Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-54228 |
|
Vulnerability in CVE-2026-54228 (CVE-2026-54228)
vulnerability in CVE-2026-54228 (CVE-2026-54228). Successful exploitation can lead to full system takeover.
|
| GHSA-qj3m-j6gv-53pg |
|
Vulnerability in ecto_module (GHSA-qj3m-j6gv-53pg)
vulnerability in ecto_module (GHSA-qj3m-j6gv-53pg). Risk of unauthorized operations or information disclosure. Exploitable via ``manifest``.
|
| MAL-2026-5726 |
|
Vulnerability in ecto_module (MAL-2026-5726)
vulnerability in ecto_module (MAL-2026-5726). Risk of unauthorized operations or information disclosure. Exploitable via ``manifest``.
|
| GHSA-9j99-p89c-pjwq |
|
Vulnerability in vite-config-react (GHSA-9j99-p89c-pjwq)
vulnerability in vite-config-react (GHSA-9j99-p89c-pjwq). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
|
| MAL-2026-5728 |
|
Vulnerability in vite-config-react (MAL-2026-5728)
vulnerability in vite-config-react (MAL-2026-5728). Risk of unauthorized operations or information disclosure. Exploitable via ``require``.
|
| MAL-2026-5727 |
|
Vulnerability in vite-config-optimizer (MAL-2026-5727)
vulnerability in vite-config-optimizer (MAL-2026-5727). Risk of unauthorized operations or information disclosure. Exploitable via ``WebpackCachePlugin``.
|
| CGA-wfp9-7crf-vm4f |
|
CGA-wfp9-7crf-vm4f |
| CGA-jhch-j39m-p3q5 |
|
CGA-jhch-j39m-p3q5 |
| CGA-mffj-wv54-pff8 |
|
CGA-mffj-wv54-pff8 |
| MAL-2026-5723 |
|
Vulnerability in @ci-lifecycle-test/postinstall-ping (MAL-2026-5723)
vulnerability in @ci-lifecycle-test/postinstall-ping (MAL-2026-5723). Risk of unauthorized operations or information disclosure.
|
| GHSA-gxc9-xrxm-w788 |
|
Vulnerability in warp-dependency (GHSA-gxc9-xrxm-w788)
vulnerability in warp-dependency (GHSA-gxc9-xrxm-w788). Risk of unauthorized operations or information disclosure. Exploitable via ``_0x345c``.
|
| MAL-2026-5724 |
|
Vulnerability in warp-dependency (MAL-2026-5724)
vulnerability in warp-dependency (MAL-2026-5724). Risk of unauthorized operations or information disclosure. Exploitable via ``_0x345c``.
|
| MGASA-2026-0207 |
|
Vulnerability in mariadb (MGASA-2026-0207)
vulnerability in mariadb (MGASA-2026-0207). Risk of unauthorized operations or information disclosure. Exploitable via ``wsrep_notify_cmd``. Mitigation: upgrade to `11.4.12-1.1.mga9` or later.
|
| MGASA-2026-0206 |
|
Updated openimageio packages fix security vulnerability
Updated openimageio packages fix security vulnerability
|
| MGASA-2026-0205 |
|
Vulnerability in libpng (MGASA-2026-0205)
vulnerability in libpng (MGASA-2026-0205). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.38-1.6.mga9` or later.
|
| CGA-fgjj-fqqx-3r98 |
|
CGA-fgjj-fqqx-3r98 |
| CGA-6g9w-hrhq-h74f |
|
CGA-6g9w-hrhq-h74f |
| MAL-2026-5725 |
|
Vulnerability in dash-grid-normalizer (MAL-2026-5725)
vulnerability in dash-grid-normalizer (MAL-2026-5725). Risk of unauthorized operations or information disclosure.
|
| CGA-c55g-jgqw-3v6q |
|
CGA-c55g-jgqw-3v6q |
| CVE-2025-9032 |
|
Out-of-Bounds Read in CVE-2025-9032 (CVE-2025-9032)
vulnerability in CVE-2025-9032 (CVE-2025-9032). Successful exploitation can lead to full system takeover.
|
| CVE-2025-14098 |
|
Vulnerability in dos (CVE-2025-14098)
vulnerability in dos (CVE-2025-14098). Successful exploitation can lead to full system takeover.
|
| CVE-2026-6676 |
|
Out-of-Bounds Write in CVE-2026-6676 (CVE-2026-6676)
out-of-bounds write in CVE-2026-6676 (CVE-2026-6676). Successful exploitation can lead to full system takeover.
|
| CVE-2026-12068 |
|
Vulnerability in CVE-2026-12068 (CVE-2026-12068)
vulnerability in CVE-2026-12068 (CVE-2026-12068). Confidential information can be exposed externally.
|
| CVE-2025-9033 |
|
Out-of-Bounds Read in CVE-2025-9033 (CVE-2025-9033)
vulnerability in CVE-2025-9033 (CVE-2025-9033). Successful exploitation can lead to full system takeover.
