Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-57983 |
8.7 (3.1)
|
Microsoft Edge (Chromium-based) Security Feature Bypas… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-07-03T20:35:10.166Z | 2026-07-03T21:26:05.002Z |
| CVE-2026-57975 |
7.5 (3.1)
|
Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-07-03T20:35:08.786Z | 2026-07-03T21:26:04.483Z |
| CVE-2026-56645 |
8.8 (3.1)
|
Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-07-03T20:35:08.069Z | 2026-07-03T21:26:03.777Z |
| CVE-2026-55945 |
4.2 (3.1)
|
Microsoft Edge (Chromium-based) Information Disclosure… |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-07-03T20:35:07.264Z | 2026-07-03T21:26:03.248Z |
| CVE-2026-41106 |
9.3 (3.1)
|
Microsoft 365 Copilot Elevation of Privilege Vulnerability |
Microsoft |
Microsoft 365 Copilot |
2026-07-02T22:18:57.629Z | 2026-07-03T21:26:02.521Z |
| CVE-2026-26145 |
4.8 (3.1)
|
Microsoft Azure Synapse Elevation of Privilege Vulnerability |
Microsoft |
Azure Synapse |
2026-07-02T22:18:56.842Z | 2026-07-03T21:26:01.845Z |
| CVE-2026-45499 |
9.9 (3.1)
|
Azure OpenAI Elevation of Privilege Vulnerability |
Microsoft |
Azure Open AI |
2026-07-02T22:18:56.092Z | 2026-07-03T21:26:01.155Z |
| CVE-2026-57100 |
9.9 (3.1)
|
Microsoft Entra Provisioning Service Elevation of Priv… |
Microsoft |
Microsoft Entra Provisioning Service |
2026-07-02T22:18:55.289Z | 2026-07-03T21:26:00.318Z |
| CVE-2026-14611 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
DeepMyst Mysti Per-Project Auto-Memory MemoryManager.t… |
DeepMyst |
Mysti |
2026-07-03T21:00:10.362Z | 2026-07-03T21:00:10.362Z |
| CVE-2026-14355 |
5.6 (3.1)
|
ext/openssl: Memory corruption in openssl_encrypt with… |
php |
php |
2026-07-03T20:57:31.958Z | 2026-07-03T20:59:02.604Z |
| CVE-2026-58426 |
9.6 (3.1)
|
Gitea Actions Artifacts V4 signed URL HMAC ambiguity a… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:54:53.283Z | 2026-07-03T20:54:53.283Z |
| CVE-2026-58424 |
8.9 (3.1)
|
Permanent Fork PR Workflow Approval Gate Bypass |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:54:52.923Z | 2026-07-03T20:54:52.923Z |
| CVE-2026-58423 |
7.7 (3.1)
|
LFS authentication bypass via malformed SSH sub-verb a… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:54:52.580Z | 2026-07-03T20:54:52.580Z |
| CVE-2026-58422 |
N/A
|
Improper authorization on OAuth sign-in callback silen… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:54:52.236Z | 2026-07-03T20:54:52.236Z |
| CVE-2026-58421 |
N/A
|
Unauthenticated ReDoS via CODEOWNERS pattern matching … |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:54:51.884Z | 2026-07-03T20:54:51.884Z |
| CVE-2026-58419 |
N/A
|
Notification API leaks private issue metadata after ac… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:54:51.523Z | 2026-07-03T20:54:51.523Z |
| CVE-2026-58418 |
6.5 (3.1)
|
SSRF via HTTP Redirect in Repository Migration |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:54:51.149Z | 2026-07-03T20:54:51.149Z |
| CVE-2026-14610 |
4.8 (4.0)
5.3 (3.1)
5.3 (3.0)
|
Open Asset Import Library Assimp CSM File CSMLoader.cp… |
Open Asset Import Library |
Assimp |
2026-07-03T20:45:10.258Z | 2026-07-03T20:45:10.258Z |
| CVE-2026-12481 |
8.8 (3.0)
|
Deserialization of Untrusted Data in keras-team/keras |
keras-team |
keras-team/keras |
2026-07-03T20:36:05.003Z | 2026-07-03T20:36:05.003Z |
| CVE-2026-28744 |
8.1 (3.1)
|
Gitea Git smart HTTP bypasses repository token scopes … |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:40.031Z | 2026-07-03T20:19:40.031Z |
| CVE-2026-28740 |
7.1 (3.1)
|
Gitea LFS object reuse bypasses Code-unit authorization |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:39.687Z | 2026-07-03T20:19:39.687Z |
| CVE-2026-28737 |
8.7 (3.1)
|
Gitea 3D file viewer allows stored XSS through glTF ex… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:39.358Z | 2026-07-03T20:19:39.358Z |
| CVE-2026-28705 |
N/A
|
Gitea repository dumps write release assets using unsa… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:39.011Z | 2026-07-03T20:19:39.011Z |
| CVE-2026-28699 |
8.1 (3.1)
|
Gitea Basic Auth bypasses OAuth2 access token scopes |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:38.663Z | 2026-07-03T20:19:38.663Z |
| CVE-2026-27783 |
4.3 (3.1)
|
Gitea issue-template APIs bypass repository unit autho… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:38.321Z | 2026-07-03T20:19:38.321Z |
| CVE-2026-27780 |
N/A
|
Gitea pre-receive hook can miss branch-protection chec… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:37.968Z | 2026-07-03T20:19:37.968Z |
| CVE-2026-27779 |
N/A
|
Gitea forwarded-proto handling allows public URL spoofing |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:37.622Z | 2026-07-03T20:19:37.622Z |
| CVE-2026-27775 |
N/A
|
Gitea pre-receive hook permission cache allows full re… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:37.275Z | 2026-07-03T20:19:37.275Z |
| CVE-2026-27771 |
8.2 (3.0)
|
Gitea Composer package source links use insufficient p… |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:36.924Z | 2026-07-03T20:19:36.924Z |
| CVE-2026-27761 |
4.3 (3.1)
|
Gitea repository feeds bypass API token scope enforcement |
Gitea |
Gitea Open Source Git Server |
2026-07-03T20:19:36.576Z | 2026-07-03T20:19:36.576Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-27775 | Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-recei… | 2026-07-03T21:16:59.157 | 2026-07-03T21:16:59.157 |
| fkie_cve-2026-27771 | Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package … | 2026-07-03T21:16:59.043 | 2026-07-03T21:16:59.043 |
| fkie_cve-2026-27761 | Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to bypass AP… | 2026-07-03T21:16:58.937 | 2026-07-03T21:16:58.937 |
| fkie_cve-2026-27660 | Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the req… | 2026-07-03T21:16:58.830 | 2026-07-03T21:16:58.830 |
| fkie_cve-2026-27657 | Gitea versions before 1.25.5 allow a user to change another user's primary email address. | 2026-07-03T21:16:58.720 | 2026-07-03T21:16:58.720 |
| fkie_cve-2026-26307 | Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive sear… | 2026-07-03T21:16:58.620 | 2026-07-03T21:16:58.620 |
| fkie_cve-2026-26292 | Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror o… | 2026-07-03T21:16:58.517 | 2026-07-03T21:16:58.517 |
| fkie_cve-2026-26247 | Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during … | 2026-07-03T21:16:58.417 | 2026-07-03T21:16:58.417 |
| fkie_cve-2026-26232 | Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and singl… | 2026-07-03T21:16:58.313 | 2026-07-03T21:16:58.313 |
| fkie_cve-2026-26231 | Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to… | 2026-07-03T21:16:58.200 | 2026-07-03T21:16:58.200 |
| fkie_cve-2026-25782 | Gitea versions before 1.25.5 look up tracked-time entries by time ID without scoping the lookup to … | 2026-07-03T21:16:58.030 | 2026-07-03T21:16:58.030 |
| fkie_cve-2026-25779 | Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded ba… | 2026-07-03T21:16:57.923 | 2026-07-03T21:16:57.923 |
| fkie_cve-2026-25718 | Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allow… | 2026-07-03T21:16:57.823 | 2026-07-03T21:16:57.823 |
| fkie_cve-2026-25714 | Gitea versions up to and including 1.26.1 do not apply public-only token filtering consistently to … | 2026-07-03T21:16:57.707 | 2026-07-03T21:16:57.707 |
