postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison

A flaw was found in PostgreSQL. This vulnerability, a covert timing channel, exists in the comparison of MD5-hashed passwords during authentication. A remote attacker could exploit this to recover user credentials, gaining unauthorized access to the database. This issue specifically impacts...

EUVD-2026-36726

Multer vulnerable to Denial of Service via deeply nested field names...

CVE-2026-32652

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged attacker with console access could potentially exploit this vulnerability to gain Filesystem access. This vulnerability only affects fresh installations of Collector versions earli...

CVE-2025-13230 affecting package nodejs for versions less than 24.14.1-3

CVE-2025-13230 affecting package nodejs for versions less than 24.14.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-47913 affecting package buildah for versions less than 1.43.1-1

CVE-2025-47913 affecting package buildah for versions less than 1.43.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31698 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-31698 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31418 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31418 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31655 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31655 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31566 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31566 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31496 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31496 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-31495 affecting package kernel for versions less than 6.6.134.1-2

CVE-2026-31495 affecting package kernel for versions less than 6.6.134.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-23228 affecting package kernel for versions less than 5.15.202.1-1

CVE-2026-23228 affecting package kernel for versions less than 5.15.202.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23291 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23291 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23347 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23347 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23285 affecting package kernel for versions less than 6.6.130.1-1

CVE-2026-23285 affecting package kernel for versions less than 6.6.130.1-1. An upgraded version of the package is available that resolves this issue...

Allocation of Resources Without Limits or Throttling

Overview activesupport is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in NumberConverter. An attacker can cause excessive memory allocation by...

CVE-2025-39697 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39697 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38439 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38439 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38701 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38701 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1

CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...