Bugs with TODO items

Hide "check" TODOs

BugDescriptionNote
CVE-2016-1584In all versions of Unity8 a running but not active application on a la ...check proper tracking update
CVE-2018-25305librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that all ...check
CVE-2018-25306PDFunite 0.41.0 contains a buffer overflow vulnerability that allows l ...check
CVE-2019-25485R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the ...check
CVE-2019-25683FileZilla 3.40.0 contains a denial of service vulnerability in the loc ...check
CVE-2022-4996A flaw has been found in mruby 3.1.0. Affected is the function udiv of ...check
CVE-2022-23538github.com/sylabs/scs-library-client is the Go client for the Singular ...check details, might as well affect golang-github-apptainer-container-library-client
CVE-2022-50942Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerab ...check status upstream
CVE-2023-26044react/http is an event-driven, streaming HTTP client and server implem ...check, is embedded inicinga-php-thirdparty, icingaweb2-module-reactbundle possibly affected
CVE-2023-47268In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6. ...check
CVE-2023-49316In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively larg ...check if affecting ldap-account-manager or unused path
CVE-2023-50251php-svg-lib is an SVG file parsing / rendering library. Prior to versi ...check, other packages are embedding the library: civicrm, icinga-php-thirdparty and icingaweb2 to be checked
CVE-2023-50252php-svg-lib is an SVG file parsing / rendering library. Prior to versi ...check, other packages are embedding the library: civicrm, icinga-php-thirdparty and icingaweb2 to be checked
CVE-2023-50262Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Do ...check sources embedding php-dompdf if affected
CVE-2024-22420JupyterLab is an extensible environment for interactive and reproducib ...check completeness, src:jupyter-notebook?
CVE-2024-22421JupyterLab is an extensible environment for interactive and reproducib ...check completeness, src:jupyter-notebook?
CVE-2024-31026An issue in Greek Universities Network (GUnet) Open eClass Platform v. ...check
CVE-2024-31027Cross Site Scripting vulnerability in Greek Universities Network (GUne ...check
CVE-2024-42002A code injection vulnerability has been discovered in the Robot Operat ...check
CVE-2024-54192An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial ...check
CVE-2024-58386ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vuln ...check
CVE-2025-4382A flaw was found in systems utilizing LUKS-encrypted disks with GRUB c ...double check if vulnerability only considered present after grub_is_cli_disabled is introduced
CVE-2025-6499A vulnerability classified as problematic was found in vstakhov libucl ...check if impacts security wise rspamd, which embeds libucl and uses it a compile time
CVE-2025-8671A mismatch caused by client-triggered server-sent stream resets betwee ...check, some projects will assign own CVEs and should then be covered under that specific CVE instead
CVE-2025-8941A flaw was found in linux-pam. The pam_namespace module may improperly ...check likely RedHat specific incomplete fix for CVE-2025-6020, but asked to pinpoint incomplete fixes
CVE-2025-11010A vulnerability has been found in vstakhov libucl up to 0.9.2. Affecte ...check if impacts security wise rspamd, which embeds libucl and uses it a compile time
CVE-2025-11147Reflected cross-site scripting (XSS) in Apt-Cacher-NG v3.2.1. The vuln ...clarifying with reporter and Eduard Bloch on the issue.
