GHSA-55H5-XMCQ-C37V vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

GHSA-G867-7843-WF8Q vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

GHSA-6G55-P6WH-862Q vulnerabilities

Vulnerabilities for packages: nextcloud-server, vitess, langfuse...

GHSA-G6V3-7XMC-W563 vulnerabilities

Vulnerabilities for packages: cilium, fq, calico, telegraf...

GHSA-6R28-9PPF-4HJ5 vulnerabilities

Vulnerabilities for packages: cilium, fq, calico, telegraf...

CVE-2026-45623 vulnerabilities

Vulnerabilities for packages: nextcloud-server, vitess, langfuse...

GHSA-PP92-CRG2-GFV9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-oauth2, ruby3.3-oauth2, ruby4.0-oauth2, ruby3.2-oauth2, gitlab-rails-ce-fips...

GHSA-FRVP-7C67-39W9 vulnerabilities

Vulnerabilities for packages: gemini-cli, librechat, kibana...

CVE-2026-18022

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

Important: Red Hat Security Advisory: Red Hat build of Cryostat security update

An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Multiple vulnerabilities impacting HashiCorp Consul MCP Server

Summary consul-mcp-server versions 0.1.0 up to 0.1.3 are affected by two vulnerabilities. First, the server did not restrict client-supplied overrides of the Consul backend address, which may allow a connected client to redirect Consul API traffic to an attacker-controlled endpoint and potentiall...

vulnlab-platform-lab

Local VulnLab Platform The Local VulnLab Platform is a vulner...

GHSA-WCHH-9X6H-7F6P olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193

Problem Multiple vulnerabilities were disclosed in 2024 affecting libolm Olm: AES timing / side‑channel, Ed25519 signature malleability, and timing leaks in base64 decoding; several CVEs were assigned. Patches and mitigations were published; maintainers recommend upgrading to fixed versions. In...

GHSA-MCQQ-386F-GVF4 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu-melange, linux-qemu...

CVE-2026-65947 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2

Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox 2.20.2...

USN-8623-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Arm Firmware Framework for ARMv8-AFFA; CVE-2026-53354, CVE-2026-64520...

USN-8623-1 linux-nvidia-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Arm Firmware Framework for ARMv8-AFFA; CVE-2026-53354, CVE-2026-64520...

USN-8622-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Arm Firmware Framework for ARMv8-AFFA; CVE-2026-53354, CVE-2026-64520...

USN-8622-1 linux-nvidia, linux-nvidia-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Arm Firmware Framework for ARMv8-AFFA; CVE-2026-53354, CVE-2026-64520...

Vulnerabilities present in VMware products

VMware has identified vulnerabilities in VMware vCenter and VMware ESX products. VMware vCenter contains a critical authentication-bypass vulnerability in the Directory Service, with the identifier CVE-2026-59309. This vulnerability allows a malicious individual with network access to VMware...