GHSA-CFXF-MMWJ-6763 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3934 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CGHR-H62W-2FC6 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3941 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-26127 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-31802 vulnerabilities

Vulnerabilities for packages: node-gyp, tileserver-gl, pnpm-stage0, lerna, kubeflow-katib, renovate, sqlpad, py3-jupyterlab, kubeflow-centraldashboard, pulumi, saf...

GHSA-5WMX-573V-2QWQ vulnerabilities

Vulnerabilities for packages: superset, awx...

CVE-2026-27940

llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the ggufinitfromfileimpl in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread writes 528+ bytes of attacker-controlled data past the buffer boundary. This is...

GHSA-7XRH-HQFC-G7QR vulnerabilities

Vulnerabilities for packages: spark, apache-activemq-artemis, kserve-modelmesh, apache-pulsar, trino, strimzi-kafka-operator, apache-nifi, solr, zookeeper, akhq...

CVE-2025-69219 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2025-67873 affecting package rust for versions less than 1.90.0-4

CVE-2025-67873 affecting package rust for versions less than 1.90.0-4. A patched version of the package is available...

CVE-2026-29786 vulnerabilities

Vulnerabilities for packages: pulumi, tileserver-gl-fips, node-gyp, saf, tensorflow-cpu-jupyter, gitlab-rails-ce-fips, renovate, opensearch-dashboards, prism, sqlpad, redisinsight, npm, wazuh-dashboard, py3-jupyterlab, drupal, actions-runner, pnpm-stage0, kibana, wazuh-dashboard-fips,...

CVE-2026-28690

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data...

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39749 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39749 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39845 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39845 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-3520 vulnerabilities

Vulnerabilities for packages: redisinsight, librechat...

CVE-2026-25674

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...