| fkie_cve-2026-25712 | Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs fo… | 2026-07-03T21:16:57.607 | 2026-07-03T21:16:57.607 |
| fkie_cve-2026-25038 | Gitea 1.26.2 allows unauthorized users to access labels of private organizations. | 2026-07-03T21:16:57.503 | 2026-07-03T21:16:57.503 |
| fkie_cve-2026-24690 | Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull requ… | 2026-07-03T21:16:57.397 | 2026-07-03T21:16:57.397 |
| fkie_cve-2026-24451 | Gitea 1.26.2 allows fork synchronization to continue after a parent repository changes from public … | 2026-07-03T21:16:57.280 | 2026-07-03T21:16:57.280 |
| fkie_cve-2026-22874 | Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration … | 2026-07-03T21:16:57.157 | 2026-07-03T21:16:57.157 |
| fkie_cve-2026-22555 | Gitea versions before 1.26.0 allow API users to fork a repository into an organization without firs… | 2026-07-03T21:16:57.023 | 2026-07-03T21:16:57.023 |
| fkie_cve-2026-22547 | Gitea versions before 1.25.5 lack validation constraints for repository creation fields, including … | 2026-07-03T21:16:56.890 | 2026-07-03T21:16:56.890 |
| fkie_cve-2026-20909 | Gitea versions before 1.25.5 have insufficient permission checks when listing tracked time entries. | 2026-07-03T21:16:56.777 | 2026-07-03T21:16:56.777 |
| fkie_cve-2026-20896 | Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by defau… | 2026-07-03T21:16:56.660 | 2026-07-03T21:16:56.660 |
| fkie_cve-2026-20779 | Gitea versions from 1.5.0 before 1.26.3 have a TOTP single-use enforcement defect that allows a val… | 2026-07-03T21:16:56.543 | 2026-07-03T21:16:56.543 |
| fkie_cve-2026-20706 | Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope … | 2026-07-03T21:16:56.433 | 2026-07-03T21:16:56.433 |
| fkie_cve-2026-14611 | A vulnerability has been found in DeepMyst Mysti up to 0.4.0. The affected element is the function … | 2026-07-03T21:16:56.270 | 2026-07-03T21:16:56.270 |
| fkie_cve-2026-14610 | A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Ass… | 2026-07-03T21:16:56.077 | 2026-07-03T21:16:56.077 |
| fkie_cve-2026-14609 | A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Anal… | 2026-07-03T21:16:55.903 | 2026-07-03T21:16:55.903 |
| fkie_cve-2026-14355 | In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, … | 2026-07-03T21:16:55.783 | 2026-07-03T21:16:55.783 |
| fkie_cve-2026-12481 | A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to impro… | 2026-07-03T21:16:54.737 | 2026-07-03T21:16:54.737 |
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-37w2-86g3-h4qh |
|
Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs fo… | 2026-07-03T21:31:37Z | 2026-07-03T21:31:37Z |
| ghsa-g6q3-rr42-f5h7 |
5.5 (3.1)
5.4 (4.0)
|
A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sys_getaddrinfo … | 2026-07-03T21:31:36Z | 2026-07-03T21:31:36Z |
| ghsa-c85v-jr5v-hgfw |
5.6 (3.1)
2.9 (4.0)
|
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Anal… | 2026-07-03T21:31:36Z | 2026-07-03T21:31:36Z |
| ghsa-5q58-24gf-29rm |
4.3 (3.1)
2.1 (4.0)
|
A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI P… | 2026-07-03T21:31:36Z | 2026-07-03T21:31:36Z |
| ghsa-5gwj-m78q-7pq3 |
8.8 (3.1)
|
A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to impro… | 2026-07-03T21:31:36Z | 2026-07-03T21:31:36Z |
| ghsa-whcm-77gq-7fj3 |
7.8 (3.1)
7.1 (4.0)
|
A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the func… | 2026-07-03T21:31:35Z | 2026-07-03T21:31:35Z |
| ghsa-vxfh-hphw-q23h |
6.3 (3.1)
2.1 (4.0)
|
A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the fun… | 2026-07-03T21:31:35Z | 2026-07-03T21:31:35Z |
| ghsa-rx3j-28q8-xw3m |
7.3 (3.1)
|
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulne… | 2026-07-03T21:31:35Z | 2026-07-03T21:31:35Z |
| ghsa-q2qc-v4ph-4mrq |
7.8 (3.1)
7.1 (4.0)
|
A security flaw has been discovered in RT-Thread up to 5.0.2. Affected by this issue is the functio… | 2026-07-03T21:31:35Z | 2026-07-03T21:31:35Z |
| ghsa-p39j-8498-pcjw |
5.4 (3.1)
|
A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Adm… | 2026-07-03T18:31:06Z | 2026-07-03T18:31:06Z |
| ghsa-j2vp-w8g9-p6hf |
4.3 (3.1)
|
A vulnerability was discovered in Keycloak's administrative interface that allows certain administr… | 2026-07-03T18:31:06Z | 2026-07-03T18:31:06Z |
| ghsa-fr6j-mfcv-pgmf |
4.2 (3.1)
|
Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can caus… | 2026-07-03T18:31:05Z | 2026-07-03T18:31:06Z |
| ghsa-5qq8-h7qh-phfj |
4.3 (3.1)
|
A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's a… | 2026-07-03T18:31:06Z | 2026-07-03T18:31:06Z |
| ghsa-q2wj-rfvr-wf9p |
|
Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix… | 2026-07-03T15:31:57Z | 2026-07-03T18:31:05Z |
| ghsa-q3qg-f4rw-mrf7 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:59Z | 2026-07-03T15:31:59Z |
| ghsa-j98v-6jpg-29m4 |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:59Z | 2026-07-03T15:31:59Z |
| ghsa-363q-xrjc-rqpj |
7.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:59Z | 2026-07-03T15:31:59Z |
| ghsa-rrqp-52wf-rr49 |
8.8 (3.1)
|
Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in… | 2026-07-03T15:31:58Z | 2026-07-03T15:31:58Z |
| ghsa-pv3f-94f6-vhr2 |
4.9 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:58Z | 2026-07-03T15:31:58Z |
| ghsa-hx78-853f-cj6m |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:58Z | 2026-07-03T15:31:58Z |
| ghsa-ch8c-p797-5ccg |
2.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:58Z | 2026-07-03T15:31:58Z |
| ghsa-8725-rp9g-qx9v |
8.8 (3.1)
|
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pard… | 2026-07-03T15:31:58Z | 2026-07-03T15:31:58Z |
| ghsa-7453-m98r-24j9 |
5.5 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:58Z | 2026-07-03T15:31:58Z |
| ghsa-xx59-c7wc-mgcj |
4.4 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:57Z | 2026-07-03T15:31:57Z |
| ghsa-xgmx-456f-v7hp |
6.5 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:57Z | 2026-07-03T15:31:57Z |
| ghsa-vgwp-j4mh-9wxr |
4.2 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:57Z | 2026-07-03T15:31:57Z |
| ghsa-q2f8-hpwm-236j |
6.9 (4.0)
|
Authorization Bypass Through User-Controlled Key (CWE-639) in CalendarDeleteEventController (app/Ht… | 2026-07-03T15:31:57Z | 2026-07-03T15:31:57Z |
| ghsa-m8g3-j6vx-2gv9 |
3.3 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:57Z | 2026-07-03T15:31:57Z |
| ghsa-jcxg-c4c8-fvg9 |
6.7 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:57Z | 2026-07-03T15:31:57Z |
| ghsa-fpc8-735f-w5qv |
4.4 (3.1)
|
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 throug… | 2026-07-03T15:31:57Z | 2026-07-03T15:31:57Z |
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2026-561 |
8.1 (3.1)
9.2 (4.0)
|
The Vanna library uses a prompt function to present the user with visualized results, it … | vanna | 2026-06-29T11:50:40.168074Z | 2026-07-01T20:23:10.987905Z |
| pysec-2026-560 |
10.0 (3.1)
|
## Summary The `_substitute_utcp_args` method in `cli_communication_protocol.py` inserts… | utcp-cli | 2026-06-29T11:50:49.296555Z | 2026-07-01T20:23:10.958711Z |
| pysec-2026-559 |
9.8 (3.1)
|
Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task crea… | upsonic | 2026-06-29T11:50:46.859098Z | 2026-07-01T20:23:10.875949Z |
| pysec-2026-558 |
9.8 (3.1)
|