|
| CVE-2026-11443 |
|
Cross-Site Scripting (XSS) in CVE-2026-11443 (CVE-2026-11443)
cross-site scripting in CVE-2026-11443 (CVE-2026-11443). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11442 |
|
Path Traversal in path-traversal (CVE-2026-11442)
path traversal in path-traversal (CVE-2026-11442). Confidential information can be exposed externally.
|
| CGA-45wc-63wv-9fr5 |
|
CGA-45wc-63wv-9fr5 |
| CGA-m28x-2c36-rg9c |
|
CGA-m28x-2c36-rg9c |
| CGA-jqh9-97gx-p457 |
|
CGA-jqh9-97gx-p457 |
| CGA-25vr-95wg-p22j |
|
CGA-25vr-95wg-p22j |
| CGA-5f93-p45j-4m35 |
|
CGA-5f93-p45j-4m35 |
| OSV-2026-910 |
|
Vulnerability in gpac (OSV-2026-910)
vulnerability in gpac (OSV-2026-910). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1308b19e63ca1fb9990803bb74136f77e6c9ddee, 7ee24256a42bc8f4e117907ae77df6a095befb2c` or later.
|
| OSV-2026-907 |
|
Vulnerability in gpac (OSV-2026-907)
vulnerability in gpac (OSV-2026-907). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1308b19e63ca1fb9990803bb74136f77e6c9ddee, 7ee24256a42bc8f4e117907ae77df6a095befb2c` or later.
|
| RLSA-2026:25191 |
|
Vulnerability in kernel (RLSA-2026:25191)
vulnerability in kernel (RLSA-2026:25191). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:6.12.0-211.22.1.el10_2` or later.
|
| RLSA-2026:25111 |
|
Vulnerability in dotnet8.0 (RLSA-2026:25111)
vulnerability in dotnet8.0 (RLSA-2026:25111). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:8.0.128-1.el10_2` or later.
|
| RLSA-2026:25237 |
|
Vulnerability in openssl (RLSA-2026:25237)
vulnerability in openssl (RLSA-2026:25237). Confidential information can be exposed externally. Mitigation: upgrade to `1:3.5.5-4.el10_2` or later.
|
| RLSA-2026:25216 |
|
Vulnerability in valkey (RLSA-2026:25216)
vulnerability in valkey (RLSA-2026:25216). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:8.0.9-1.el10_2` or later.
|
| RLSA-2026:24985 |
|
Vulnerability in poppler (RLSA-2026:24985)
vulnerability in poppler (RLSA-2026:24985). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:24.02.0-7.el10_2.2` or later.
|
| RLSA-2026:25115 |
|
Vulnerability in dotnet10.0 (RLSA-2026:25115)
vulnerability in dotnet10.0 (RLSA-2026:25115). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:10.0.109-1.el10_2` or later.
|
| RLSA-2026:25225 |
|
Vulnerability in mod_http2 (RLSA-2026:25225)
vulnerability in mod_http2 (RLSA-2026:25225). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:2.0.29-4.el10_2.1` or later.
|
| RLSA-2026:25112 |
|
Vulnerability in dotnet9.0 (RLSA-2026:25112)
vulnerability in dotnet9.0 (RLSA-2026:25112). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:9.0.118-1.el10_2` or later.
|
| RLSA-2026:25239 |
|
Vulnerability in openssl (RLSA-2026:25239)
vulnerability in openssl (RLSA-2026:25239). Confidential information can be exposed externally. Mitigation: upgrade to `1:3.5.5-4.el9_8` or later.
|
| RLSA-2026:25221 |
|
Vulnerability in dotnet9.0 (RLSA-2026:25221)
vulnerability in dotnet9.0 (RLSA-2026:25221). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:9.0.118-1.el9_8` or later.
|
| RLSA-2026:25058 |
|
Vulnerability in poppler (RLSA-2026:25058)
vulnerability in poppler (RLSA-2026:25058). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:21.01.0-24.el9_8.1` or later.
|
| RLSA-2026:25217 |
|
Vulnerability in kernel (RLSA-2026:25217)
vulnerability in kernel (RLSA-2026:25217). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:5.14.0-687.15.1.el9_8` or later.
|
| RLSA-2026:25049 |
|
Vulnerability in samba (RLSA-2026:25049)
vulnerability in samba (RLSA-2026:25049). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.23.5-10.el9_8` or later.
|
| RLSA-2026:25057 |
|
Vulnerability in mod_http2 (RLSA-2026:25057)
vulnerability in mod_http2 (RLSA-2026:25057). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:2.0.26-6.el9_8.1` or later.
|
| RLSA-2026:25222 |
|
Vulnerability in dotnet10.0 (RLSA-2026:25222)
vulnerability in dotnet10.0 (RLSA-2026:25222). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:10.0.109-1.el9_8` or later.
|
| RLSA-2026:25051 |
|
Vulnerability in libyang (RLSA-2026:25051)
vulnerability in libyang (RLSA-2026:25051). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:2.1.148-1.el9_8.1` or later.
|
| RLSA-2026:25219 |
|
Vulnerability in redis (RLSA-2026:25219)
vulnerability in redis (RLSA-2026:25219). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:7.2.14-1.module+el9.8.0+40207+e2014501` or later.
|