CVE-2025-14575An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS b ...check
CVE-2025-15569A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The im ...check
CVE-2025-33221NVIDIA Display Driver for Windows and Linux contains a vulnerability i ...check
CVE-2025-58064CKEditor 5 is a modern JavaScript rich-text editor with an MVC archite ...check
CVE-2025-61261A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1 ...check
CVE-2025-61982An arbitrary code execution vulnerability exists in the Code Stream di ...check upstream status
CVE-2025-66578xmlseclibs is a library written in PHP for working with XML Encryption ...check
CVE-2025-67108eProsima Fast-DDS v3.3 was discovered to contain improper validation f ...check https://gist.github.com/lkloliver/81b5d5a8328d712dbfd497bf11dbe913, unclear if reported upstream
CVE-2025-69534Python-Markdown version 3.8 contain a vulnerability where malformed HT ...Asking whether it really needs a backport: https://bugs.debian.org/1131896
CVE-2025-69720The infocmp command-line tool in ncurses before 6.5-20251213 has a sta ...check upstream status
CVE-2025-69969A lack of authentication and authorization mechanisms in the Bluetooth ...check
CVE-2025-70887An issue in ralphje Signify before v.0.9.2 allows a remote attacker to ...check
CVE-2026-0708A flaw was found in libucl. A remote attacker could exploit this by pr ...check if impacts security wise rspamd, which embeds libucl and uses it a compile time
CVE-2026-1703When pip is installing and extracting a maliciously crafted wheel arch ...check as well pipenv
CVE-2026-4833A weakness has been identified in Orc discount up to 3.0.1.2. This iss ...check libtext-markdown-discount-perl, ruby-rdiscount, cantor, embedding discount; check if security impact present
CVE-2026-5422A path traversal vulnerability exists in jupyter-server version 2.17.0 ...CNA contacted responsible for this CVE entry as this seems to be a duplicate of CVE-2026-35397
CVE-2026-6657A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allow ...CNA contacted responsible for this CVE entry as this seems to be a duplicate of CVE-2026-40110
CVE-2026-7701A security vulnerability has been detected in Telegram Desktop up to 6 ...check upstream reports
CVE-2026-7790Uncontrolled Resource Consumption vulnerability in ninenines cowlib (c ...check if embedded copy in rabbitmq-server is problematic
CVE-2026-8851SOGo versions 5.12.7 and prior contains a SQL injection vulnerability ...check correctness
CVE-2026-8863Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to Secu ...check
CVE-2026-10051In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the se ...check, jetty9 might not be affected as not explicitly mentioned in the GhSA and still supported
CVE-2026-10528A security flaw has been discovered in Orthanc DICOM Server up to 1.12 ...check, uderlying issue in src:dcmtk and should the CVE be associated with it? Cf. #1138713
CVE-2026-13326An out-of-bounds read in Qt NFC's language code length parsing allows ...check
CVE-2026-15713A vulnerability was found in libsoup's HTTP/2 protocol implementation. ...While the above issue references this CVE, it doesn't match the CVE description at all, check with CNA (Red Hat)
CVE-2026-15779A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pa ...check if Red Hat specific
CVE-2026-18358A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterpr ...does not affect an upstream version, but need to check if still only Red Hat specific, check details RH bug
CVE-2026-19201An uncontrolled recursion vulnerability in the Windows SIPA event log ...check, GHSA not yet public, maybe Windows specific
CVE-2026-19614The API is prone to XML external entity (XXE) injection. By default, X ...check details as reference not accessible
CVE-2026-20337A vulnerability in the zip archive parser of ClamAV could allow an una ...check
CVE-2026-20338A vulnerability in the zip archive parser of ClamAV could allow an una ...check
CVE-2026-22739Vulnerability in Spring Cloud when substituting the profile parameter ...check
CVE-2026-24182NVIDIA Display Driver for Windows and Linux contains a vulnerability w ...check
CVE-2026-24187NVIDIA Display Driver for Linux contains a vulnerability where an atta ...check
CVE-2026-24190NVIDIA Display Driver for Windows and Linux contains a vulnerability i ...check
CVE-2026-24192NVIDIA Display Driver for Linux contains a vulnerability where an atta ...check
CVE-2026-24193NVIDIA Display Driver for Windows and Linux contains a vulnerability w ...check
CVE-2026-24194NVIDIA Display Driver for Linux contains a vulnerability in a kernel m ...check
CVE-2026-24195NVIDIA Display Driver for Linux contains a vulnerability in UVM, where ...check
CVE-2026-24196NVIDIA Display Driver for Linux contains a vulnerability where a user ...check
CVE-2026-24197NVIDIA Display Driver for Linux contains a vulnerability in the Multi- ...check
CVE-2026-24198NVIDIA GPU Display Driver for Linux contains a vulnerability where an ...check
CVE-2026-24199NVIDIA Display Driver for Linux contains a vulnerability in a kernel m ...check
CVE-2026-27970Angular is a development platform for building mobile and desktop web ...check status for older versions
CVE-2026-28343CKEditor 5 is a modern JavaScript rich-text editor with an MVC archite ...check
CVE-2026-29022dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) ...qtads, dosbox-x, roc-toolkit, octave-ltfat, faudio bundle a copy, check security impact
CVE-2026-29036cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved na ...check, report upstream status
CVE-2026-30478A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer ...check
CVE-2026-30479A Dynamic-link Library Injection vulnerability in OSGeo Project MapSer ...check
CVE-2026-31053A double free vulnerability exists in librz/bin/format/le/le.c in the ...check
CVE-2026-32148Insufficient Verification of Data Authenticity vulnerability in hexpm ...check
CVE-2026-32313xmlseclibs is a library written in PHP for working with XML Encryption ...check
CVE-2026-32600xml-security is a library that implements XML signatures and encryptio ...check
CVE-2026-32635Angular is a development platform for building mobile and desktop web ...check status for older versions
CVE-2026-34240JOSE is a Javascript Object Signing and Encryption (JOSE) library. Pri ...check
CVE-2026-36499A missing upper-bound check in the udpif_set_threads() function of Ope ...check, unclear status/validity
CVE-2026-39178A SQL injection vulnerability in SOGo before 5.12.7 allows authenticat ...CVE-2026-39178 and CVE-2026-39179 are duplicates of CVE-2026-46445 and CVE-2026-46446, CNA contacted