A Path Traversal vulnerability in the `partition_msg` function allows an attacker to writ… | unstructured | 2026-06-29T11:50:51.107727Z | 2026-07-01T20:23:10.814686Z |
| pysec-2026-557 |
9.8 (3.1)
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni… | uni2ts | 2026-06-29T11:50:52.030793Z | 2026-07-01T20:23:10.792180Z |
| pysec-2026-556 |
9.8 (3.1)
|
A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. Th… | turbogears | 2026-06-29T11:50:42.829954Z | 2026-07-01T20:23:10.676310Z |
| pysec-2026-555 |
9.1 (3.1)
|
### Impact Websites that use `Website.user_vars` property in versions. ### Patches It a… | toui | 2026-06-29T11:50:42.742671Z | 2026-07-01T20:23:10.286587Z |
| pysec-2026-554 |
9.8 (3.1)
9.3 (4.0)
|
### Impact TorchServe's check on allowed_urls configuration can be by-passed if the URL c… | torchserve | 2026-06-29T11:50:40.831171Z | 2026-07-01T20:23:10.252867Z |
| pysec-2026-553 |
9.8 (3.1)
|
## Impact **Remote Server-Side Request Forgery (SSRF)** **Issue**: TorchServe default… | torchserve | 2026-06-29T11:50:43.712809Z | 2026-07-01T20:23:10.243049Z |
| pysec-2026-552 |
9.8 (3.1)
9.3 (4.0)
|
Improper neutralization of special elements used in an OS command ('OS Command Injection'… | tkeasygui | 2026-06-29T11:50:37.683122Z | 2026-07-01T20:23:10.097538Z |
| pysec-2026-551 |
10.0 (3.1)
|
A command injection vulnerability in the execute_command function of terminal-controller-… | terminal-controller | 2026-06-29T11:50:51.891261Z | 2026-07-01T20:23:10.079817Z |
| pysec-2026-548 |
9.8 (3.1)
|
### Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap… | tensorflow | 2026-06-29T11:50:42.290109Z | 2026-07-01T20:23:10.071336Z |
| pysec-2026-550 |
9.8 (3.1)
|
### Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap… | tensorflow-gpu | 2026-06-29T11:50:42.439307Z | 2026-07-01T20:23:08.559607Z |
| pysec-2026-549 |
9.8 (3.1)
|
### Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap… | tensorflow-cpu | 2026-06-29T11:50:42.369767Z | 2026-07-01T20:23:07.029309Z |
| pysec-2026-547 |
9.8 (3.1)
|
A vulnerability, which was classified as critical, has been found in van_der_Schaar LAB s… | synthcity | 2026-06-29T11:50:41.569372Z | 2026-07-01T20:23:05.624111Z |
| pysec-2026-546 |
9.8 (3.1)
|
PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code ex… | syft | 2026-06-29T11:50:49.505067Z | 2026-07-01T20:23:05.610433Z |
| pysec-2026-545 |
9.8 (3.1)
|
OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Pytho… | swift | 2026-06-29T11:50:32.332303Z | 2026-07-01T20:23:05.591799Z |
| pysec-2026-544 |
9.3 (4.0)
|
### Summary The `log_file_name` parameter in the `stata_do` API and CLI is directly inter… | stata-mcp | 2026-06-29T11:50:52.497266Z | 2026-07-01T20:23:05.367908Z |
| pysec-2026-543 |
10.0 (3.1)
|
Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote C… | smolagents | 2026-06-29T11:50:38.792590Z | 2026-07-01T20:23:05.184038Z |
| pysec-2026-542 |
9.9 (3.1)
|
A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, a… | smolagents | 2026-06-29T11:50:37.329072Z | 2026-07-01T20:23:05.176528Z |
| pysec-2026-541 |
9.3 (3.1)
|
The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversa… | shiva | 2026-06-29T11:50:33.543646Z | 2026-07-01T20:23:05.032250Z |
| pysec-2026-540 |
9.8 (3.1)
|
Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Ac… | shinken | 2026-06-29T11:50:33.392933Z | 2026-07-01T20:23:05.025809Z |
| pysec-2026-539 |
9.8 (3.1)
|
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execut… | sglang | 2026-06-29T11:50:45.317059Z | 2026-07-01T20:23:05.016272Z |
| pysec-2026-538 |
9.1 (3.1)
|
SGLang's multimodal generation runtime is vulnerable to an unauthenticated path traversal… | sglang | 2026-06-29T11:50:50.577356Z | 2026-07-01T20:23:05.004815Z |
| pysec-2026-537 |
9.8 (3.1)
|
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote c… | sglang | 2026-06-29T11:50:44.656805Z | 2026-07-01T20:23:04.995548Z |
| pysec-2026-536 |
9.8 (3.1)
|
SGLang's multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by defa… | sglang | 2026-06-29T11:50:49.817132Z | 2026-07-01T20:23:04.984433Z |
| pysec-2026-535 |
9.8 (3.1)
|
SGLang's multimodal generation runtime is vulnerable to unauthenticated remote code execu… | sglang | 2026-06-29T11:50:49.669447Z | 2026-07-01T20:23:04.977005Z |
| pysec-2026-534 |
9.1 (3.1)
|
### Impact A critical vulnerability was discovered in the SAML SSO implementation of Sent… | sentry | 2026-06-29T11:50:46.679170Z | 2026-07-01T20:23:04.918954Z |
| pysec-2026-533 |
9.1 (3.1)
|
### Impact A critical vulnerability was discovered in the SAML SSO implementation of Sent… | sentry | 2026-06-29T11:50:47.877063Z | 2026-07-01T20:23:04.909803Z |
| pysec-2026-532 |
9.1 (3.1)
|
### Impact A critical vulnerability was discovered in the SAML SSO implementation of Sent… | sentry | 2026-06-29T11:50:38.082065Z | 2026-07-01T20:23:04.901887Z |
| ID | Description | Updated |
|---|---|---|
| gsd-2024-33781 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.495881Z |
| gsd-2024-33777 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.489805Z |
| gsd-2024-33791 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.488352Z |
| gsd-2024-33774 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.484899Z |
| gsd-2024-33740 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.479260Z |
| gsd-2024-33801 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.476298Z |
| gsd-2024-33745 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.468253Z |
| gsd-2024-33690 | Cross-Site Request Forgery (CSRF) vulnerability in Jegstudio Financio.This issue affects … | 2024-04-27T05:02:18.467205Z |
| gsd-2024-33808 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.458232Z |
| gsd-2024-33767 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.454953Z |
| gsd-2024-33759 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.447890Z |
| gsd-2024-33755 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.436135Z |
| gsd-2024-33687 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.432624Z |
| gsd-2024-33753 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.430763Z |
| gsd-2024-33756 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.430035Z |
| gsd-2024-33724 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.429383Z |
| gsd-2024-33706 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.427436Z |
| gsd-2024-33787 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.424661Z |
| gsd-2024-33813 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.424031Z |
| gsd-2024-33721 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.408369Z |
| gsd-2024-33761 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.399777Z |
| gsd-2024-33689 | Cross-Site Request Forgery (CSRF) vulnerability in Tony Zeoli, Tony Hayes Radio Station.T… | 2024-04-27T05:02:18.398121Z |
| gsd-2024-33730 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.396940Z |
| gsd-2024-33830 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.395389Z |
| gsd-2024-33686 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.392053Z |
| gsd-2024-33705 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.385891Z |
| gsd-2024-33824 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.385552Z |
| gsd-2024-33837 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.377806Z |
| gsd-2024-33691 | Cross-Site Request Forgery (CSRF) vulnerability in OptinMonster Popup Builder Team OptinM… | 2024-04-27T05:02:18.375458Z |
