Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| GHSA-v9qg-v8xv-qjpc |
|
Vulnerability in @squawk/units (GHSA-v9qg-v8xv-qjpc)
vulnerability in @squawk/units (GHSA-v9qg-v8xv-qjpc). Risk of unauthorized operations or information disclosure.
|
| GHSA-2mgf-6xw7-hjgh |
|
Vulnerability in @squawk/flightplan (GHSA-2mgf-6xw7-hjgh)
vulnerability in @squawk/flightplan (GHSA-2mgf-6xw7-hjgh). Risk of unauthorized operations or information disclosure.
|
| GHSA-4q5g-g93p-w23v |
|
Vulnerability in @squawk/airport-data (GHSA-4q5g-g93p-w23v)
vulnerability in @squawk/airport-data (GHSA-4q5g-g93p-w23v). Risk of unauthorized operations or information disclosure.
|
| GHSA-r72q-f5pp-8556 |
|
Vulnerability in @squawk/icao-registry-data (GHSA-r72q-f5pp-8556)
vulnerability in @squawk/icao-registry-data (GHSA-r72q-f5pp-8556). Risk of unauthorized operations or information disclosure.
|
| GHSA-p6w9-58xc-257f |
|
Vulnerability in @squawk/weather (GHSA-p6w9-58xc-257f)
vulnerability in @squawk/weather (GHSA-p6w9-58xc-257f). Risk of unauthorized operations or information disclosure.
|
| GHSA-w75r-vq2j-vpmf |
|
Vulnerability in @squawk/fix-data (GHSA-w75r-vq2j-vpmf)
vulnerability in @squawk/fix-data (GHSA-w75r-vq2j-vpmf). Risk of unauthorized operations or information disclosure.
|
| GHSA-9ffp-9935-xjqq |
|
Vulnerability in cross-stitch (GHSA-9ffp-9935-xjqq)
vulnerability in cross-stitch (GHSA-9ffp-9935-xjqq). Risk of unauthorized operations or information disclosure.
|
| OSV-2026-718 |
|
Vulnerability in md4c (OSV-2026-718)
vulnerability in md4c (OSV-2026-718). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4f0b252c8e8952d53156949777ebfe3f9355def3` or later.
|
| CVE-2026-45321 KEV |
|
[KEV] Vulnerability in @tanstack/arktype-adapter (CVE-2026-45321)
vulnerability in @tanstack/arktype-adapter (CVE-2026-45321). Successful exploitation can lead to full system takeover. Exploitable via ``pull_request_target``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.166.16` or later.
|
| OSV-2026-717 |
|
Vulnerability in md4c (OSV-2026-717)
vulnerability in md4c (OSV-2026-717). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4f0b252c8e8952d53156949777ebfe3f9355def3` or later.
|
| GHSA-2gqf-jmq8-m7qw |
|
Vulnerability in @tanstack/solid-start-server (GHSA-2gqf-jmq8-m7qw)
vulnerability in @tanstack/solid-start-server (GHSA-2gqf-jmq8-m7qw). Risk of unauthorized operations or information disclosure.
|
| GHSA-8hxh-jf75-8g4x |
|
Vulnerability in @tanstack/solid-start (GHSA-8hxh-jf75-8g4x)
vulnerability in @tanstack/solid-start (GHSA-8hxh-jf75-8g4x). Risk of unauthorized operations or information disclosure.
|
| GHSA-68cm-p79h-wv3p |
|
Vulnerability in @tanstack/start-client-core (GHSA-68cm-p79h-wv3p)
vulnerability in @tanstack/start-client-core (GHSA-68cm-p79h-wv3p). Risk of unauthorized operations or information disclosure.
|
| GHSA-phm9-h72q-2rv5 |
|
Vulnerability in @tanstack/start-fn-stubs (GHSA-phm9-h72q-2rv5)
vulnerability in @tanstack/start-fn-stubs (GHSA-phm9-h72q-2rv5). Risk of unauthorized operations or information disclosure.
|
| GHSA-q8qg-3r28-j492 |
|
Vulnerability in @tanstack/start-plugin-core (GHSA-q8qg-3r28-j492)
vulnerability in @tanstack/start-plugin-core (GHSA-q8qg-3r28-j492). Risk of unauthorized operations or information disclosure.
