Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
MAL-2026-3629 Vulnerability in github.com/BufferZoneCorp/net-helper (MAL-2026-3629)
vulnerability in github.com/BufferZoneCorp/net-helper (MAL-2026-3629). Risk of unauthorized operations or information disclosure.
MAL-2026-3620 Vulnerability in github.com/BufferZoneCorp/config-loader (MAL-2026-3620)
vulnerability in github.com/BufferZoneCorp/config-loader (MAL-2026-3620). Risk of unauthorized operations or information disclosure.
MAL-2026-3653 Vulnerability in @design-system-coopeuch/web (MAL-2026-3653)
vulnerability in @design-system-coopeuch/web (MAL-2026-3653). Risk of unauthorized operations or information disclosure. Exploitable via ``preinstall``.
JLSEC-2026-493 JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
JLSEC-2026-494 Vulnerability in GraphicsMagick_jll (JLSEC-2026-494)
vulnerability in GraphicsMagick_jll (JLSEC-2026-494). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.47+0` or later.
JLSEC-2026-495 Vulnerability in GraphicsMagick_jll (JLSEC-2026-495)
vulnerability in GraphicsMagick_jll (JLSEC-2026-495). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.3.47+0` or later.
CVE-2026-44720 Authentication Bypass in openlearnx (CVE-2026-44720)
authentication bypass in openlearnx (CVE-2026-44720). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.0.4` or later.
CVE-2026-45028 Vulnerability in astro (CVE-2026-45028)
vulnerability in astro (CVE-2026-45028). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.1.10` or later.
CVE-2026-44697 Vulnerability in github.com/klever-io/klever-go (CVE-2026-44697)
vulnerability in github.com/klever-io/klever-go (CVE-2026-44697). Risk of unauthorized operations or information disclosure.
CVE-2026-44681 Open Redirect in authlib (CVE-2026-44681)
vulnerability in authlib (CVE-2026-44681). Risk of unauthorized operations or information disclosure. Exploitable via `GET /oauth/authorize`. Mitigation: upgrade to `3be08468` or later.
CVE-2026-44672 Code Injection in org.mapfish.print:print-lib (CVE-2026-44672)
code injection in org.mapfish.print:print-lib (CVE-2026-44672). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.3` or later.
MAL-2026-3686 Vulnerability in amino-fix (MAL-2026-3686)
vulnerability in amino-fix (MAL-2026-3686). Risk of unauthorized operations or information disclosure. Exploitable via ``aminoed.uk.to``.
OSV-2026-720 Vulnerability in libcoap (OSV-2026-720)
vulnerability in libcoap (OSV-2026-720). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `13139e7be9cdb19a3eca3e170ae49261730473f8` or later.
ALSA-2026:16692 Vulnerability in jq (ALSA-2026:16692)
vulnerability in jq (ALSA-2026:16692). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.7.1-11.el10_1.0.2` or later.
UBUNTU-CVE-2026-8368 Vulnerability in libwww-perl (UBUNTU-CVE-2026-8368)
vulnerability in libwww-perl (UBUNTU-CVE-2026-8368). Confidential information can be exposed externally. Exploitable via `Authorization header`. Mitigation: upgrade to `6.61-1ubuntu0.1` or later.
UBUNTU-CVE-2026-8401 Vulnerability in mozjs52 (UBUNTU-CVE-2026-8401)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8401). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-8388 Vulnerability in mozjs52 (UBUNTU-CVE-2026-8388)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8388). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-8430 Vulnerability in spip (UBUNTU-CVE-2026-8430)
vulnerability in spip (UBUNTU-CVE-2026-8430). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-8390 Vulnerability in mozjs52 (UBUNTU-CVE-2026-8390)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8390). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-8389 Vulnerability in mozjs52 (UBUNTU-CVE-2026-8389)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8389). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-8429 Vulnerability in spip (UBUNTU-CVE-2026-8429)
vulnerability in spip (UBUNTU-CVE-2026-8429). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-8391 Vulnerability in mozjs52 (UBUNTU-CVE-2026-8391)
vulnerability in mozjs52 (UBUNTU-CVE-2026-8391). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-5089 Vulnerability in libyaml-syck-perl (UBUNTU-CVE-2026-5089)
vulnerability in libyaml-syck-perl (UBUNTU-CVE-2026-5089). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-46300 Vulnerability in linux (UBUNTU-CVE-2026-46300)
vulnerability in linux (UBUNTU-CVE-2026-46300). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.15.0-1109.116~20.04.1` or later.
UBUNTU-CVE-2026-44931 Vulnerability in malcontent (UBUNTU-CVE-2026-44931)
vulnerability in malcontent (UBUNTU-CVE-2026-44931). Risk of unauthorized operations or information disclosure.
UBUNTU-CVE-2026-43515 Vulnerability in tomcat6 (UBUNTU-CVE-2026-43515)
vulnerability in tomcat6 (UBUNTU-CVE-2026-43515). Confidential information can be exposed externally. Mitigation: upgrade to `6.0.39-1ubuntu0.1+esm3` or later.
UBUNTU-CVE-2026-44378 Vulnerability in botan3 (UBUNTU-CVE-2026-44378)
vulnerability in botan3 (UBUNTU-CVE-2026-44378). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.12.0` or later.
