CVE-2026-11525 vulnerabilities

Vulnerabilities for packages: prism, vitess, code-server, node-gyp, saf, renovate, npm...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-rails, ruby3.4-rails, logstash...

CVE-2026-49268 vulnerabilities

Vulnerabilities for packages: neo4j...

GHSA-X96M-RH44-VGV8 vulnerabilities

Vulnerabilities for packages: neo4j...

GHSA-992Q-W5XV-32HH vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-992Q-W5XV-32HH vulnerabilities

Vulnerabilities for packages: firefox...

USN-8453-1: Net::CIDR::Lite vulnerabilities

It was discovered that Net::CIDR::Lite incorrectly validated IP address and CIDR mask inputs. An attacker could possibly use this issue to bypass IP access control lists. CVE-2026-45190 It was discovered that Net::CIDR::Lite incorrectly handled extraneous zero characters in CIDR mask values. An...

CVE-2026-48523 vulnerabilities

Vulnerabilities for packages: superset, datadog-agent, kserve, ggshield...

GHSA-HJXC-462X-X77J vulnerabilities

Vulnerabilities for packages: yarn...

GHSA-XGRM-4FWX-7QM8 vulnerabilities

Vulnerabilities for packages: gitaly, teleport...

GHSA-HPJ7-WQ8M-9HGP vulnerabilities

Vulnerabilities for packages: open-webui, mlflow...

GHSA-9X8Q-7H8H-WCW9 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow...

SUSE CVE-2026-47184

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache, expirations, expireheap, and servicecache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 224.0.0.251 / ff02::f...

ROS-20260617-73-0025

The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-42500 vulnerabilities

Vulnerabilities for packages: seaweedfs-fips, seaweedfs, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, seaweedfs-operator-fips, seaweedfs-operator...

CVE-2026-46599 vulnerabilities

Vulnerabilities for packages: seaweedfs-fips, seaweedfs, gitlab-workhorse-ce, seaweedfs-rocksdb, seaweedfs-rocksdb-fips, seaweedfs-operator-fips, seaweedfs-operator...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: pgadmin4, airflow-core, dbt-bigquery, gitlab-cng-fips, kubeflow-pipelines-visualization-server, openstack-horizon-2025.2, k8s-sidecar, prefect, superset, authentik, opal, datadog-agent, localstack, openstack-kolla-toolbox-2025.1, ansible-operator, ggshield, awx,...

GHSA-CQ4Q-CV5G-R8Q5 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: superset, datadog-agent, mycli, dask-kubernetes, kserve, kubeflow-pipelines-visualization-server, mlflow, jupyter-base-notebook, kubeflow-volumes-web-app, py3-cassandra-medusa, in-toto, semgrep, k8s-sidecar, mitmproxy, airflow, kubeflow-jupyter-web-app, ggshield...