CVE-2026-39179A SQL injection vulnerability in SOGo before 5.12.7 allows authenticat ...CVE-2026-39178 and CVE-2026-39179 are duplicates of CVE-2026-46445 and CVE-2026-46446, CNA contacted
CVE-2026-39860Nix is a package manager for Linux and other Unix systems. A bug in th ...check, potentially affecting guix if same issue in backporting fix for CVE-2024-2729
CVE-2026-40033FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in ...unclear fixing commit references, incorrect reference in CVE entry?
CVE-2026-41889pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, ...check the other golang-github-jackc-pgx* sources
CVE-2026-42199Grid is a data structure grid for rust. From version 0.17.0 to before ...check
CVE-2026-42308Pillow is a Python imaging library. Prior to version 12.2.0, if a font ...research fixing commit(s), maybe https://github.com/python-pillow/Pillow/pull/9518/changes
CVE-2026-42503gopls by default communicates via pipe. However, -port and -listen fla ...check impact on golang-golang-x-tools
CVE-2026-43627llama.cpp builds b1283 through b9058 contain an integer overflow vulne ...check
CVE-2026-43628llama.cpp builds b3978 through b9058 contain an integer underflow and ...check
CVE-2026-43629llama.cpp builds b4882 through b9058 contain a heap buffer overflow vu ...check
CVE-2026-43631llama.cpp builds b7492 through the latest b9060 contains a use-after-f ...check
CVE-2026-43632llama.cpp builds b7492 through the latest b9060 contains a use-after-f ...check
CVE-2026-43829Full details and mitigation steps are currently restricted and will be ...check
CVE-2026-43830Full details and mitigation steps are currently restricted and will be ...check
CVE-2026-43831Full details and mitigation steps are currently restricted and will be ...check
CVE-2026-43832Full details and mitigation steps are currently restricted and will be ...check
CVE-2026-43833Full details and mitigation steps are currently restricted and will be ...check
CVE-2026-44933`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot ...check
CVE-2026-45388In OCaml-TLS before 2.1.0, the client implementation does insufficient ...check
CVE-2026-45389In OCaml-TLS before 2.1.0, the server implementation does insufficient ...check
CVE-2026-45390In OCaml-tar before 3.4.0, a crafted archive with ../ path segments in ...check
CVE-2026-46727An issue was discovered in Ruby 4 before 4.0.5. A race condition leadi ...check
CVE-2026-47489NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47491NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47492NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47493NVIDIA vGPU software for Windows and Linux contains a vulnerability in ...check
CVE-2026-47494NVIDIA GPU Display Driver for Linux contains a vulnerability where a u ...check
CVE-2026-47495NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulne ...check
CVE-2026-47496NVIDIA GPU Display Driver for Linux contains a vulnerability in the Vi ...check
CVE-2026-47497NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System ...check
CVE-2026-47498NVIDIA vGPU Manager contains a vulnerability in the GPU System Process ...check
CVE-2026-47499NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulne ...check
CVE-2026-47500NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47501NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47502NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulne ...check
CVE-2026-47503NVIDIA GPU Display Driver for Linux contains a vulnerability in the Vi ...check
CVE-2026-47504NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX up ...check
CVE-2026-47505NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47506NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47507NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47508NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47509NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47510NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47511NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47512NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47513NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47514NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47515NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47516NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47517NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47518NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47519NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...check
CVE-2026-47520NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...check
CVE-2026-47521NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...check
CVE-2026-47522NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47523NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47524NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47525NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47526NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47527NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47528NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47529NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47530NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47531NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47532NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47533NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47534NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47535NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...check
CVE-2026-47536NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...check
CVE-2026-47537NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47538NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47539NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...check
CVE-2026-47540NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47541NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...check
CVE-2026-47542NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47543VIDIA GPU Display Driver for Windows and Linux contains a vulnerabilit ...check
CVE-2026-47544NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in ...check