|
| GHSA-gg66-jfg8-rcgq |
|
Vulnerability in @tanstack/start-server-core (GHSA-gg66-jfg8-rcgq)
vulnerability in @tanstack/start-server-core (GHSA-gg66-jfg8-rcgq). Risk of unauthorized operations or information disclosure.
|
| GHSA-r9g7-9xhm-p5qp |
|
Vulnerability in @tanstack/start-static-server-functions (GHSA-r9g7-9xhm-p5qp)
vulnerability in @tanstack/start-static-server-functions (GHSA-r9g7-9xhm-p5qp). Risk of unauthorized operations or information disclosure.
|
| GHSA-66j2-5c8h-j3f7 |
|
Vulnerability in @tanstack/start-storage-context (GHSA-66j2-5c8h-j3f7)
vulnerability in @tanstack/start-storage-context (GHSA-66j2-5c8h-j3f7). Risk of unauthorized operations or information disclosure.
|
| GHSA-wvhh-9pj7-jw99 |
|
Vulnerability in @tanstack/valibot-adapter (GHSA-wvhh-9pj7-jw99)
vulnerability in @tanstack/valibot-adapter (GHSA-wvhh-9pj7-jw99). Risk of unauthorized operations or information disclosure.
|
| GHSA-w9mx-wqhv-4cvw |
|
Vulnerability in @tanstack/virtual-file-routes (GHSA-w9mx-wqhv-4cvw)
vulnerability in @tanstack/virtual-file-routes (GHSA-w9mx-wqhv-4cvw). Risk of unauthorized operations or information disclosure.
|
| GHSA-h7cj-xw74-w7h7 |
|
Vulnerability in @tanstack/vue-router-devtools (GHSA-h7cj-xw74-w7h7)
vulnerability in @tanstack/vue-router-devtools (GHSA-h7cj-xw74-w7h7). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-42899 |
|
Vulnerability in dotnet6 (UBUNTU-CVE-2026-42899)
vulnerability in dotnet6 (UBUNTU-CVE-2026-42899). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.127-8.0.27-0ubuntu1~22.04.1` or later.
|
| UBUNTU-CVE-2026-35433 |
|
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. |
| UBUNTU-CVE-2026-32175 |
|
Vulnerability in dotnet7 (UBUNTU-CVE-2026-32175)
vulnerability in dotnet7 (UBUNTU-CVE-2026-32175). Risk of unauthorized operations or information disclosure.
|
| UBUNTU-CVE-2026-32177 |
|
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. |
| ALSA-2026:16206 |
|
Vulnerability in kernel (ALSA-2026:16206)
vulnerability in kernel (ALSA-2026:16206). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.14.0-611.55.1.el9_7` or later.
|
| ALSA-2026:16482 |
|
Vulnerability in freerdp (ALSA-2026:16482)
vulnerability in freerdp (ALSA-2026:16482). Risk of unauthorized operations or information disclosure. Exploitable via ``nBlockAlign``. Mitigation: upgrade to `2:2.11.7-1.el9_7.7` or later.
|
| ALSA-2026:16195 |
|
Vulnerability in bpftool (ALSA-2026:16195)
vulnerability in bpftool (ALSA-2026:16195). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.18.0-553.124.1.el8_10` or later.
|
| UBUNTU-CVE-2026-45185 |
|
Vulnerability in exim4 (UBUNTU-CVE-2026-45185)
vulnerability in exim4 (UBUNTU-CVE-2026-45185). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.95-4ubuntu2.8` or later.
|
| UBUNTU-CVE-2026-42304 |
|
Vulnerability in twisted (UBUNTU-CVE-2026-42304)
vulnerability in twisted (UBUNTU-CVE-2026-42304). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.4.0rc2` or later.
|
| ALSA-2026:16484 |
|
Vulnerability in gimp (ALSA-2026:16484)
vulnerability in gimp (ALSA-2026:16484). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:3.0.4-1.el9_7.5` or later.
|
| ALSA-2026:16252 |
|
Vulnerability in jq (ALSA-2026:16252)
vulnerability in jq (ALSA-2026:16252). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.6-12.el8_10` or later.
|
| ALSA-2026:16196 |
|
Vulnerability in kernel-rt (ALSA-2026:16196)
vulnerability in kernel-rt (ALSA-2026:16196). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.18.0-553.124.1.rt7.465.el8_10` or later.
