Vulnerability Database

RLSA-2026:65534

Rocky Linux:10/image-builder

Important: image-builder security update 53 minutes ago

Fix available
Severity - 8.8 (High)

RLSA-2026:65816

Rocky Linux:10/qt6-qt5compat

Important: qt6-qt5compat security update 53 minutes ago

Fix available
Severity - 7.5 (High)

GHSA-7w5x-hrqm-74c2

npm/smol-toml

smol-toml: Denial of Service via malformed TOML documents 54 minutes ago

Fix available
Severity - 8.2 (High)

GHSA-jf6q-chmf-3h3v

PyPI/weasyprint

weasyprint Has Server-Side Request Forgery (SSRF) 55 minutes ago

Fix available
Severity - 6.2 (Medium)

RLSA-2026:65606

Rocky Linux:9/gpsd-minimal

Important: gpsd-minimal security update 56 minutes ago

Fix available
Severity - 7.8 (High)

GHSA-ccg5-9c8w-xh6v

PyPI/sqladmin

SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list` 59 minutes ago

Fix available
Severity - 5.3 (Medium)

GHSA-7jxh-36q5-gcqv

Go/github.com/containerd/containerd
Go/github.com/containerd/containerd/v2

containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service 1 hour ago

Fix available
Severity - 6.8 (Medium)

MGASA-2026-0386

Mageia:10/wget
Mageia:9/wget

Updated wget packages fix a security vulnerability 1 hour ago

Fix available

MGASA-2026-0387

Mageia:10/firefox
Mageia:10/firefox-l10n
Mageia:10/nss
Mageia:9/firefox
Mageia:9/firefox-l10n
... 1 more

Updated firefox & nss packages fix security vulnerabilities 1 hour ago

Fix available

MGASA-2026-0388

Mageia:10/thunderbird
Mageia:10/thunderbird-l10n
Mageia:9/thunderbird
Mageia:9/thunderbird-l10n

Updated thunderbird packages fix security vulnerabilities 1 hour ago

Fix available

RLSA-2026:65832

Rocky Linux:8/mrtg

Important: mrtg security update 1 hour ago

Fix available
Severity - 7.1 (High)

GHSA-hr3m-4qwq-3mgc

PyPI/githacker

GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git server 1 hour ago

Fix available
Severity - 5.3 (Medium)

GHSA-9mvp-w4rr-5c6x

RubyGems/decidim-elections

decidim-elections: Election question titles allow stored script execution 1 hour ago

Fix available
Severity - 4.8 (Medium)

GHSA-c23q-fw86-9h5x

Go/github.com/lf-edge/ekuiper/v2

LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint 1 hour ago

Fix available
Severity - 5.5 (Medium)

MAL-2026-16095

npm/matrixkit-js

Malicious code in matrixkit-js (npm) 1 hour ago

No fix available

GO-2026-6302

Go/github.com/crossplane/crossplane-runtime/v2

Signature verification TOCTOU allows installing unverified package content in github.com/crossplane/crossplane-runtime/v2 1 hour ago

Fix available

Vulnerabilities