| gsd-2024-33828 | The format of the source doesn't require a description, click on the link for more details. | 2024-04-27T05:02:18.373189Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| mal-2026-6709 | Malicious code in vega-lite-next (npm) | 2026-07-01T19:16:14Z | 2026-07-01T19:16:14Z |
| mal-2026-6708 | Malicious code in zyncmap (npm) | 2026-07-01T18:37:36Z | 2026-07-01T19:13:22Z |
| mal-2026-6702 | Malicious code in vue-demi-fix (npm) | 2026-06-30T10:41:28Z | 2026-07-01T19:13:21Z |
| mal-2026-6678 | Malicious code in ts-linting-builder (npm) | 2026-06-30T14:10:13Z | 2026-07-01T19:13:21Z |
| mal-2026-6677 | Malicious code in ts-lint-builders-v2.1 (npm) | 2026-06-30T14:10:13Z | 2026-07-01T19:13:21Z |
| mal-2026-6707 | Malicious code in svgson-lite (npm) | 2026-07-01T18:35:11Z | 2026-07-01T19:13:20Z |
| mal-2026-6706 | Malicious code in hardhat-plugin-solidity (npm) | 2026-07-01T18:41:44Z | 2026-07-01T19:13:18Z |
| mal-2026-6705 | Malicious code in hardhat-compile-ethers (npm) | 2026-07-01T18:41:35Z | 2026-07-01T19:13:18Z |
| mal-2026-6698 | Malicious code in cursed-modules (npm) | 2026-06-30T20:38:12Z | 2026-07-01T19:13:17Z |
| mal-2026-6445 | Malicious code in base58-core (npm) | 2026-06-25T06:43:58Z | 2026-07-01T19:13:16Z |
| mal-2026-6704 | Malicious code in base65-85x (npm) | 2026-07-01T18:34:02Z | 2026-07-01T18:34:02Z |
| mal-2026-6703 | Malicious code in @andes-tools/colors (npm) | 2026-07-01T17:11:18Z | 2026-07-01T17:11:18Z |
| mal-2026-3509 | Malicious code in pp-react-v5 (npm) | 2026-05-11T00:00:00Z | 2026-07-01T01:55:43Z |
| mal-2026-6674 | Malicious code in ripshakti1 (npm) | 2026-06-30T09:37:30Z | 2026-06-30T21:37:41Z |
| mal-2026-6700 | Malicious code in module-index-cache (npm) | 2026-06-30T21:00:00Z | 2026-06-30T21:37:40Z |
| mal-2026-6699 | Malicious code in ecto-corsair-flag-7kq3mz (npm) | 2026-06-30T21:00:23Z | 2026-06-30T21:37:38Z |
| mal-2026-6689 | Malicious code in decimal-format-core (npm) | 2026-06-30T00:00:00Z | 2026-06-30T21:37:38Z |
| mal-2026-6696 | Malicious code in @businessapp-microsites/apis (npm) | 2026-06-30T20:59:02Z | 2026-06-30T21:37:36Z |
| mal-2026-6701 | Malicious code in ripshakti (npm) | 2026-06-30T20:59:31Z | 2026-06-30T20:59:31Z |
| mal-2026-6697 | Malicious code in @sudoughnym/enviro-demo (npm) | 2026-06-30T20:59:17Z | 2026-06-30T20:59:17Z |
| mal-2026-6588 | Malicious code in endpointmap (npm) | 2026-06-29T08:52:54Z | 2026-06-30T16:59:28Z |
| mal-2026-6687 | Malicious code in procwire (npm) | 2026-06-30T16:18:48Z | 2026-06-30T16:18:49Z |
| mal-2026-6573 | Malicious code in rebrandly-domains-search-client (npm) | 2026-06-29T03:20:27Z | 2026-06-30T16:09:53Z |
| mal-2026-6572 | Malicious code in rebrandly-domains-digger (npm) | 2026-06-29T03:20:35Z | 2026-06-30T16:09:53Z |
| mal-2026-6555 | Malicious code in livekit-agents (npm) | 2026-06-28T06:01:35Z | 2026-06-30T16:09:52Z |
| mal-2026-6544 | Malicious code in chai-as-persisted (npm) | 2026-06-27T02:32:25Z | 2026-06-30T16:09:50Z |
| mal-2026-6532 | Malicious code in chai-as-assured (npm) | 2026-06-26T17:44:23Z | 2026-06-30T16:09:50Z |
| mal-2026-6685 | Malicious code in quoting (npm) | 2026-06-30T15:54:50Z | 2026-06-30T15:54:51Z |
| mal-2026-6680 | Malicious code in brock-loader (npm) | 2026-06-30T15:54:50Z | 2026-06-30T15:54:51Z |
| mal-2026-6681 | Malicious code in brock-react-alerts (npm) | 2026-06-30T15:54:50Z | 2026-06-30T15:54:50Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| bit-gitea-2026-20897 | Gitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR) | 2026-01-30T08:40:45.840Z | 2026-06-29T06:04:07.500Z |
| bit-gitea-2026-20750 | Gitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR) | 2026-01-30T08:40:37.768Z | 2026-06-29T06:04:07.500Z |
| bit-envoy-2026-47692 | Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream | 2026-06-29T05:40:42.312Z | 2026-06-29T06:04:07.500Z |
| bit-envoy-2026-47221 | Envoy: Null pointer deref in internal redirects | 2026-06-29T05:40:41.118Z | 2026-06-29T06:04:07.500Z |
| bit-envoy-2026-47207 | Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message | 2026-06-29T05:40:39.900Z | 2026-06-29T06:04:07.500Z |
| bit-envoy-2026-47204 | Envoy: grpc_stats filter segfault on Connect protocol requests to direct_response routes | 2026-06-29T05:40:38.733Z | 2026-06-29T06:04:07.500Z |
| bit-appsmith-2026-55455 | Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist | 2026-06-29T05:37:58.273Z | 2026-06-29T06:04:07.500Z |
| bit-appsmith-2026-55454 | Appsmith: Caddy admin API exposed without authentication | 2026-06-29T05:37:57.360Z | 2026-06-29T06:04:07.500Z |
| bit-appsmith-2026-50189 | Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route | 2026-06-29T05:37:56.362Z | 2026-06-29T06:04:07.500Z |
| bit-node-2026-48931 | 2026-06-26T08:51:25.051Z | 2026-06-26T09:09:39.774Z | |
| bit-grafana-2026-9029 | Stored XSS via Geomap Panel Template Variable Attribution Injection | 2026-06-26T08:43:08.876Z | 2026-06-26T09:09:39.774Z |
| bit-grafana-2026-10601 | Path Traversal in Tempo and Loki Data Source Plugins — Credential Leakage and Admin Endpoint Access | 2026-06-26T08:42:32.754Z | 2026-06-26T09:09:39.774Z |
| bit-kafka-2026-41115 | Apache Kafka: Improper Authorization in CONSUMER_GROUP_DESCRIBE API | 2026-06-05T05:43:42.489Z | 2026-06-25T20:59:12.148Z |
| bit-nginx-2026-42055 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability | 2026-06-22T05:47:00.524Z | 2026-06-25T09:16:54.020Z |
| bit-libpython-2026-5713 | Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target | 2026-04-16T23:43:12.795Z | 2026-06-25T09:16:54.020Z |
| bit-python-2026-9669 | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | 2026-06-25T07:40:50.677Z | 2026-06-25T07:58:41.907Z |
| bit-python-2026-6019 | BaseCookie.js_output() does not neutralize embedded characters | 2026-06-25T07:40:44.360Z | 2026-06-25T07:58:41.907Z |
| bit-python-2026-5713 | Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target | 2026-04-16T23:50:35.275Z | 2026-06-25T07:58:41.907Z |
| bit-libpython-2026-9669 | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | 2026-06-25T07:36:35.402Z | 2026-06-25T07:58:41.907Z |
| bit-libpython-2026-6019 | BaseCookie.js_output() does not neutralize embedded characters | 2026-06-25T07:36:30.325Z | 2026-06-25T07:58:41.907Z |
| bit-nifi-2026-54665 | Apache NiFi: Missing Validation for Proxy Host Headers | 2026-06-24T11:07:37.502Z | 2026-06-24T11:24:21.903Z |
| bit-nifi-2026-44914 | Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents | 2026-06-24T11:07:36.636Z | 2026-06-24T11:24:21.903Z |
| bit-nifi-2026-44913 | Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQL | 2026-06-24T11:07:35.813Z | 2026-06-24T11:24:21.903Z |
| bit-nifi-2026-44911 | Apache NiFi: Incorrect Authorization for Configuration Verification Requests | 2026-06-24T11:07:34.954Z | 2026-06-24T11:24:21.903Z |
| bit-python-2026-12003 | CPython >3.11 Insecure Input Validation resulting in privilege escalation | 2026-06-18T09:53:42.097Z | 2026-06-23T15:08:27.870Z |
| bit-node-2026-48937 | 2026-06-23T14:50:47.471Z | 2026-06-23T15:08:27.870Z | |
| bit-node-2026-48617 | 2026-06-23T14:50:46.123Z | 2026-06-23T15:08:27.870Z | |
| bit-mongodb-2026-11933 | Post-authentication use-after-free in server-side JavaScript BSON-to-array conversion | 2026-06-23T14:48:21.005Z | 2026-06-23T15:08:27.870Z |
