Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| GHSA-jhx4-8pjp-h27w |
|
Vulnerability in npmjs-doc-builder (GHSA-jhx4-8pjp-h27w)
vulnerability in npmjs-doc-builder (GHSA-jhx4-8pjp-h27w). Risk of unauthorized operations or information disclosure.
|
| GHSA-pwrg-56mj-pq64 |
|
Vulnerability in bign.tsm (GHSA-pwrg-56mj-pq64)
vulnerability in bign.tsm (GHSA-pwrg-56mj-pq64). Risk of unauthorized operations or information disclosure.
|
| MGASA-2026-0215 |
|
Vulnerability in libsndfile (MGASA-2026-0215)
vulnerability in libsndfile (MGASA-2026-0215). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.0-3.3.mga9` or later.
|
| MGASA-2026-0214 |
|
Vulnerability in lcms2 (MGASA-2026-0214)
vulnerability in lcms2 (MGASA-2026-0214). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.15-2.1.mga9` or later.
|
| MGASA-2026-0213 |
|
Updated emacs packages fix security vulnerability
Updated emacs packages fix security vulnerability
|
| MAL-2026-5863 |
|
Vulnerability in @ts-internal/shared-lib (MAL-2026-5863)
vulnerability in @ts-internal/shared-lib (MAL-2026-5863). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-6964 |
|
Vulnerability in wordpress (CVE-2026-6964)
vulnerability in wordpress (CVE-2026-6964). Risk of unauthorized operations or information disclosure.
|
| MINI-g523-c377-5c5q |
|
MINI-g523-c377-5c5q |
| MINI-pxmc-vjhr-7886 |
|
MINI-pxmc-vjhr-7886 |
| MINI-p99g-hh5g-9mgr |
|
MINI-p99g-hh5g-9mgr |
| MINI-9rgh-9hc6-58rc |
|
MINI-9rgh-9hc6-58rc |
| MINI-3v36-grr8-5jvw |
|
MINI-3v36-grr8-5jvw |
| MINI-3g5h-7h47-67f6 |
|
MINI-3g5h-7h47-67f6 |
| MINI-g2j9-8vrh-g3x6 |
|
MINI-g2j9-8vrh-g3x6 |
| MINI-pgvp-97hj-4865 |
|
MINI-pgvp-97hj-4865 |
| CVE-2026-7273 |
|
Vulnerability in CVE-2026-7273 (CVE-2026-7273)
vulnerability in CVE-2026-7273 (CVE-2026-7273). Successful exploitation can lead to full system takeover.
|
| MAL-2026-5862 |
|
Vulnerability in vitest-pro (MAL-2026-5862)
vulnerability in vitest-pro (MAL-2026-5862). Risk of unauthorized operations or information disclosure. Exploitable via ``main``.
|
| CVE-2026-42014 |
|
Vulnerability in CVE-2026-42014 (CVE-2026-42014)
vulnerability in CVE-2026-42014 (CVE-2026-42014). Risk of unauthorized operations or information disclosure. Exploitable via ``gnutls_pkcs11_token_set_pin``.
|
| CVE-2026-1767 |
|
Vulnerability in dos (CVE-2026-1767)
vulnerability in dos (CVE-2026-1767). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1766 |
|
Vulnerability in dos (CVE-2026-1766)
vulnerability in dos (CVE-2026-1766). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1765 |
|
Out-of-Bounds Read in dos (CVE-2026-1765)
vulnerability in dos (CVE-2026-1765). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-1764 |
|
Out-of-Bounds Read in dos (CVE-2026-1764)
vulnerability in dos (CVE-2026-1764). Risk of unauthorized operations or information disclosure. Exploitable via ``extract_performers_tags``.
|
| GHSA-cm93-hx95-m69r |
|
Vulnerability in carousel-controller-mixin (GHSA-cm93-hx95-m69r)
vulnerability in carousel-controller-mixin (GHSA-cm93-hx95-m69r). Risk of unauthorized operations or information disclosure.
|
| GHSA-4626-p8q4-554f |
|
Vulnerability in setka-editor (GHSA-4626-p8q4-554f)
vulnerability in setka-editor (GHSA-4626-p8q4-554f). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
|
| GHSA-hw6h-jfr8-q9v4 |
|
Vulnerability in event-metrics-q3x7 (GHSA-hw6h-jfr8-q9v4)
vulnerability in event-metrics-q3x7 (GHSA-hw6h-jfr8-q9v4). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process``.
|
| GHSA-77q5-c2w3-pc44 |
|
Vulnerability in metrics-pipeline-d8k2 (GHSA-77q5-c2w3-pc44)
vulnerability in metrics-pipeline-d8k2 (GHSA-77q5-c2w3-pc44). Risk of unauthorized operations or information disclosure. Exploitable via ``child_process``.
