Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
SUSE-SU-2026:21752-1 Vulnerability in SUSE-SU-2026:21752-1 (SUSE-SU-2026:21752-1)
vulnerability in SUSE-SU-2026:21752-1 (SUSE-SU-2026:21752-1). Risk of unauthorized operations or information disclosure.
RHSA-2026:18028 Red Hat Security Advisory: libpng security update
Red Hat Security Advisory: libpng security update
RHSA-2026:18025 Vulnerability in kpatch-patch-5_14_0-570_17_1 (RHSA-2026:18025)
vulnerability in kpatch-patch-5_14_0-570_17_1 (RHSA-2026:18025). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1-14.el9_6` or later.
RHSA-2026:18024 Red Hat Security Advisory: PackageKit security update
Red Hat Security Advisory: PackageKit security update
openSUSE-SU-2026:20776-1 Vulnerability in openSUSE-SU-2026:20776-1 (openSUSE-SU-2026:20776-1)
vulnerability in openSUSE-SU-2026:20776-1 (openSUSE-SU-2026:20776-1). Risk of unauthorized operations or information disclosure.
CLSA-2026-1779098432 Vulnerability in curl (CLSA-2026-1779098432)
vulnerability in curl (CLSA-2026-1779098432). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.68.0-1ubuntu2.25+tuxcare.els2` or later.
SUSE-SU-2026:21814-1 Vulnerability in SUSE-SU-2026:21814-1 (SUSE-SU-2026:21814-1)
vulnerability in SUSE-SU-2026:21814-1 (SUSE-SU-2026:21814-1). Risk of unauthorized operations or information disclosure.
CLSA-2026-1779098063 Vulnerability in cloud-init (CLSA-2026-1779098063)
vulnerability in cloud-init (CLSA-2026-1779098063). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `24.4-4.el9.3.alma.1.tuxcare.els1` or later.
SUSE-SU-2026:21816-1 Vulnerability in SUSE-SU-2026:21816-1 (SUSE-SU-2026:21816-1)
vulnerability in SUSE-SU-2026:21816-1 (SUSE-SU-2026:21816-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21765-1 Vulnerability in SUSE-SU-2026:21765-1 (SUSE-SU-2026:21765-1)
vulnerability in SUSE-SU-2026:21765-1 (SUSE-SU-2026:21765-1). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:20777-1 Vulnerability in openSUSE-SU-2026:20777-1 (openSUSE-SU-2026:20777-1)
vulnerability in openSUSE-SU-2026:20777-1 (openSUSE-SU-2026:20777-1). Risk of unauthorized operations or information disclosure.
CLSA-2026-1779097389 qemu-kvm: Fix of CVE-2023-6693
qemu-kvm: Fix of CVE-2023-6693
SUSE-SU-2026:21813-1 Vulnerability in SUSE-SU-2026:21813-1 (SUSE-SU-2026:21813-1)
vulnerability in SUSE-SU-2026:21813-1 (SUSE-SU-2026:21813-1). Risk of unauthorized operations or information disclosure.
ROOT-APP-NPM-CVE-2026-41907 Vulnerability in @rootio/uuid (ROOT-APP-NPM-CVE-2026-41907)
vulnerability in @rootio/uuid (ROOT-APP-NPM-CVE-2026-41907). Data can be tampered with by attackers. Mitigation: upgrade to `11.1.0-root.io.1, 13.0.0-root.io.1, 11.1.0-root.io.2, 8.3.2-root.io.2, 10.0.0-root.io.2, 9.0.1-root.io.2, 8.0.0-root.io.1, 11.0.3-root.io.2, 13.0.0-root.io.2, 10.0.0-root.io.3, 13.0.0-root.io.3, 11.1.0-root.io.3, 8.3.2-root.io.3, 11.0.3-root.io.3, 8.0.0-root.io.2, 8.3.2-root.io.4, 8.3.2-root.io.5, 11.1.0-root.io.4, 8.0.0-root.io.3, 10.0.0-root.io.4, 9.0.1-root.io.3, 9.0.1-root.io.4` or later.