CVE-2026-47545NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47546NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47547NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47548NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47549NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47550NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47551NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47552NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47553NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47554NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47555NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47556NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47557NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47558NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47559NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47560NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47561NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47562NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47563NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47565NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47566NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47567NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47568NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47569NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47570NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47571NVIDIA GPU Display Driver for Windows contains a vulnerability in kern ...check
CVE-2026-47572NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47573NVIDIA NVAPI for Windows contains a vulnerability where an attacker co ...check
CVE-2026-47574NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability whe ...check
CVE-2026-47575NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47576NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47577NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47578NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47579The NVIDIA GPU Display Driver for Windows contains a vulnerability in ...check
CVE-2026-47580NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47581NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47582NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47583NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47584NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47585NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47586NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47587NVIDIA GPU Display Driver for Linux contains a vulnerability where an ...check
CVE-2026-47588NVIDIA GPU Display Driver for Linux contains a vulnerability where an ...check
CVE-2026-47589NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47590NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47591NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47592NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47593NVIDIA GPU Display Driver for Windows contains a vulnerability in the ...check
CVE-2026-47594NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47595NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47596NVIDIA GPU Display Driver for Linux contains a vulnerability in the ke ...check
CVE-2026-47597NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47598NVIDIA GPU Display Driver for Linux contains a vulnerability in the op ...check
CVE-2026-47599NVIDIA GPU Display Driver for Linux contains a vulnerability in the op ...check
CVE-2026-47600NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47601NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47602NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47603NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47604NVIDIA GPU Display Driver for Windows and Linux contains a vulnerabili ...check
CVE-2026-47875Applications that deserialize execution contexts with Jackson2Executio ...check
CVE-2026-47878DefaultExecutionContextSerializer, used by default in Spring Batch's J ...check
CVE-2026-47881Spring Batch's FlatFileItemReader supports files where a single logica ...check
CVE-2026-48809python-engineio is a Python implementation of the Engine.IO realtime c ...checking upstream commit fixing issue, confusing infomation advisory claims both 4.13.2 and 4.13.5 to fix issue
CVE-2026-54160Network UPS Tools is a collection of programs which provide a common i ...check
CVE-2026-55223c3p0 is a JDBC Connection pooling library. In versions prior to 0.14.0 ...check if that is an issue with the packaged version
CVE-2026-55663mediasoup is a WebRTC video conferencing system. From version 3.20.0 u ...check
CVE-2026-56816Netty is a network application framework for development of protocol s ...check, potentially only in 4.2.y series
CVE-2026-56818Netty is an asynchronous, event-driven network application framework. ...check missing upstream GHSA
CVE-2026-57862Kanboard 1.2.52 and prior contains a server-side request forgery vulne ...check upstream report
CVE-2026-61711BuildKit is a toolkit for converting source code to build artifacts in ...check security impact on docker.io
CVE-2026-61712BuildKit is a toolkit for converting source code to build artifacts in ...check potential security impact on docker.io
CVE-2026-62846SQUID-2026:9check SQUID-2026:9 information not yet public
CVE-2026-63209compress provides various compression algorithms. Prior to version 1.1 ...check
CVE-2026-64611A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() ...check use in embedded cups, cups-filters
CVE-2026-71054Vulnerability in Oracle Java SE (component: 2D). Supported versions t ...check
CVE-2026-71219A stack overflow vulnerability was found in gfs2-utils. The hash table ...check upstream details
CVE-2026-71220A stack out-of-bounds write vulnerability was found in gfs2-utils. In ...check upstream details
CVE-2026-71221A stack out-of-bounds write vulnerability was found in gfs2-utils. In ...check upstream details
CVE-2026-71222A heap out-of-bounds read vulnerability was found in gfs2-utils. The e ...check upstream details
CVE-2026-71224A stack overflow vulnerability was found in gfs2-utils. The metadata w ...check upstream details
CVE-2026-71261dr_libs dr_wav.h (all versions through current master) contains an int ...check if embedded copy has security impact in roc-toolkit, qtads, qt6-multimedia, octave-ltfat, raylib, dosbox-x, mlpack and faudio
CVE-2026-71266tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h ...check
CVE-2026-71287Cacti's sanitize_sql_column (lib/functions.php) sanitizes user-supplie ...check, assigned from "Turan Security" CNA without further detailed references
CVE-2026-71437Mermaid is a JavaScript tool that uses Markdown-inspired text to creat ...check introducing commit for further assessment
CVE-2026-71439Mermaid is a JavaScript tool that uses Markdown-inspired text to creat ...check introducing commit, might then be only 11.6.0 and above.
CVE-2026-75593BuildKit is a toolkit for converting source code to build artifacts in ...check security impact on docker.io
CVE-2026-78178A vulnerability was determined in jQWidgets up to 24.0.1. This affects ...check
CVE-2026-79403An issue in Kilo Code before v7.4.1 allows a local attacker to execute ...check
CVE-2026-79680Authentication bypass vulnerability in the password authentication mec ...check
CVE-2026-84233A flaw was found in rpm. A local attacker could supply a specially cra ...check upstream details
CVE-2026-85150A NULL pointer dereference flaw was found in GStreamer's RTSP support ...double-check, the MR is still not public, but advisory states fixed in 1.28.7
CVE-2026-86698Insufficient Session Expiration vulnerability in OAuth token issuance ...check
CVE-2026-86776KeePass versions 2.35 through 2.61.1 fail to validate KDBX header fiel ...check upstream details
CVE-2026-87020An integer overflow in a specified pitch and buffer-size computation l ...check, might be a dupe of the existing issues addressed in 1.13, needs clarification
CVE-2026-88350An integer overflow vulnerability exists in MPack 1.1.1 in mpack_node_ ...check, embedded in balboa, bpfilter, pocketpy
CVE-2026-88351An integer overflow vulnerability exists in the MPack Node API in MPac ...check, embedded in balboa, bpfilter, pocketpy
CVE-2026-91860A prototype pollution vulnerability exists in the deep merge helpers o ...check
CVE-2026-92284Caddy is an extensible server platform that uses TLS by default. In ve ...check references, refers to GHSA-j8px-rmrx-76h9 which is for CVE-2026-77281
CVE-2026-92382An out-of-bounds write flaw was found in usbredir. Starting an isochro ...check details once Red Hat opens up bugzilla entry
CVE-2026-92700Caddy is an extensible server platform that uses TLS by default. In ve ...check references, refers to GHSA-j8px-rmrx-76h9 which is for CVE-2026-77281
CVE-2026-92925A flaw was found in Redis community. The cluster bus packet parser, re ...check if redict affected
CVE-2026-93547A missing authorization check in the Vaadin Spreadsheet component allo ...check
CVE-2026-94488Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The fi ...check
CVE-2026-94545Satori is a library to convert HTML and CSS to SVG. Starting in versio ...check
CVE-2026-95619A flaw was found in libstdc++. An integer overflow can occur when proc ...check
CVE-2026-96760Authlib (v1.7.2 and below) contains a signature verification bypass vu ...check
CVE-2026-100256In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search s ...check
CVE-2026-100291In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, several ...check
CVE-2026-100292In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, a hidden ...check
CVE-2026-100293In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, both the ...check
CVE-2026-100294In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, the firm ...check
CVE-2026-100295In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, an inter ...check
CVE-2026-100296In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST ...check
CVE-2026-100297In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, an unaut ...check
CVE-2026-100298In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, two user ...check
CVE-2026-100299In Anjvision YSSD\u2011RTMP\u2011H5 firmware version 3.3.2.4, the devi ...check
CVE-2026-100370DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+. Prior to vers ...check
CVE-2026-100888A weakness has been identified in Trusted Domain Project OpenDKIM up t ...check upstream details
CVE-2026-100889A vulnerability was detected in Trusted Domain Project OpenDKIM up to ...check upstream details
CVE-2026-100890A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. ...check upstream details
CVE-2026-100891A vulnerability has been found in Trusted Domain Project OpenDMARC up ...check upstream details
CVE-2026-100895A security flaw has been discovered in Trusted Domain Project OpenARC ...check
CVE-2026-101277A security flaw has been discovered in Trusted Domain Project OpenDKIM ...check details
CVE-2026-101278A weakness has been identified in Trusted Domain Project OpenDMARC up ...check details
CVE-2026-101279A security vulnerability has been detected in Trusted Domain Project O ...check details
CVE-2026-101280A vulnerability was detected in Trusted Domain Project OpenDMARC up to ...check details
CVE-2026-101295Path traversal / arbitrary file write in oc-mirror's operator catalog ...check