|
| CVE-2026-12162 |
|
Vulnerability in devolutions (CVE-2026-12162)
vulnerability in devolutions (CVE-2026-12162). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12161 |
|
OS Command Injection in devolutions (CVE-2026-12161)
OS command injection in devolutions (CVE-2026-12161). Successful exploitation can lead to full system takeover.
|
| GHSA-xw83-9jhm-jj7j |
|
Vulnerability in tailwind-typography-style (GHSA-xw83-9jhm-jj7j)
vulnerability in tailwind-typography-style (GHSA-xw83-9jhm-jj7j). Risk of unauthorized operations or information disclosure. Exploitable via ``sfL``.
|
| OSV-2026-925 |
|
Vulnerability in libssh (OSV-2026-925)
vulnerability in libssh (OSV-2026-925). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6a5d9d8e0627af17ec457fb6d71bb9bed261bb18` or later.
|
| CVE-2026-9262 |
|
Vulnerability in canon (CVE-2026-9262)
vulnerability in canon (CVE-2026-9262). Confidential information can be exposed externally.
|
| CVE-2026-9261 |
|
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
|
| CVE-2026-9260 |
|
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
|
| CVE-2026-9259 |
|
Vulnerability in canon (CVE-2026-9259)
vulnerability in canon (CVE-2026-9259). Confidential information can be exposed externally.
|
| CVE-2026-9258 |
|
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
|
| OSV-2026-923 |
|
Vulnerability in gpac (OSV-2026-923)
vulnerability in gpac (OSV-2026-923). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8ca09c439f738fb4a41402cf71fedd06543d278e` or later.
|
| GHSA-hgm9-w4fm-65m9 |
|
Vulnerability in sp-api-dev-assistant-mcp-server (GHSA-hgm9-w4fm-65m9)
vulnerability in sp-api-dev-assistant-mcp-server (GHSA-hgm9-w4fm-65m9). Risk of unauthorized operations or information disclosure. Exploitable via ``scripts``.
|
| GHSA-633w-wc3j-7jrf |
|
Vulnerability in epm-service-module-v2 (GHSA-633w-wc3j-7jrf)
vulnerability in epm-service-module-v2 (GHSA-633w-wc3j-7jrf). Risk of unauthorized operations or information disclosure.
|
| ALSA-2026:26204 |
|
Vulnerability in pg_repack (ALSA-2026:26204)
vulnerability in pg_repack (ALSA-2026:26204). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.3-1.module_el9.8.0+234+5456f35d` or later.
|
| ALSA-2026:26297 |
|
Vulnerability in hplip (ALSA-2026:26297)
vulnerability in hplip (ALSA-2026:26297). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.21.2-6.el9_8.4.alma.1` or later.
|
| ALSA-2026:26203 |
|
Vulnerability in pg_repack (ALSA-2026:26203)
vulnerability in pg_repack (ALSA-2026:26203). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.5.1-1.module_el9.6.0+146+c54fdeca` or later.
|
| ALSA-2026:26206 |
|
Vulnerability in fence-agents-aliyun (ALSA-2026:26206)
vulnerability in fence-agents-aliyun (ALSA-2026:26206). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.10.0-110.el9_8.3` or later.
|
| UBUNTU-CVE-2026-46448 |
|
Vulnerability in nova (UBUNTU-CVE-2026-46448)
vulnerability in nova (UBUNTU-CVE-2026-46448). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3:25.2.1-0ubuntu2.11` or later.
|
| ALSA-2026:26323 |
|
Vulnerability in tomcat (ALSA-2026:26323)
vulnerability in tomcat (ALSA-2026:26323). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:9.0.117-1.el9_8` or later.
|
| ALSA-2026:26410 |
|
Vulnerability in rsync (ALSA-2026:26410)
vulnerability in rsync (ALSA-2026:26410). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.5-7.el9_8.2` or later.
|
| ALSA-2026:26447 |
|
Vulnerability in podman (ALSA-2026:26447)
vulnerability in podman (ALSA-2026:26447). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6:5.8.2-3.el9_8` or later.
|
| ALSA-2026:26205 |
|
Vulnerability in postfix (ALSA-2026:26205)
vulnerability in postfix (ALSA-2026:26205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:3.5.25-3.el9_8` or later.
|
| ALSA-2026:26181 |
|
Vulnerability in pg_repack (ALSA-2026:26181)
vulnerability in pg_repack (ALSA-2026:26181). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.4.8-1.module_el8.9.0+3706+885c732e` or later.
|
| ALSA-2026:26408 |
|
Vulnerability in rsync (ALSA-2026:26408)
vulnerability in rsync (ALSA-2026:26408). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.3-27.el8_10` or later.
|
| ALSA-2026:26428 |
|
Vulnerability in kernel-rt (ALSA-2026:26428)
vulnerability in kernel-rt (ALSA-2026:26428). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.18.0-553.134.1.rt7.475.el8_10` or later.
|