| bit-libpython-2026-12003 | CPython >3.11 Insecure Input Validation resulting in privilege escalation | 2026-06-18T09:49:25.181Z | 2026-06-23T15:08:27.870Z |
| bit-apisix-2026-49872 | Apache APISIX: Improper authentication in cas-auth plugin | 2026-06-23T14:37:52.884Z | 2026-06-23T15:08:27.870Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-bx78383 | Security fixes for CVE-2025-15558, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-44903, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 1.29.0-r0, 1.29.0-r1, 1.29.1-r0, 1.29.2-r0, 1.29.2-r1, 1.29.2-r2 | 2026-06-08T12:33:02.072821Z | 2026-06-05T11:34:41Z |
| cleanstart-2026-yy48565 | Security fixes for CVE-2025-15558, CVE-2026-24051, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-34986, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46597, CVE-2026-46598, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2 applied in versions: 1.28.5-r0, 1.28.5-r1, 1.28.5-r2, 1.28.5-r3, 1.28.5-r4 | 2026-06-08T12:35:24.847984Z | 2026-06-05T11:34:23Z |
| cleanstart-2026-ww79343 | Security fixes for CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61732, CVE-2026-27139, CVE-2026-27140, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42504, CVE-2026-42507, ghsa-pc3f-x583-g7j2 applied in versions: 1.34.1-r0, 1.34.1-r2, 1.34.1-r3, 1.34.1-r4, 1.34.1-r5, 1.34.1-r6 | 2026-06-08T12:33:53.344110Z | 2026-06-05T11:01:01Z |
| cleanstart-2026-sa78596 | Security fixes for CVE-2025-47911, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61732, CVE-2026-27139, CVE-2026-27140, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42504, CVE-2026-42507, ghsa-pc3f-x583-g7j2 applied in versions: 1.34.1-r0, 1.34.1-r2, 1.34.1-r3, 1.34.1-r4, 1.34.1-r5, 1.34.1-r6 | 2026-06-08T12:33:52.277127Z | 2026-06-05T11:01:01Z |
| cleanstart-2026-uo11850 | Security fixes for CVE-2024-24786, CVE-2024-35255, CVE-2025-22868, CVE-2025-30204, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-42504, CVE-2026-42507, CVE-2026-44903, CVE-2026-46598, ghsa-8rm2-7qqf-34qm, ghsa-fw8g-cg8f-9j28, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 0.69.1-r0, 0.69.1-r1, 0.69.1-r2, 0.69.1-r3, 0.87.1-r0, 0.89.0-r0 | 2026-06-08T12:38:40.185129Z | 2026-06-05T10:47:49Z |
| cleanstart-2026-xq22308 | Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1 | 2026-06-08T12:36:31.181004Z | 2026-06-05T10:00:04Z |
| cleanstart-2026-qu97327 | Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.5.1-r0, 1.5.1-r1 | 2026-06-08T12:42:21.493198Z | 2026-06-05T10:00:04Z |
| cleanstart-2026-pu75130 | Security fixes for CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-pc3f-x583-g7j2 applied in versions: 2.19.2-r0, 2.19.2-r1, 2.19.2-r2, 2.19.2-r3 | 2026-06-08T12:36:40.099271Z | 2026-06-05T10:00:04Z |
| cleanstart-2026-pq10269 | Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2 | 2026-06-08T12:37:56.392664Z | 2026-06-05T10:00:04Z |
| cleanstart-2026-on25409 | Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1 | 2026-06-08T12:35:46.342723Z | 2026-06-05T10:00:04Z |
| cleanstart-2026-ne62195 | Security fixes for CVE-2026-42504 applied in versions: 0.35.0-r3 | 2026-06-08T12:37:07.449630Z | 2026-06-05T10:00:04Z |
| cleanstart-2026-mx76059 | Security fixes for CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42586, CVE-2026-42587, CVE-2026-44248, ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-38f8-5428-x5cv, ghsa-3p8m-j85q-pgmj, ghsa-45q3-82m4-75jr, ghsa-4g8c-wm8x-jfhw, ghsa-57rv-r2g8-2cj3, ghsa-5jpm-x58v-624v, ghsa-84h7-rjj3-6jx4, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-fghv-69vj-qj49, ghsa-jfg9-48mv-9qgx, ghsa-jq43-27x9-3v86, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8, ghsa-qqpg-mvqg-649v, ghsa-rgrr-p7gp-5xj7, ghsa-v8h7-rr48-vmmv, ghsa-w9fj-cfpg-grvv, ghsa-xq3w-v528-46rv, ghsa-xxqh-mfjm-7mv9 applied in versions: 0.1.109-r0, 0.1.113-r1, 0.1.118-r2 | 2026-06-08T12:39:38.316470Z | 2026-06-05T10:00:04Z |
| cleanstart-2026-gy66569 | Security fixes for CVE-2024-45337, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-34986, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-6v2p-p943-phr9, ghsa-c6gw-w398-hv78, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-p754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gw88-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.15.0-r1, 1.18.3-r0 | 2026-06-08T12:43:55.932404Z | 2026-06-05T10:00:04Z |
| cleanstart-2026-gv47287 | Security fixes for CVE-2025-61727, CVE-2025-61729 applied in versions: 1.4.10-r0 | 2026-06-08T12:39:22.484620Z | 2026-06-05T09:17:49Z |
| cleanstart-2026-jl47330 | Security fixes for CVE-2025-22868, CVE-2025-47911, CVE-2025-47912, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42507, CVE-2026-46598 applied in versions: 2.15.0-r0, 2.15.0-r1, 2.15.0-r2, 2.15.0-r3, 2.16.0-r3 | 2026-06-08T12:50:12.787385Z | 2026-06-05T06:52:24Z |
| cleanstart-2026-rq86436 | Security fixes for CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.5.0-r0, 8.5.0-r1, 8.5.0-r2, 8.5.0-r3 | 2026-06-08T12:49:49.195236Z | 2026-06-05T06:06:00Z |
| cleanstart-2026-yk91867 | Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2, 8.4.0-r3, 8.4.0-r4 | 2026-06-08T12:52:40.646530Z | 2026-06-05T06:02:55Z |
| cleanstart-2026-vo11205 | Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-hfvc-g4fc-pqhx, ghsa-j5w8-q4qc-rx2x, ghsa-p77j-4mvh-x3m3 applied in versions: 8.4.0-r0, 8.4.0-r1, 8.4.0-r2, 8.4.0-r3, 8.4.0-r4 | 2026-06-08T12:54:11.311194Z | 2026-06-05T06:02:55Z |
| cleanstart-2026-ws85269 | Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4 | 2026-06-08T12:59:56.017402Z | 2026-06-05T05:57:22Z |
| cleanstart-2026-re02723 | Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-32281, CVE-2026-32283, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 6.1.0-r0, 6.1.0-r1, 6.1.0-r2, 6.1.0-r3, 6.1.0-r4 | 2026-06-08T12:59:56.014836Z | 2026-06-05T05:57:22Z |
| cleanstart-2026-gm77447 | Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-39821, CVE-2026-39824, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507 applied in versions: 1.14.5-r1 | 2026-06-08T12:53:08.855047Z | 2026-06-05T05:51:04Z |
| cleanstart-2026-wf25734 | Security fixes for CVE-2025-47912, CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2026-24051, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, CVE-2026-34986, CVE-2026-35469, CVE-2026-39821, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39883, CVE-2026-41506, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-42880, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, CVE-2026-45737, CVE-2026-45738, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2xsj-vh29-9cwm, ghsa-37cx-329c-33x3, ghsa-389r-gv7p-r3rp, ghsa-3v3m-wc6v-x4x3, ghsa-3wgm-2mw2-vh5m, ghsa-3xc5-wrhm-f963, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-78h2-9frx-2jm8, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-crhj-59gh-8x96, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-gxhx-2686-5h9g, ghsa-h98r-wv3h-fr38, ghsa-hfvc-g4fc-pqhx, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-mh2q-q3fh-2475, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-pc3f-x583-g7j2, ghsa-qw64-3x98-g7q2, ghsa-rg3g-4rw9-gqrp applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4, 3.2.7-r0, 3.3.3-r0, 3.3.4-r0, 3.3.5-r0, 3.3.5-r1, 3.3.5-r2, 3.3.5-r3 | 2026-06-08T13:10:16.642890Z | 2026-06-05T05:50:12Z |
