Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
DEBIAN-CVE-2026-41888 Vulnerability in docker-registry (DEBIAN-CVE-2026-41888)
vulnerability in docker-registry (DEBIAN-CVE-2026-41888). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /v2/`. Mitigation: upgrade to `3.1.1` or later.
CVE-2026-42572 Vulnerability in github.com/hatchet-dev/hatchet (CVE-2026-42572)
vulnerability in github.com/hatchet-dev/hatchet (CVE-2026-42572). Confidential information can be exposed externally. Exploitable via `GET /api/v1/stable/dags/tasks`. Mitigation: upgrade to `0.83.39` or later.
CVE-2026-41888 Authorization Flaw in github.com/distribution/distribution/v3 (CVE-2026-41888)
vulnerability in github.com/distribution/distribution/v3 (CVE-2026-41888). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /v2/`. Mitigation: upgrade to `3.1.1` or later.
UBUNTU-CVE-2026-44544 Vulnerability in gittuf (UBUNTU-CVE-2026-44544)
vulnerability in gittuf (UBUNTU-CVE-2026-44544). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.14.0` or later.
UBUNTU-CVE-2026-46470 Vulnerability in gst-plugins-good1.0 (UBUNTU-CVE-2026-46470)
vulnerability in gst-plugins-good1.0 (UBUNTU-CVE-2026-46470). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.20.3-0ubuntu1.6` or later.
UBUNTU-CVE-2026-46469 Vulnerability in gst-plugins-good1.0 (UBUNTU-CVE-2026-46469)
vulnerability in gst-plugins-good1.0 (UBUNTU-CVE-2026-46469). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.20.3-0ubuntu1.6` or later.
UBUNTU-CVE-2026-44283 Vulnerability in etcd (UBUNTU-CVE-2026-44283)
vulnerability in etcd (UBUNTU-CVE-2026-44283). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.44` or later.
UBUNTU-CVE-2026-41888 Vulnerability in docker-registry (UBUNTU-CVE-2026-41888)
vulnerability in docker-registry (UBUNTU-CVE-2026-41888). Risk of unauthorized operations or information disclosure. Exploitable via `DELETE /v2/`. Mitigation: upgrade to `3.1.1` or later.
RLSA-2026:16196 Vulnerability in kernel-rt (RLSA-2026:16196)
vulnerability in kernel-rt (RLSA-2026:16196). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.124.1.rt7.465.el8_10` or later.
RLSA-2026:17533 Vulnerability in gimp (RLSA-2026:17533)
vulnerability in gimp (RLSA-2026:17533). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:2.8.22-26.module+el8.10.0+40033+6fd27379.3` or later.
RLSA-2026:16875 Vulnerability in git-lfs (RLSA-2026:16875)
vulnerability in git-lfs (RLSA-2026:16875). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:3.4.1-10.el8_10` or later.
RLSA-2026:16252 Vulnerability in jq (RLSA-2026:16252)
vulnerability in jq (RLSA-2026:16252). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.6-12.el8_10` or later.
RLSA-2026:16799 Vulnerability in krb5 (RLSA-2026:16799)
vulnerability in krb5 (RLSA-2026:16799). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.18.2-34.el8_10` or later.
RLSA-2026:16195 Vulnerability in kernel (RLSA-2026:16195)
vulnerability in kernel (RLSA-2026:16195). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:4.18.0-553.124.1.el8_10` or later.
ECHO-63fc-2f8a-5391 ECHO-63fc-2f8a-5391
ECHO-c9b4-8303-30f9 ECHO-c9b4-8303-30f9
ECHO-1169-1a51-1552 ECHO-1169-1a51-1552
ECHO-07c3-3f85-b9ea ECHO-07c3-3f85-b9ea
ECHO-c17a-46ab-75a9 ECHO-c17a-46ab-75a9
ECHO-a6f1-a1c7-a609 ECHO-a6f1-a1c7-a609
ECHO-848c-5472-d56d ECHO-848c-5472-d56d
ECHO-4419-6a8c-5fc6 ECHO-4419-6a8c-5fc6
ECHO-63b9-137e-93f1 ECHO-63b9-137e-93f1
ECHO-e69f-5ef2-55d4 ECHO-e69f-5ef2-55d4
ECHO-b729-aa9a-e866 ECHO-b729-aa9a-e866
CGA-wh4q-hcx2-j928 CGA-wh4q-hcx2-j928
CGA-rp2j-pmmh-7mqc CGA-rp2j-pmmh-7mqc
CGA-q4qr-pvx7-f4wj CGA-q4qr-pvx7-f4wj
CGA-p2f4-4jq3-89hr CGA-p2f4-4jq3-89hr
CGA-7m5h-8rcx-xp2q CGA-7m5h-8rcx-xp2q
CGA-3rgm-946g-m52h CGA-3rgm-946g-m52h
CLSA-2026-1778774223 Vulnerability in gnutls (CLSA-2026-1778774223)
vulnerability in gnutls (CLSA-2026-1778774223). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.16-4.el8.tuxcare.els9` or later.