SUSE-SU-2026:1960-1 Vulnerability in SUSE-SU-2026:1960-1 (SUSE-SU-2026:1960-1)
vulnerability in SUSE-SU-2026:1960-1 (SUSE-SU-2026:1960-1). Risk of unauthorized operations or information disclosure.
CVE-2026-6347 Information Disclosure in github.com/mattermost/mattermost-server (CVE-2026-6347)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-6347). Confidential information can be exposed externally. Mitigation: upgrade to `11.4.4` or later.
CVE-2026-5163 Vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-5163)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-5163). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.0-20260401090745-f4d1abe7e8f5` or later.
CVE-2026-7498 Cross-Site Scripting (XSS) in CVE-2026-7498 (CVE-2026-7498)
cross-site scripting in CVE-2026-7498 (CVE-2026-7498). Successful exploitation can lead to full system takeover.
CVE-2026-6343 Authorization Flaw in github.com/mattermost/mattermost/server/v8 (CVE-2026-6343)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6343). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.14` or later.
CVE-2026-6339 Vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6339)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6339). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0-20260327001745-7a339a6438f5` or later.
CVE-2026-4643 Vulnerability in dos (CVE-2026-4643)
vulnerability in dos (CVE-2026-4643). Risk of unauthorized operations or information disclosure.
CVE-2026-3117 Vulnerability in mattermost (CVE-2026-3117)
vulnerability in mattermost (CVE-2026-3117). Risk of unauthorized operations or information disclosure.
CVE-2026-6333 SSRF (Server-Side Request Forgery) in github.com/mattermost/mattermost/server/v8 (CVE-2026-6333)
SSRF in github.com/mattermost/mattermost/server/v8 (CVE-2026-6333). Risk of unauthorized operations or information disclosure. Exploitable via `Host header`. Mitigation: upgrade to `8.0.0-20260325160634-e738016c5920` or later.
CVE-2026-6341 Authorization Flaw in mattermost (CVE-2026-6341)
vulnerability in mattermost (CVE-2026-6341). Risk of unauthorized operations or information disclosure.
CVE-2026-6345 Vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6345)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6345). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.0-20260311102650-3057ae7e83e9` or later.
CVE-2026-3471 Vulnerability in mattermost (CVE-2026-3471)
vulnerability in mattermost (CVE-2026-3471). Risk of unauthorized operations or information disclosure.
CVE-2026-6342 Authorization Flaw in mattermost (CVE-2026-6342)
vulnerability in mattermost (CVE-2026-6342). Risk of unauthorized operations or information disclosure.
CVE-2026-6902 Code Injection in CVE-2026-6902 (CVE-2026-6902)
code injection in CVE-2026-6902 (CVE-2026-6902). Risk of unauthorized operations or information disclosure.
CVE-2026-6346 Information Disclosure in github.com/mattermost/mattermost/server/v8 (CVE-2026-6346)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6346). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.0-20260326202606-fac92f4a71f3` or later.
CVE-2026-28732 Authorization Flaw in github.com/mattermost/mattermost/server/v8 (CVE-2026-28732)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-28732). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0-20260306123948-f5fe8ded6b63` or later.
CVE-2026-4286 Authorization Flaw in github.com/mattermost/mattermost/server/v8 (CVE-2026-4286)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-4286). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.11.14` or later.
CVE-2026-8788 Vulnerability in CVE-2026-8788 (CVE-2026-8788)
vulnerability in CVE-2026-8788 (CVE-2026-8788). Risk of unauthorized operations or information disclosure.
CVE-2026-4273 Authorization Flaw in github.com/mattermost/mattermost/server/v8 (CVE-2026-4273)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-4273). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0-20260313190740-742e0be95074` or later.
CVE-2026-6340 Vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6340)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6340). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0-20260325191733-fb11968f8798` or later.