| cleanstart-2026-ho16255 | Security fixes for CVE-2025-47912, CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, CVE-2026-34986, CVE-2026-35469, CVE-2026-39821, CVE-2026-39883, CVE-2026-41506, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42880, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, CVE-2026-45737, CVE-2026-45738, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2xsj-vh29-9cwm, ghsa-37cx-329c-33x3, ghsa-389r-gv7p-r3rp, ghsa-3v3m-wc6v-x4x3, ghsa-3wgm-2mw2-vh5m, ghsa-3xc5-wrhm-f963, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-78h2-9frx-2jm8, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-crhj-59gh-8x96, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-gxhx-2686-5h9g, ghsa-h98r-wv3h-fr38, ghsa-hfvc-g4fc-pqhx, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-mh2q-q3fh-2475, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-pc3f-x583-g7j2, ghsa-qw64-3x98-g7q2, ghsa-rg3g-4rw9-gqrp applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4, 3.2.7-r0, 3.2.7-r1, 3.2.7-r2, 3.2.7-r3, 3.2.7-r4 | 2026-06-08T13:09:07.642978Z | 2026-06-05T05:49:29Z |
| cleanstart-2026-qn97697 | Security fixes for CVE-2025-14847, CVE-2025-58181, CVE-2025-61727, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33814, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 8.2.1-r1, 8.2.5-r0, 8.3.2-r0, 8.3.2-r1 | 2026-06-08T13:02:13.745824Z | 2026-06-05T05:48:38Z |
| cleanstart-2026-ch64198 | Security fixes for CVE-2025-14847, CVE-2025-58181, CVE-2025-61727, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 8.2.6-r1, 8.2.6-r2 | 2026-06-08T13:08:46.268817Z | 2026-06-05T05:47:56Z |
| cleanstart-2026-td64441 | Security fixes for CVE-2026-42504 applied in versions: 9.3.4-r3 | 2026-06-08T13:01:13.794326Z | 2026-06-05T05:46:20Z |
| cleanstart-2026-dk14565 | Security fixes for CVE-2026-42504 applied in versions: 9.3.4-r3 | 2026-06-08T13:02:33.849970Z | 2026-06-05T05:46:20Z |
| cleanstart-2026-qu83011 | Security fixes for CVE-2025-54410, CVE-2026-27145, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-40179, CVE-2026-42499, CVE-2026-42501, CVE-2026-42504, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-4vq8-7jfc-9cvp, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 8.18.1-r0, 8.19.15-r0, 8.19.15-r2, 8.19.15-r3, 8.19.15-r5, 8.19.15-r6, 9.1.10-r0 | 2026-06-08T13:10:53.763543Z | 2026-06-05T05:45:29Z |
| cleanstart-2026-kz96078 | Security fixes for CVE-2025-54410, CVE-2026-27145, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-40179, CVE-2026-42499, CVE-2026-42501, CVE-2026-42504, CVE-2026-42507, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-4vq8-7jfc-9cvp, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj, ghsa-vffh-x6r8-xx99, ghsa-wg65-39gg-5wfj applied in versions: 8.18.1-r0, 8.19.15-r0, 8.19.15-r2, 8.19.15-r3, 8.19.15-r5, 8.19.15-r6, 9.1.10-r0 | 2026-06-08T13:11:18.119227Z | 2026-06-05T05:45:29Z |
| cleanstart-2026-nj50569 | Security fixes for CVE-2026-34986, ghsa-78h2-9frx-2jm8 applied in versions: 0.48.1-r0 | 2026-06-08T13:11:16.403711Z | 2026-06-05T05:22:08Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| drupal-contrib-2026-009 | 2026-02-11T16:53:32.000Z | 2026-02-12T15:37:20.000Z | |
| drupal-contrib-2026-008 | 2026-02-04T17:23:40.000Z | 2026-02-04T17:23:40.000Z | |
| drupal-contrib-2026-007 | 2026-01-28T17:29:32.000Z | 2026-01-28T17:29:32.000Z | |
| drupal-contrib-2026-006 | 2026-01-28T17:28:31.000Z | 2026-01-28T17:28:31.000Z | |
| drupal-contrib-2026-005 | 2026-01-14T17:57:31.000Z | 2026-01-14T18:33:02.000Z | |
| drupal-contrib-2026-004 | 2026-01-14T17:56:28.000Z | 2026-01-14T17:56:28.000Z | |
| drupal-contrib-2026-003 | 2026-01-14T17:55:41.000Z | 2026-01-14T17:55:41.000Z | |
| drupal-contrib-2026-002 | 2026-01-14T17:54:33.000Z | 2026-01-14T17:54:33.000Z | |
| drupal-contrib-2026-001 | 2026-01-14T17:53:33.000Z | 2026-01-14T17:53:33.000Z | |
| drupal-contrib-2025-126 | 2025-12-17T17:47:13.000Z | 2025-12-17T17:47:13.000Z | |
| drupal-contrib-2025-125 | 2025-12-10T17:53:01.000Z | 2025-12-10T19:09:57.000Z | |
| drupal-contrib-2025-119 | 2025-12-03T18:48:23.000Z | 2025-12-03T19:05:53.000Z | |
| drupal-contrib-2025-124 | 2025-12-03T18:49:57.000Z | 2025-12-03T18:49:57.000Z | |
| drupal-contrib-2025-123 | 2025-12-03T18:49:40.000Z | 2025-12-03T18:49:40.000Z | |
| drupal-contrib-2025-122 | 2025-12-03T18:49:18.000Z | 2025-12-03T18:49:18.000Z | |
| drupal-contrib-2025-121 | 2025-12-03T18:48:57.000Z | 2025-12-03T18:48:57.000Z | |
| drupal-contrib-2025-120 | 2025-12-03T18:48:37.000Z | 2025-12-03T18:48:37.000Z | |
| drupal-contrib-2025-118 | 2025-12-03T18:48:10.000Z | 2025-12-03T18:48:10.000Z | |
| drupal-contrib-2025-117 | 2025-12-03T18:47:37.000Z | 2025-12-03T18:47:37.000Z | |
| drupal-contrib-2025-088 | 2025-07-09T16:37:40.000Z | 2025-11-22T09:22:47.000Z | |
| drupal-contrib-2025-116 | 2025-11-05T18:09:13.000Z | 2025-11-05T18:09:13.000Z | |
| drupal-contrib-2025-115 | 2025-11-05T18:08:01.000Z | 2025-11-05T18:08:01.000Z | |
| drupal-contrib-2025-114 | 2025-10-29T16:44:39.000Z | 2025-10-29T20:15:52.000Z | |
| drupal-contrib-2025-113 | 2025-10-22T16:35:12.000Z | 2025-10-22T16:35:12.000Z | |
| drupal-contrib-2025-112 | 2025-10-22T16:34:46.000Z | 2025-10-22T16:34:46.000Z | |
| drupal-contrib-2025-111 | 2025-09-24T17:28:05.000Z | 2025-09-24T17:28:05.000Z | |
| drupal-contrib-2025-110 | 2025-09-24T17:27:41.000Z | 2025-09-24T17:27:41.000Z | |
| drupal-contrib-2025-109 | 2025-09-24T17:27:33.000Z | 2025-09-24T17:27:33.000Z | |
| drupal-contrib-2025-108 | 2025-09-24T17:27:20.000Z | 2025-09-24T17:27:20.000Z | |
| drupal-contrib-2025-107 | 2025-09-24T17:18:08.000Z | 2025-09-24T17:18:08.000Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| cnvd-2026-24904 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-24904) | 2026-06-11 | 2026-06-22 |
| cnvd-2026-24903 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-24903) | 2026-06-11 | 2026-06-22 |
| cnvd-2026-24902 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-24902) | 2026-06-11 | 2026-06-22 |
| cnvd-2026-24901 | Adobe Substance3D Sampler越界写入漏洞(CNVD-2026-24901) | 2026-06-11 | 2026-06-22 |
| cnvd-2026-24900 | Adobe Experience Manager跨站脚本漏洞(CNVD-2026-24900) | 2026-06-11 | 2026-06-22 |
| cnvd-2026-24899 | Adobe Substance3D Sampler越界写入漏洞(CNVD-2026-24899) | 2026-06-11 | 2026-06-22 |
| cnvd-2026-24206 | OpenClaw范围绕过漏洞 | 2026-05-30 | 2026-06-18 |
| cnvd-2026-24205 | WordPress插件Doctreat Core存在未明漏洞 | 2026-06-12 | 2026-06-18 |
| cnvd-2026-24204 | Tenda W20E formDelStaState函数macAddr参数缓冲区溢出漏洞 | 2026-06-11 | 2026-06-18 |
| cnvd-2026-24194 | Microsoft UFO task_name参数路径遍历漏洞 | 2026-05-28 | 2026-06-18 |
| cnvd-2026-24193 | Microsoft Office SharePoint操作系统命令注入漏洞 | 2026-06-02 | 2026-06-18 |
| cnvd-2026-24192 | Microsoft 365 Copilot命令注入漏洞 | 2026-06-05 | 2026-06-18 |
| cnvd-2026-24191 | Microsoft Edge Copilot Chat注入漏洞 | 2026-06-05 | 2026-06-18 |
| cnvd-2026-24181 | Adobe InCopy堆缓冲区溢出漏洞(CNVD-2026-24181) | 2026-06-11 | 2026-06-18 |
| cnvd-2026-24180 | Adobe InCopy栈缓冲区溢出漏洞(CNVD-2026-24180) | 2026-06-11 | 2026-06-18 |
| cnvd-2026-24179 | Adobe Substance3D -Sampler越界写入漏洞 | 2026-06-11 | 2026-06-18 |
| cnvd-2026-24203 | Tenda W20E formAddWebAuthUser函数webAuthUserInfo参数缓冲区溢出漏洞 | 2026-06-11 | 2026-06-17 |
| cnvd-2026-24202 | 多款Siemens产品越界读取漏洞(CNVD-2026-24202) | 2025-09-11 | 2026-06-17 |
| cnvd-2026-24200 | 多款Siemens产品堆栈缓冲区溢出漏洞 | 2025-09-11 | 2026-06-17 |
| cnvd-2026-24199 | 多款Siemens产品代码问题漏洞(CNVD-2026-24199) | 2025-08-20 | 2026-06-17 |
| cnvd-2026-24198 | 多款Siemens产品资源管理错误漏洞(CNVD-2026-24198) | 2026-01-26 | 2026-06-17 |
| cnvd-2026-24178 | Siemens SINEC INS存在未明漏洞 | 2026-06-11 | 2026-06-17 |
| cnvd-2026-24177 | Siemens SINEC INS权限提升漏洞 | 2026-06-11 | 2026-06-17 |
| cnvd-2026-24176 | Siemens SINEC INS路径遍历漏洞(CNVD-2026-24176) | 2026-06-11 | 2026-06-17 |
| cnvd-2026-24175 | Siemens SINEC INS操作系统命令注入漏洞(CNVD-2026-24175) | 2026-06-11 | 2026-06-17 |
| cnvd-2026-24174 | 多款Siemens产品文件上传漏洞 | 2026-06-09 | 2026-06-17 |
| cnvd-2026-24170 | Siemens SIMATIC WinCC Unified PC Runtime信息泄露漏洞 | 2026-06-11 | 2026-06-17 |
| cnvd-2026-25390 | IBM Security QRadar EDR信息泄露漏洞(CNVD-2026-25390) | 2026-06-15 | 2026-06-16 |
| cnvd-2026-24169 | Google Chrome存在未明漏洞(CNVD-2026-24169) | 2026-04-10 | 2026-06-16 |
| cnvd-2026-24168 | Google Chrome代码执行漏洞(CNVD-2026-24168) | 2026-04-10 | 2026-06-16 |
| ID | Description | Published | Updated |
|---|---|---|---|
| bdu:2025-15829 | Уязвимость системы управления базами данных MySQL и MariaDB, связанная с раскрытием инфор… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15825 | Уязвимость компонентов mm ядра операционной системы Linux, позволяющая нарушителю получит… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15824 | Уязвимость компонента hugetlb.c ядра операционной системы Linux, позволяющая нарушителю п… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15822 | Уязвимость ядра операционной системы Linux, связанная с неправильной проверкой возвращаем… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15821 | Уязвимость компонента drm/sched ядра операционной системы Linux, позволяющая нарушителю в… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15820 | Уязвимость компонента pinctrl-msm ядра операционной системы Linux, позволяющая нарушителю… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15816 | Уязвимость компонента smb ядра операционной системы Linux, позволяющая нарушителю нарушит… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15815 | Уязвимость ядра операционной системы Linux, связанная с чтением за допустимыми границами … | 15.12.2025 | 16.02.2026 |
| bdu:2025-15814 | Уязвимость ядра операционной системы Linux, связанная с чтением за границами буфера данны… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15811 | Уязвимость компонента xusb ядра операционной системы Linux, позволяющая нарушителю вызват… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15810 | Уязвимость ядра операционной системы Linux, связанная с одновременным выполнением с испол… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15809 | Уязвимость компонента appletalk ядра операционной системы Linux, позволяющая нарушителю н… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15808 | Уязвимость компонента drm/tegra ядра операционной системы Linux, позволяющая нарушителю в… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15806 | Уязвимость компонента atm ядра операционной системы Linux, позволяющая нарушителю вызвать… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15804 | Уязвимость компонента mcast ядра операционной системы Linux, позволяющая нарушителю вызва… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15803 | Уязвимость компонентов tmptcp ядра операционной системы Linux, позволяющая нарушителю пол… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15802 | Уязвимость компонента perf/core ядра операционной системы Linux, позволяющая нарушителю в… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15800 | Уязвимость компонента mm/vmalloc.c ядра операционной системы Linux, позволяющая нарушител… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15799 | Уязвимость модуля powerpc/eeh ядра операционной системы Linux, позволяющая нарушителю выз… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15798 | Уязвимость компонента crypto ядра операционной системы Linux, позволяющая нарушителю вызв… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15797 | Уязвимость компонента xilinx ядра операционной системы Linux, позволяющая нарушителю вызв… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15796 | Уязвимость компонента iwlwifi ядра операционной системы Linux, позволяющая нарушителю выз… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15795 | Уязвимость ядра операционной системы Linux, связанная с ошибками разыменования указателя,… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15794 | Уязвимость компонента dtpm_cpu ядра операционной системы Linux, позволяющая нарушителю вы… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15793 | Уязвимость компонента fbtft ядра операционной системы Linux, позволяющая нарушителю вызва… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15792 | Уязвимость компонента net/tls ядра операционной системы Linux, позволяющая нарушителю выз… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15791 | Уязвимость компонента net/packet/af_packet.c ядра операционной системы Linux, позволяющая… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15790 | Уязвимость компонента net ядра операционной системы Linux, позволяющая нарушителю вызвать… | 15.12.2025 | 16.02.2026 |
| bdu:2025-15789 | Уязвимость компонента pnv_php операционной системы Linux, позволяющая нарушителю вызвать … | 15.12.2025 | 16.02.2026 |
| bdu:2025-15788 | Уязвимость компонента pnv_php ядра операционной системы Linux, позволяющая нарушителю выз… | 15.12.2025 | 16.02.2026 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2026-avi-0769 | Multiples vulnérabilités dans Oracle Weblogic | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0768 | Multiples vulnérabilités dans Oracle Virtualization | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0767 | Multiples vulnérabilités dans Oracle Systems | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0766 | Multiples vulnérabilités dans Oracle PeopleSoft | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0765 | Multiples vulnérabilités dans Oracle MySQL | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0764 | Multiples vulnérabilités dans les produits Mozilla | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0763 | Vulnérabilité dans les produits Moxa | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0762 | Multiples vulnérabilités dans les produits Qnap | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0761 | Multiples vulnérabilités dans Google Chrome | 2026-06-17T00:00:00.000000 | 2026-06-17T00:00:00.000000 |
| certfr-2026-avi-0760 | Multiples vulnérabilités dans les produits Moxa | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0759 | Multiples vulnérabilités dans les produits Spring | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0758 | Vulnérabilité dans Microsoft Azure | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0757 | Multiples vulnérabilités dans Microsoft Edge | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0756 | Vulnérabilité dans Cisco Catalyst | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0755 | Vulnérabilité dans LibreNMS | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0754 | Multiples vulnérabilités dans Redmine | 2026-06-16T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0632 | Multiples vulnérabilités dans les produits Mattermost | 2026-05-22T00:00:00.000000 | 2026-06-16T00:00:00.000000 |
