261320 matches found
PT-2026-100094
Security vulnerability affects the activemq package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100252
Security vulnerability affects the grafana package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101423
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100822
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100233
Security vulnerability affects the tkn-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101798
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99973
rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...
PT-2026-99979
rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...
PT-2026-99980
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-99981
rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...
PT-2026-99983
rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...
PT-2026-95399
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A reference-count leak exists in the HAProxy PROXY-v2 message decoder. A remote, unauthenticated attacker can exploit this by sending specially crafted PROXY-protocol v2 headers, specifically...
PT-2026-100076
Security vulnerability affects the nginx package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100505
Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95511
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the HTTP/2 stack allows a remote attacker to inject prohibited characters, including NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validatio...
PT-2026-100045
Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100383
Security vulnerability affects the postgresql17 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102257
Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100027
Security vulnerability affects the cert-manager-webhook-pdns-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102225
Security vulnerability affects the step-cli package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95208
Name of the Vulnerable Software and Affected Versions Nextcloud affected versions not specified Description Remote-instance signature verification in Circles fetches the keyId URL provided by an attacker before trust is established. This process explicitly allows local or private addresses,...
PT-2026-100902
ghsa-78h2-9frx-2jm8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100552
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101288
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101338
Security vulnerability affects the azure-functions-node package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101083
ghsa-6jqx-86gh-f27w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101326
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101446
ghsa-4m7w-qmgq-4wj5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100612
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100389
ghsa-3p8m-j85q-pgmj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100213
Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101999
ghsa-4hfp-h4cw-hj8p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95395
Name of the Vulnerable Software and Affected Versions Imager for Perl versions prior to 1.036 Description Reading a paletted image with pixel indexes that exceed its colour map in the i gpix p and i glin p functions leads to the disclosure of uninitialised heap memory. The TGA reader stores pixel...
PT-2026-102128
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101660
ghsa-jrr2-x33p-6hvc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101613
Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101261
Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101031
Security vulnerability affects the paranoia package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101046
ghsa-pjcq-xvwq-hhpj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101536
ghsa-2g68-c3qc-8985 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101760
Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101362
ghsa-82m2-cv7p-4m75 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95646
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The extension manages partitioned tables by time or ID. The functions run maintenance, show partitions, show partition info, undo partition, and partition data time interpolate the writable part...
PT-2026-95681
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A cross-site request forgery CSRF issue allows a remote attacker to bypass security restrictions. CSRF is a type of attack that tricks a victim into submitting a malicious request. It occur...
PT-2026-102011
Security vulnerability affects the istio package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101710
Security vulnerability affects the melange package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100717
Security vulnerability affects the helm package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101593
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...