GHSA-WX4M-978H-JHX3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MHRM-MF55-J4P7 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11675 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-11646 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-45446 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-3VRV-754Q-MQ3J vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-10701 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-34183 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-34181 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-46702 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-46340 vulnerabilities

Vulnerabilities for packages: tez, trino, celeborn, management-api-for-apache-cassandra-5.0, thingsboard...

CVE-2026-2049

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

GHSA-MM53-X3WX-JGR2 vulnerabilities

Vulnerabilities for packages: busybox...

SUSE CVE-2026-34356

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

GHSA-VQC8-7275-Q272 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45447

Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS7 or S/MIME signed...

CVE-2026-42766

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

CVE-2026-34180

Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application Denial of Service or to...

GHSA-C4WJ-P3M6-6483 vulnerabilities

Vulnerabilities for packages: binutils...

GHSA-X4GW-5CX5-PGMH vulnerabilities

Vulnerabilities for packages: seata, management-api-for-apache-cassandra-5.0, kayenta, s3proxy, strimzi-kafka-operator, thingsboard, neo4j, kafka-bridge, management-api-for-apache-cassandra-4.1, spark-fips, zookeeper-fips, cassandra-reaper, akhq, kayenta-fips, apache-pulsar, apache-hop-fips,...