UBUNTU-CVE-2026-44167 Vulnerability in php-phpseclib (UBUNTU-CVE-2026-44167)
vulnerability in php-phpseclib (UBUNTU-CVE-2026-44167). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.0.29` or later.
UBUNTU-CVE-2026-43916 (pam_authnft is a PAM session module binding nftables firewall rules to ...)
UBUNTU-CVE-2026-42498 Vulnerability in tomcat6 (UBUNTU-CVE-2026-42498)
vulnerability in tomcat6 (UBUNTU-CVE-2026-42498). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.16-3ubuntu0.18.04.2+esm8` or later.
UBUNTU-CVE-2026-42006 Vulnerability in dovecot (UBUNTU-CVE-2026-42006)
vulnerability in dovecot (UBUNTU-CVE-2026-42006). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.16+dfsg1-3ubuntu2.9` or later.
UBUNTU-CVE-2026-41293 Vulnerability in tomcat6 (UBUNTU-CVE-2026-41293)
vulnerability in tomcat6 (UBUNTU-CVE-2026-41293). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `9.0.16-3ubuntu0.18.04.2+esm8` or later.
UBUNTU-CVE-2026-41284 Vulnerability in tomcat6 (UBUNTU-CVE-2026-41284)
vulnerability in tomcat6 (UBUNTU-CVE-2026-41284). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.0.16-3ubuntu0.18.04.2+esm8` or later.
UBUNTU-CVE-2026-40016 Vulnerability in dovecot (UBUNTU-CVE-2026-40016)
vulnerability in dovecot (UBUNTU-CVE-2026-40016). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.16+dfsg1-3ubuntu2.9` or later.
UBUNTU-CVE-2026-40020 Vulnerability in dovecot (UBUNTU-CVE-2026-40020)
vulnerability in dovecot (UBUNTU-CVE-2026-40020). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:2.3.16+dfsg1-3ubuntu2.9` or later.
UBUNTU-CVE-2026-33603 Vulnerability in dovecot (UBUNTU-CVE-2026-33603)
vulnerability in dovecot (UBUNTU-CVE-2026-33603). Confidential information can be exposed externally. Mitigation: upgrade to `1:2.3.16+dfsg1-3ubuntu2.9` or later.
UBUNTU-CVE-2026-31221 Vulnerability in pytorch (UBUNTU-CVE-2026-31221)
vulnerability in pytorch (UBUNTU-CVE-2026-31221). Successful exploitation can lead to full system takeover.
UBUNTU-CVE-2026-27851 Vulnerability in dovecot (UBUNTU-CVE-2026-27851)
vulnerability in dovecot (UBUNTU-CVE-2026-27851). Confidential information can be exposed externally. Mitigation: upgrade to `1:2.4.1+dfsg1-5ubuntu4.2` or later.
UBUNTU-CVE-2025-54518 Vulnerability in xen (UBUNTU-CVE-2025-54518)
vulnerability in xen (UBUNTU-CVE-2025-54518). Risk of unauthorized operations or information disclosure.
ALSA-2026:17075 Vulnerability in yggdrasil (ALSA-2026:17075)
vulnerability in yggdrasil (ALSA-2026:17075). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4.8-5.el10_1` or later.
ALSA-2026:16693 Vulnerability in jq (ALSA-2026:16693)
vulnerability in jq (ALSA-2026:16693). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6-19.el9_7.0.2` or later.
openSUSE-SU-2026:10774-1 Vulnerability in perl-Text-CSV_XS (openSUSE-SU-2026:10774-1)
vulnerability in perl-Text-CSV_XS (openSUSE-SU-2026:10774-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.620.0-1.1` or later.
openSUSE-SU-2026:10775-1 Vulnerability in rsync (openSUSE-SU-2026:10775-1)
vulnerability in rsync (openSUSE-SU-2026:10775-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.1-5.1` or later.
openSUSE-SU-2026:10772-1 Vulnerability in openexr (openSUSE-SU-2026:10772-1)
vulnerability in openexr (openSUSE-SU-2026:10772-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.4.11-1.1` or later.
openSUSE-SU-2026:10776-1 Vulnerability in tekton-cli (openSUSE-SU-2026:10776-1)
vulnerability in tekton-cli (openSUSE-SU-2026:10776-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.45.0-1.1` or later.
openSUSE-SU-2026:10773-1 Vulnerability in perl-CryptX (openSUSE-SU-2026:10773-1)
vulnerability in perl-CryptX (openSUSE-SU-2026:10773-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.89.0-1.1` or later.
openSUSE-SU-2026:10771-1 Vulnerability in google-osconfig-agent (openSUSE-SU-2026:10771-1)
vulnerability in google-osconfig-agent (openSUSE-SU-2026:10771-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `20260511.00-1.1` or later.
openSUSE-SU-2026:10767-1 Vulnerability in ffmpeg-4 (openSUSE-SU-2026:10767-1)
vulnerability in ffmpeg-4 (openSUSE-SU-2026:10767-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.6-12.1` or later.
openSUSE-SU-2026:10769-1 Vulnerability in flux2-cli (openSUSE-SU-2026:10769-1)
vulnerability in flux2-cli (openSUSE-SU-2026:10769-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.7-1.1` or later.
openSUSE-SU-2026:10768-1 Vulnerability in ffmpeg-7 (openSUSE-SU-2026:10768-1)
vulnerability in ffmpeg-7 (openSUSE-SU-2026:10768-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.3-3.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →