3410 matches found
GHSA-7RX3-28CR-V5WH vulnerabilities
Vulnerabilities for packages: py3-jupyterlab, prism, ts-patch, rancher-api-ui, lerna, nextcloud-server, opensearch-dashboards...
GHSA-6Q6W-FF4V-HGR5 vulnerabilities
Vulnerabilities for packages: ghostscript...
CVE-2026-33983
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressivedecompresstileupgrade detects a mismatch via progressiverfxquantcmpequal but only emits WLogWARN, execution continues. The wrapped value 247 is used as a shift exponent, causing undefined behavior...
GHSA-X744-4WPC-V9H2 vulnerabilities
Vulnerabilities for packages: gatekeeper, amazon-cloudwatch-agent-operator, grafana, wolfictl, buildah, rancher-agent, podman-fips, trivy-operator-fips, goreleaser, nerdctl, chainloop-control-plane-fips, neuvector-scanner, zarf-fips, spire-server, docker, upwind-agent, grafana-fips,...
CVE-2026-33672 vulnerabilities
Vulnerabilities for packages: renovate, lerna, npm, node-gyp, saf, kubeflow-katib, ts-patch, code-server, nextcloud-server, argo-workflows, vitess, prism, sqlpad, rancher-api-ui, opensearch-dashboards, kubeflow-pipelines, vite, pulumi, tileserver-gl...
GHSA-CJ36-HXHV-2QXH vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-4697 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-X3F3-63G4-54J4 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-6956-6R33-F8XW vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-5CGM-H8QG-5H77 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-CR5G-9FRG-Q8M8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-VXPV-C2H6-HQ9V vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-4696 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
GHSA-MRRG-439G-X65P vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2025-59028
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...
GHSA-3C37-WWVX-H642 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.4, localstack, vllm-openai-cuda-12.9, py3-cbor2...
ROS-20260327-73-0009
Vulnerability in openbabel related to an operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...
CVE-2026-33699
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider...
CVE-2026-25645 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, confluent-docker-utils, datadog-agent, kubeflow-jupyter-web-app, mlflow, py3-pip, az, py3-cassandra-medusa, kubeflow-volumes-web-app, kubeflow-katib, ggshield, semgrep, k8s-sidecar, open-webui, jwt-tool, kserve, airflow, kubeflow-pipelines, py3-pipen...