CVE-2026-7805 Vulnerability in CVE-2026-7805 (CVE-2026-7805)
vulnerability in CVE-2026-7805 (CVE-2026-7805). Risk of unauthorized operations or information disclosure.
CVE-2026-6923 Vulnerability in CVE-2026-6923 (CVE-2026-6923)
vulnerability in CVE-2026-6923 (CVE-2026-6923). Confidential information can be exposed externally.
CVE-2026-45448 CWE-601 URL redirection to untrusted site ('open redirect')
CWE-601 URL redirection to untrusted site ('open redirect')
CVE-2026-44515 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44515)
SSRF in ssrf (CVE-2026-44515). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `28.3.0-beta.1` or later.
CVE-2026-44514 Vulnerability in github.com/kubetail-org/kubetail/modules/dashboard (CVE-2026-44514)
vulnerability in github.com/kubetail-org/kubetail/modules/dashboard (CVE-2026-44514). Confidential information can be exposed externally. Exploitable via ``kubetail``. Mitigation: upgrade to `0.14.0` or later.
DEBIAN-CVE-2026-44312 Vulnerability in ruby-css-parser (DEBIAN-CVE-2026-44312)
vulnerability in ruby-css-parser (DEBIAN-CVE-2026-44312). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.0` or later.
CVE-2026-44511 Vulnerability in katalyst-koi (CVE-2026-44511)
vulnerability in katalyst-koi (CVE-2026-44511). Confidential information can be exposed externally. Mitigation: upgrade to `5.6.0` or later.
CVE-2026-44348 Vulnerability in c (CVE-2026-44348)
vulnerability in c (CVE-2026-44348). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.4` or later.
CVE-2026-42555 Code Injection in com.ritense.valtimo:document (CVE-2026-42555)
code injection in com.ritense.valtimo:document (CVE-2026-42555). Successful exploitation can lead to full system takeover. Exploitable via `POST /api/management/v1/document-definition/migrate`. Mitigation: upgrade to `12.32.0` or later.
CVE-2026-20224 Vulnerability in cisco (CVE-2026-20224)
vulnerability in cisco (CVE-2026-20224). Confidential information can be exposed externally.
CVE-2026-20210 Vulnerability in cisco (CVE-2026-20210)
vulnerability in cisco (CVE-2026-20210). Risk of unauthorized operations or information disclosure.
CVE-2025-62317 Vulnerability in CVE-2025-62317 (CVE-2025-62317)
vulnerability in CVE-2025-62317 (CVE-2025-62317). Risk of unauthorized operations or information disclosure.
CVE-2025-62316 Vulnerability in CVE-2025-62316 (CVE-2025-62316)
vulnerability in CVE-2025-62316 (CVE-2025-62316). Risk of unauthorized operations or information disclosure.
CVE-2025-62313 Vulnerability in CVE-2025-62313 (CVE-2025-62313)
vulnerability in CVE-2025-62313 (CVE-2025-62313). Risk of unauthorized operations or information disclosure.
CVE-2025-62312 Vulnerability in CVE-2025-62312 (CVE-2025-62312)
vulnerability in CVE-2025-62312 (CVE-2025-62312). Risk of unauthorized operations or information disclosure.
CVE-2025-62311 Vulnerability in CVE-2025-62311 (CVE-2025-62311)
vulnerability in CVE-2025-62311 (CVE-2025-62311). Risk of unauthorized operations or information disclosure.
CVE-2025-62310 Vulnerability in CVE-2025-62310 (CVE-2025-62310)
vulnerability in CVE-2025-62310 (CVE-2025-62310). Risk of unauthorized operations or information disclosure.
CVE-2025-62309 Vulnerability in CVE-2025-62309 (CVE-2025-62309)
vulnerability in CVE-2025-62309 (CVE-2025-62309). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →