week, occurring after 6.1.2 but before 6.1...

CVE-2026-6311

Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-6305

Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...

GHSA-HJ93-H7PG-FH6V vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-F2HX-5FX3-HMCV vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-0636

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from...

CVE-2026-34933 vulnerabilities

Vulnerabilities for packages: avahi...

CVE-2026-33311 vulnerabilities

Vulnerabilities for packages: librechat...

CVE-2026-34933 vulnerabilities

Vulnerabilities for packages: avahi...

CVE-2026-39409 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-92PP-H63X-V22M vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-6V7Q-WJVX-W8WG vulnerabilities

Vulnerabilities for packages: kibana, code-server, wazuh-dashboard, opensearch-dashboards-fips, langfuse, opensearch-dashboards, langfuse-fips...

[SECURITY] Fedora 43 Update: python-cryptography-46.0.7-1.fc43

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...

ROS-20260414-73-0041

Vulnerability in kernel-lt related to failure to release a resource after its valid lifetime has expired. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using specially crafted ipv6 traffic...

ROS-20260414-73-0001

Vulnerability in kernel-lt related to the non-release of a resource after its valid lifetime has expired. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260414-73-0027

Vulnerability in kernel-lt related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...

CVE-2026-31415

In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6datagramsendctl Yiming Qian reported : I believe I found a locally triggerable kernel bug in the IPv6 sendmsg ancillary-data path that can panic the kernel via skbunderpanic local DoS. The core issue i...