CVE-2026-6334 Vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6334)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-6334). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0-20260318173148-e9ae890a013b` or later.
CVE-2026-28759 Authorization Flaw in github.com/mattermost/mattermost/server/v8 (CVE-2026-28759)
vulnerability in github.com/mattermost/mattermost/server/v8 (CVE-2026-28759). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0-20260216150504-8738f8c4b3d4` or later.
CVE-2026-2325 Vulnerability in github.com/mattermost/mattermost-server (CVE-2026-2325)
vulnerability in github.com/mattermost/mattermost-server (CVE-2026-2325). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.4.4` or later.
CVE-2026-3495 Cross-Site Scripting (XSS) in github.com/mattermost/mattermost/server/v8 (CVE-2026-3495)
cross-site scripting in github.com/mattermost/mattermost/server/v8 (CVE-2026-3495). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.0-20260310115442-5a1ea95044d` or later.
CVE-2026-3637 Vulnerability in github.com/mattermost/mattermost/server/public (CVE-2026-3637)
vulnerability in github.com/mattermost/mattermost/server/public (CVE-2026-3637). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.3.0` or later.
CLSA-2026-1779096552 Vulnerability in idle-python3.7 (CLSA-2026-1779096552)
vulnerability in idle-python3.7 (CLSA-2026-1779096552). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.7.3-2+deb10u7+tuxcare.els3` or later.
CLSA-2026-1779096347 Vulnerability in postfix (CLSA-2026-1779096347)
vulnerability in postfix (CLSA-2026-1779096347). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:3.5.8-7.el8.tuxcare.els1` or later.
CLSA-2026-1779095842 Vulnerability in memcached (CLSA-2026-1779095842)
vulnerability in memcached (CLSA-2026-1779095842). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6.9-7.el9.tuxcare.els1` or later.
SUSE-SU-2026:21775-1 Vulnerability in SUSE-SU-2026:21775-1 (SUSE-SU-2026:21775-1)
vulnerability in SUSE-SU-2026:21775-1 (SUSE-SU-2026:21775-1). Risk of unauthorized operations or information disclosure.
GHSA-h48h-6qwg-6fwg Vulnerability in safe-env-reader (GHSA-h48h-6qwg-6fwg)
vulnerability in safe-env-reader (GHSA-h48h-6qwg-6fwg). Risk of unauthorized operations or information disclosure.
GHSA-v2g5-p8g8-3q37 Vulnerability in validate-api-key (GHSA-v2g5-p8g8-3q37)
vulnerability in validate-api-key (GHSA-v2g5-p8g8-3q37). Risk of unauthorized operations or information disclosure.
GHSA-qr8m-9gqh-9r3f Vulnerability in parse-regex-string (GHSA-qr8m-9gqh-9r3f)
vulnerability in parse-regex-string (GHSA-qr8m-9gqh-9r3f). Risk of unauthorized operations or information disclosure.
GHSA-hg9f-779j-m788 Vulnerability in string-manipulation-typescript (GHSA-hg9f-779j-m788)
vulnerability in string-manipulation-typescript (GHSA-hg9f-779j-m788). Risk of unauthorized operations or information disclosure.
GHSA-qv2f-j4wq-jrvg Vulnerability in secure-env-loader (GHSA-qv2f-j4wq-jrvg)
vulnerability in secure-env-loader (GHSA-qv2f-j4wq-jrvg). Risk of unauthorized operations or information disclosure.
GHSA-7539-9rfq-wvx7 Vulnerability in parse-escape-regex-string (GHSA-7539-9rfq-wvx7)
vulnerability in parse-escape-regex-string (GHSA-7539-9rfq-wvx7). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21774-1 Vulnerability in SUSE-SU-2026:21774-1 (SUSE-SU-2026:21774-1)
vulnerability in SUSE-SU-2026:21774-1 (SUSE-SU-2026:21774-1). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →