Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-54228 Vulnerability in CVE-2026-54228 (CVE-2026-54228)
vulnerability in CVE-2026-54228 (CVE-2026-54228). Successful exploitation can lead to full system takeover.
GHSA-qj3m-j6gv-53pg Vulnerability in ecto_module (GHSA-qj3m-j6gv-53pg)
vulnerability in ecto_module (GHSA-qj3m-j6gv-53pg). Risk of unauthorized operations or information disclosure. Exploitable via ``manifest``.
MAL-2026-5726 Vulnerability in ecto_module (MAL-2026-5726)
vulnerability in ecto_module (MAL-2026-5726). Risk of unauthorized operations or information disclosure. Exploitable via ``manifest``.
GHSA-9j99-p89c-pjwq Vulnerability in vite-config-react (GHSA-9j99-p89c-pjwq)
vulnerability in vite-config-react (GHSA-9j99-p89c-pjwq). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
MAL-2026-5728 Vulnerability in vite-config-react (MAL-2026-5728)
vulnerability in vite-config-react (MAL-2026-5728). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
MAL-2026-5727 Vulnerability in vite-config-optimizer (MAL-2026-5727)
vulnerability in vite-config-optimizer (MAL-2026-5727). Risk of unauthorized operations or information disclosure. Exploitable via ``WebpackCachePlugin``.
CGA-wfp9-7crf-vm4f CGA-wfp9-7crf-vm4f
CGA-jhch-j39m-p3q5 CGA-jhch-j39m-p3q5
CGA-mffj-wv54-pff8 CGA-mffj-wv54-pff8
MAL-2026-5723 Vulnerability in @ci-lifecycle-test/postinstall-ping (MAL-2026-5723)
vulnerability in @ci-lifecycle-test/postinstall-ping (MAL-2026-5723). Risk of unauthorized operations or information disclosure.
GHSA-gxc9-xrxm-w788 Vulnerability in warp-dependency (GHSA-gxc9-xrxm-w788)
vulnerability in warp-dependency (GHSA-gxc9-xrxm-w788). Risk of unauthorized operations or information disclosure. Exploitable via ``_0x345c``.
MAL-2026-5724 Vulnerability in warp-dependency (MAL-2026-5724)
vulnerability in warp-dependency (MAL-2026-5724). Risk of unauthorized operations or information disclosure. Exploitable via ``_0x345c``.
MGASA-2026-0207 Vulnerability in mariadb (MGASA-2026-0207)
vulnerability in mariadb (MGASA-2026-0207). Risk of unauthorized operations or information disclosure. Exploitable via ``wsrep_notify_cmd``. Mitigation: upgrade to `11.4.12-1.1.mga9` or later.
MGASA-2026-0206 Updated openimageio packages fix security vulnerability
Updated openimageio packages fix security vulnerability
MGASA-2026-0205 Vulnerability in libpng (MGASA-2026-0205)
vulnerability in libpng (MGASA-2026-0205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.38-1.6.mga9` or later.
CGA-fgjj-fqqx-3r98 CGA-fgjj-fqqx-3r98
CGA-6g9w-hrhq-h74f CGA-6g9w-hrhq-h74f
MAL-2026-5725 Vulnerability in dash-grid-normalizer (MAL-2026-5725)
vulnerability in dash-grid-normalizer (MAL-2026-5725). Risk of unauthorized operations or information disclosure.
CGA-c55g-jgqw-3v6q CGA-c55g-jgqw-3v6q
CVE-2025-9032 Out-of-Bounds Read in CVE-2025-9032 (CVE-2025-9032)
vulnerability in CVE-2025-9032 (CVE-2025-9032). Successful exploitation can lead to full system takeover.
CVE-2025-14098 Vulnerability in dos (CVE-2025-14098)
vulnerability in dos (CVE-2025-14098). Successful exploitation can lead to full system takeover.
CVE-2026-6676 Out-of-Bounds Write in CVE-2026-6676 (CVE-2026-6676)
out-of-bounds write in CVE-2026-6676 (CVE-2026-6676). Successful exploitation can lead to full system takeover.
CVE-2026-12068 Vulnerability in CVE-2026-12068 (CVE-2026-12068)
vulnerability in CVE-2026-12068 (CVE-2026-12068). Confidential information can be exposed externally.
CVE-2025-9033 Out-of-Bounds Read in CVE-2025-9033 (CVE-2025-9033)
vulnerability in CVE-2025-9033 (CVE-2025-9033). Successful exploitation can lead to full system takeover.
CVE-2026-11443 Cross-Site Scripting (XSS) in CVE-2026-11443 (CVE-2026-11443)
cross-site scripting in CVE-2026-11443 (CVE-2026-11443). Risk of unauthorized operations or information disclosure.
CVE-2026-11442 Path Traversal in path-traversal (CVE-2026-11442)
path traversal in path-traversal (CVE-2026-11442). Confidential information can be exposed externally.
CGA-45wc-63wv-9fr5 CGA-45wc-63wv-9fr5
CGA-m28x-2c36-rg9c CGA-m28x-2c36-rg9c
CGA-jqh9-97gx-p457 CGA-jqh9-97gx-p457
CGA-25vr-95wg-p22j CGA-25vr-95wg-p22j
CGA-5f93-p45j-4m35 CGA-5f93-p45j-4m35
OSV-2026-910 Vulnerability in gpac (OSV-2026-910)
vulnerability in gpac (OSV-2026-910). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1308b19e63ca1fb9990803bb74136f77e6c9ddee, 7ee24256a42bc8f4e117907ae77df6a095befb2c` or later.
OSV-2026-907 Vulnerability in gpac (OSV-2026-907)
vulnerability in gpac (OSV-2026-907). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1308b19e63ca1fb9990803bb74136f77e6c9ddee, 7ee24256a42bc8f4e117907ae77df6a095befb2c` or later.
RLSA-2026:25191 Vulnerability in kernel (RLSA-2026:25191)
vulnerability in kernel (RLSA-2026:25191). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:6.12.0-211.22.1.el10_2` or later.
RLSA-2026:25111 Vulnerability in dotnet8.0 (RLSA-2026:25111)
vulnerability in dotnet8.0 (RLSA-2026:25111). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:8.0.128-1.el10_2` or later.
RLSA-2026:25237 Vulnerability in openssl (RLSA-2026:25237)
vulnerability in openssl (RLSA-2026:25237). Confidential information can be exposed externally. Mitigation: upgrade to `1:3.5.5-4.el10_2` or later.
RLSA-2026:25216 Vulnerability in valkey (RLSA-2026:25216)
vulnerability in valkey (RLSA-2026:25216). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:8.0.9-1.el10_2` or later.
RLSA-2026:24985 Vulnerability in poppler (RLSA-2026:24985)
vulnerability in poppler (RLSA-2026:24985). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:24.02.0-7.el10_2.2` or later.
RLSA-2026:25115 Vulnerability in dotnet10.0 (RLSA-2026:25115)
vulnerability in dotnet10.0 (RLSA-2026:25115). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:10.0.109-1.el10_2` or later.
RLSA-2026:25225 Vulnerability in mod_http2 (RLSA-2026:25225)
vulnerability in mod_http2 (RLSA-2026:25225). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:2.0.29-4.el10_2.1` or later.
RLSA-2026:25112 Vulnerability in dotnet9.0 (RLSA-2026:25112)
vulnerability in dotnet9.0 (RLSA-2026:25112). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:9.0.118-1.el10_2` or later.
RLSA-2026:25239 Vulnerability in openssl (RLSA-2026:25239)
vulnerability in openssl (RLSA-2026:25239). Confidential information can be exposed externally. Mitigation: upgrade to `1:3.5.5-4.el9_8` or later.
RLSA-2026:25221 Vulnerability in dotnet9.0 (RLSA-2026:25221)
vulnerability in dotnet9.0 (RLSA-2026:25221). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:9.0.118-1.el9_8` or later.
RLSA-2026:25058 Vulnerability in poppler (RLSA-2026:25058)
vulnerability in poppler (RLSA-2026:25058). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:21.01.0-24.el9_8.1` or later.
RLSA-2026:25217 Vulnerability in kernel (RLSA-2026:25217)
vulnerability in kernel (RLSA-2026:25217). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:5.14.0-687.15.1.el9_8` or later.
RLSA-2026:25049 Vulnerability in samba (RLSA-2026:25049)
vulnerability in samba (RLSA-2026:25049). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.23.5-10.el9_8` or later.
RLSA-2026:25057 Vulnerability in mod_http2 (RLSA-2026:25057)
vulnerability in mod_http2 (RLSA-2026:25057). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:2.0.26-6.el9_8.1` or later.
RLSA-2026:25222 Vulnerability in dotnet10.0 (RLSA-2026:25222)
vulnerability in dotnet10.0 (RLSA-2026:25222). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:10.0.109-1.el9_8` or later.
RLSA-2026:25051 Vulnerability in libyang (RLSA-2026:25051)
vulnerability in libyang (RLSA-2026:25051). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:2.1.148-1.el9_8.1` or later.
RLSA-2026:25219 Vulnerability in redis (RLSA-2026:25219)
vulnerability in redis (RLSA-2026:25219). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:7.2.14-1.module+el9.8.0+40207+e2014501` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →