10156 matches found
CVE-2026-48756
Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...
CVE-2026-55564
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: mlflow, airflow...
CVE-2026-50645 vulnerabilities
Vulnerabilities for packages: wso2is, apache-tika, apache-tika-fips...
CVE-2026-45699
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47192
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...
GO-2024-3269 vulnerabilities
Vulnerabilities for packages: gh...
GO-2026-6005 vulnerabilities
Vulnerabilities for packages: gitlab-operator, tigera-operator, datadog-agent-fips, gitlab-operator-fips, datadog-agent, tigera-operator-fips...
GO-2026-6007 vulnerabilities
Vulnerabilities for packages: gitlab-operator, tigera-operator, datadog-agent-fips, gitlab-operator-fips, datadog-agent, tigera-operator-fips...
GO-2026-5597 vulnerabilities
Vulnerabilities for packages: argo-cd, rclone, seaweedfs-rocksdb-fips, rancher-fleet, rancher-fleet-fips, terragrunt-fips, packer-fips, kyverno-fips, terragrunt, gitlab-rails-ce-fips, scorecard, chainloop-cli-fips, nemo, cerbos-fips, gitlab-rails-ce, external-secrets-operator-fips, cerbos,...
GO-2024-3296 vulnerabilities
Vulnerabilities for packages: gh...
CVE-2026-72898 vulnerabilities
Vulnerabilities for packages: metabase...
GHSA-4H4R-Q9XG-GFMM vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-73412
Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, this impacts users of Shescape on Unix systems that explicitly configure shell to Zsh, or true when the default shell is Zsh, using the escape and escapeAll. The Zsh options EXTENDEDGLOB and MAGICEQUALSUBST...
CVE-2026-67422 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FWG2-594C-JP42 vulnerabilities
Vulnerabilities for packages: nemo, litellm, open-webui...
CVE-2026-71870 vulnerabilities
Vulnerabilities for packages: nemo, litellm, open-webui...