|
| openSUSE-SU-2026:10759-1 |
|
Vulnerability in python-Twisted (openSUSE-SU-2026:10759-1)
vulnerability in python-Twisted (openSUSE-SU-2026:10759-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `26.4.0-1.1` or later.
|
| openSUSE-SU-2026:10762-1 |
|
Vulnerability in rclone (openSUSE-SU-2026:10762-1)
vulnerability in rclone (openSUSE-SU-2026:10762-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.74.1-1.1` or later.
|
| openSUSE-SU-2026:10763-1 |
|
Vulnerability in regclient (openSUSE-SU-2026:10763-1)
vulnerability in regclient (openSUSE-SU-2026:10763-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.11.4-1.1` or later.
|
| openSUSE-SU-2026:10761-1 |
|
Vulnerability in python-mistune (openSUSE-SU-2026:10761-1)
vulnerability in python-mistune (openSUSE-SU-2026:10761-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.1-1.1` or later.
|
| openSUSE-SU-2026:10760-1 |
|
Vulnerability in python-click (openSUSE-SU-2026:10760-1)
vulnerability in python-click (openSUSE-SU-2026:10760-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.3.3-2.1` or later.
|
| openSUSE-SU-2026:10758-1 |
|
Vulnerability in python-GitPython (openSUSE-SU-2026:10758-1)
vulnerability in python-GitPython (openSUSE-SU-2026:10758-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.49-1.1` or later.
|
| openSUSE-SU-2026:10764-1 |
|
Vulnerability in syncthing (openSUSE-SU-2026:10764-1)
vulnerability in syncthing (openSUSE-SU-2026:10764-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.1.0-1.1` or later.
|
| openSUSE-SU-2026:10754-1 |
|
Vulnerability in kubectl-cnpg (openSUSE-SU-2026:10754-1)
vulnerability in kubectl-cnpg (openSUSE-SU-2026:10754-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.29.1-1.1` or later.
|
| openSUSE-SU-2026:10753-1 |
|
Vulnerability in cosign (openSUSE-SU-2026:10753-1)
vulnerability in cosign (openSUSE-SU-2026:10753-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.6-1.1` or later.
|
| openSUSE-SU-2026:10756-1 |
|
Vulnerability in perl-Net-CIDR (openSUSE-SU-2026:10756-1)
vulnerability in perl-Net-CIDR (openSUSE-SU-2026:10756-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.270.0-2.1` or later.
|
| openSUSE-SU-2026:10755-1 |
|
Vulnerability in opa (openSUSE-SU-2026:10755-1)
vulnerability in opa (openSUSE-SU-2026:10755-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.16.2-1.1` or later.
|
| openSUSE-SU-2026:10752-1 |
|
Vulnerability in OpenImageIO (openSUSE-SU-2026:10752-1)
vulnerability in OpenImageIO (openSUSE-SU-2026:10752-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.1.13.1-2.1` or later.
|
| openSUSE-SU-2026:10757-1 |
|
Vulnerability in perl-Starman (openSUSE-SU-2026:10757-1)
vulnerability in perl-Starman (openSUSE-SU-2026:10757-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.4018-1.1` or later.
|
| GHSA-8rxr-9xrf-66wv |
|
Vulnerability in @tanstack/vue-router-ssr-query (GHSA-8rxr-9xrf-66wv)
vulnerability in @tanstack/vue-router-ssr-query (GHSA-8rxr-9xrf-66wv). Risk of unauthorized operations or information disclosure.
|
| GHSA-wp6c-87p2-r5xw |
|
Vulnerability in @tanstack/router-plugin (GHSA-wp6c-87p2-r5xw)
vulnerability in @tanstack/router-plugin (GHSA-wp6c-87p2-r5xw). Risk of unauthorized operations or information disclosure.
|
| GHSA-p6r2-524x-2vh3 |
|
Vulnerability in @tanstack/vue-router (GHSA-p6r2-524x-2vh3)
vulnerability in @tanstack/vue-router (GHSA-p6r2-524x-2vh3). Risk of unauthorized operations or information disclosure.
|
| GHSA-4fcj-3grh-9fhv |
|
Vulnerability in @tanstack/router-generator (GHSA-4fcj-3grh-9fhv)
vulnerability in @tanstack/router-generator (GHSA-4fcj-3grh-9fhv). Risk of unauthorized operations or information disclosure.
|