CVE-2026-102252A path traversal vulnerability (CWE-22) in the embedded VMDK filesyste ...check
CVE-2026-102296ZoneMinder before 1.38.4 contains static buffer overflow vulnerabiliti ...check
CVE-2026-102297ZoneMinder before 1.38.4 fails to apply per-monitor access restriction ...check
CVE-2026-102454EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulner ...check
CVE-2026-102455EasyFlow .NET developed by Digiwin has a Insecure Deserialization vuln ...check
CVE-2026-102456EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. ...check
CVE-2026-102457EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerab ...check
CVE-2026-102458EasyFlow .NET developed by Digiwin has a Missing Authentication vulner ...check
CVE-2026-102459EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scriptin ...check
CVE-2026-102489Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnera ...check
CVE-2026-102490All versions of Zammad including the latest alpha enable the local zam ...check
CVE-2026-102771A security vulnerability has been detected in Naichen ThinkCMF up to 8 ...check
CVE-2026-102792A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. This affec ...check
CVE-2026-102793A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerabilit ...check
CVE-2026-102794A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This iss ...check
CVE-2026-102804A vulnerability was detected in Nothings stb up to 2c980bb59875b0d3214 ...check
CVE-2026-102805A flaw has been found in Nothings stb up to 1.16. This affects the fun ...check
CVE-2026-102831JupyterLab is an extensible environment for interactive and reproducib ...check, might be introduced later in both products
CVE-2026-102842A vulnerability was identified in gedelumbung HospitalManagement up to ...check
CVE-2026-102843A security flaw has been discovered in gedelumbung HospitalManagement ...check
CVE-2026-102844A weakness has been identified in gedelumbung HospitalManagement up to ...check
CVE-2026-102845A security vulnerability has been detected in gedelumbung HospitalMana ...check
CVE-2026-102846A vulnerability was detected in gedelumbung HospitalManagement up to c ...check
CVE-2026-102847A flaw has been found in gedelumbung HospitalManagement up to c2d45543 ...check
CVE-2026-102874A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the ...check
CVE-2026-102877Fider before 0.38.0 contains a server-side request forgery vulnerabili ...check
CVE-2026-102878mcp-chrome-bridge through 1.0.31 contains an origin validation error i ...check
CVE-2026-102879ClaraVerse through 0.3.1 contains server-side request forgery protecti ...check
CVE-2026-102906A vulnerability was identified in 0xshariq github-mcp-server up to 52e ...check
CVE-2026-102911A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is ...check
CVE-2026-102925virtualenv is a tool for creating isolated virtual python environments ...check
CVE-2026-102930virtualenv is a tool for creating isolated virtual python environments ...check
CVE-2026-102937virtualenv is a tool for creating isolated virtual python environments ...check
CVE-2026-102938virtualenv is a tool for creating isolated virtual python environments ...check
CVE-2026-103043anchorme through 3.0.8 contains a regular expression denial of service ...check
CVE-2026-103044XML injection (aka blind XPath injection) vulnerability in The Wikimed ...check
CVE-2026-103045Improper neutralization of input during web page generation ('cross-si ...check
CVE-2026-103048URL redirection to untrusted site ('open redirect') vulnerability in T ...check
CVE-2026-103050Improper neutralization of input during web page generation ('cross-si ...check
CVE-2026-103051Improper neutralization of input during web page generation ('cross-si ...check
CVE-2026-103087Uncontrolled recursion in the Gosub browser engine (gosub-engine) thro ...check
CVE-2026-103088Handlebars.java before 4.5.5 allows directory traversal. In handlebars ...check
CVE-2026-103437Improper neutralization of Script-Related HTML tags in a web page (bas ...check
CVE-2026-103439Improper neutralization of Script-Related HTML tags in a web page (bas ...check
CVE-2026-103443Improper neutralization of Script-Related HTML tags in a web page (bas ...check
TEMP-1142597-FFA22AGHSA-68ff-gq39-pqjm: relay: authentication bypass with the "plain" password hash algorithmcheck, GHSA-68ff-gq39-pqjm claims >= 4.3.0 but potentially since v2.9-rc1
Search for package or bug name: Reporting problems