| certfr-2026-avi-0753 | Multiples vulnérabilités dans Microsoft Azure | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0752 | Multiples vulnérabilités dans les produits Mattermost | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0751 | Vulnérabilité dans Spring AI | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0750 | Vulnérabilité dans les produits HPE Aruba Networking | 2026-06-15T00:00:00.000000 | 2026-06-15T00:00:00.000000 |
| certfr-2026-avi-0749 | Vulnérabilité dans Oracle PeopleSoft | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0748 | Multiples vulnérabilités dans les produits IBM | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0747 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0746 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0745 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0744 | Multiples vulnérabilités dans les produits Spring | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0743 | Vulnérabilité dans les produits Moxa | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0742 | Multiples vulnérabilités dans les produits NetApp | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| certfr-2026-avi-0741 | Vulnérabilité dans MongoDB | 2026-06-12T00:00:00.000000 | 2026-06-12T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-ale-003 | [MàJ] Vulnérabilité dans l'implémentation du protocole RPC par Microsoft | 2022-04-13T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2022-ale-001 | [MaJ] Vulnérabilité dans Microsoft Windows | 2022-01-12T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-022 | [MaJ] Vulnérabilité dans Apache Log4j | 2021-12-10T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-021 | Vulnérabilité dans Microsoft Exchange | 2021-11-10T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-019 | [MaJ] Vulnérabilité dans Microsoft Windows | 2021-09-08T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-017 | Multiples vulnérabilités dans Microsoft Exchange | 2021-08-27T00:00:00.000000 | 2022-05-04T00:00:00.000000 |
| certfr-2021-ale-020 | [Maj] Multiples vulnérabilités dans Microsoft Azure Open Management Infrastructure | 2021-09-17T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2021-ale-018 | Vulnérabilité dans Atlassian Confluence Server et Data Center | 2021-09-06T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2021-ale-014 | [MaJ] Multiples vulnérabilités dans Microsoft Windows | 2021-07-02T00:00:00.000000 | 2022-01-05T00:00:00.000000 |
| certfr-2021-ale-015 | Multiples vulnérabilités dans SolarWinds Serv-U | 2021-07-13T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-ale-012 | Multiples vulnérabilités dans Microsoft Windows | 2021-06-09T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-ale-011 | Vulnérabilité dans VMware vCenter Server | 2021-06-07T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-ale-016 | Vulnérabilité dans SonicWall | 2021-07-15T00:00:00.000000 | 2021-08-19T00:00:00.000000 |
| certfr-2021-ale-004 | [MàJ] Multiples vulnérabilités dans Microsoft Exchange Server | 2021-03-03T00:00:00.000000 | 2021-07-16T00:00:00.000000 |
| certfr-2021-ale-013 | [MaJ] Vulnérabilité dans Microsoft Windows | 2021-06-30T00:00:00.000000 | 2021-07-02T00:00:00.000000 |
| certfr-2021-ale-010 | Vulnérabilité dans Adobe Acrobat et Acrobat Reader | 2021-05-12T00:00:00.000000 | 2021-06-29T00:00:00.000000 |
| certfr-2021-ale-007 | [MàJ] Vulnérabilité dans Pulse Connect Secure | 2021-04-20T00:00:00.000000 | 2021-06-21T00:00:00.000000 |
| certfr-2021-ale-009 | [MàJ] Vulnérabilité dans Microsoft Windows | 2021-05-12T00:00:00.000000 | 2021-06-10T00:00:00.000000 |
| certfr-2021-ale-008 | Multiples vulnérabilités dans Exim | 2021-05-05T00:00:00.000000 | 2021-06-10T00:00:00.000000 |
| certfr-2021-ale-005 | Multiples vulnérabilités dans Microsoft DNS server | 2021-03-12T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-003 | [MàJ] Vulnérabilité dans VMware vCenter Server | 2021-02-25T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-001 | |MàJ] Vulnérabilité dans SonicWall SMA100 | 2021-02-02T00:00:00.000000 | 2021-05-12T00:00:00.000000 |
| certfr-2021-ale-006 | [MàJ] Vulnérabilité dans F5 BIG-IP | 2021-03-22T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| certfr-2020-ale-026 | [MaJ] Présence de code malveillant dans SolarWinds Orion | 2020-12-14T00:00:00.000000 | 2021-04-15T00:00:00.000000 |
| certfr-2021-ale-002 | [MàJ] Vulnérabilité dans Google Chrome et Microsoft Edge | 2021-02-05T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2020-ale-021 | Vulnérabilité dans Samba | 2020-09-18T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2020-ale-020 | [MàJ] Vulnérabilité dans Microsoft Netlogon | 2020-09-15T00:00:00.000000 | 2021-03-11T00:00:00.000000 |
| certfr-2020-ale-019 | Recrudescence d'activité Emotet en France | 2020-09-07T00:00:00.000000 | 2021-02-09T00:00:00.000000 |
| certfr-2020-ale-025 | Vulnérabilité dans Fortinet FortiOS SSL-VPN | 2020-11-27T00:00:00.000000 | 2021-02-08T00:00:00.000000 |
| certfr-2020-ale-024 | [MaJ] Vulnérabilité dans les produits VMware | 2020-11-24T00:00:00.000000 | 2020-12-17T00:00:00.000000 |
| ID | Description | Published | Updated |
|---|---|---|---|
| osv-2023-35 | Heap-buffer-overflow in parse_classes_64 | 2023-01-29T13:01:45.762871Z | 2026-06-23T14:21:51.263005Z |
| osv-2022-993 | Stack-use-after-return in check_buffer | 2022-09-29T00:02:10.256639Z | 2026-06-23T14:20:57.295288Z |
| osv-2022-1137 | Heap-buffer-overflow in io_memory_read | 2022-11-05T00:00:44.243862Z | 2026-06-23T14:19:18.515388Z |
| osv-2022-1165 | Heap-buffer-overflow in parse_content_length | 2022-11-12T13:00:05.964113Z | 2026-06-23T14:17:43.229878Z |
| osv-2023-239 | Use-of-uninitialized-value in ihevce_strm_fill_done | 2023-03-26T13:02:03.445119Z | 2026-06-23T14:16:59.015199Z |
| osv-2023-235 | Use-of-uninitialized-value in complexity_RC_reset_marking | 2023-03-26T13:00:16.681780Z | 2026-06-23T14:16:53.157609Z |
| osv-2023-234 | Use-of-uninitialized-value in ihevce_enc_frm_proc_slave_thrd | 2023-03-26T13:00:12.135289Z | 2026-06-23T14:13:51.462243Z |
| osv-2026-959 | Heap-use-after-free in Wt::Http::Request::parseFormUrlEncoded | 2026-06-23T00:15:52.533371Z | 2026-06-23T00:15:52.533654Z |
| osv-2024-440 | UNKNOWN READ | 2024-05-07T00:06:11.033336Z | 2026-06-20T14:22:06.037177Z |
| osv-2024-396 | UNKNOWN READ in jvp_object_free | 2024-05-01T00:11:24.552935Z | 2026-06-20T14:21:43.885486Z |
| osv-2024-719 | Heap-buffer-overflow in hevc_ref_pic_lists_modification | 2024-08-07T00:05:22.699506Z | 2026-06-18T14:28:22.602628Z |
| osv-2024-695 | Stack-buffer-overflow in gf_vvc_parse_nalu_bs | 2024-07-31T00:02:35.217594Z | 2026-06-18T14:28:03.028524Z |
| osv-2024-664 | Heap-buffer-overflow in gf_dash_group_get_template | 2024-07-18T00:13:55.576218Z | 2026-06-18T14:27:09.059369Z |
| osv-2024-659 | Index-out-of-bounds in gf_vvc_parse_nalu_bs | 2024-07-18T00:01:18.765548Z | 2026-06-18T14:27:08.305495Z |
| osv-2026-324 | Security exception in java.base/java.util.Arrays.copyOfRange | 2026-02-28T00:03:36.847525Z | 2026-06-17T14:27:05.737122Z |
| osv-2022-1288 | Stack-buffer-overflow in bool SmilesParseOps::parser::parse_atom_props<std::__1::__wrap_iter<char const*> | 2024-11-04T00:16:22.516312Z | 2026-06-17T14:12:15.832577Z |
| osv-2026-923 | Heap-use-after-free in gf_node_unregister | 2026-06-16T00:14:25.379686Z | 2026-06-16T00:14:25.379985Z |
| osv-2020-868 | Use-of-uninitialized-value in fetchARGB32ToRGBA64PM_avx2 | 2020-07-14T22:13:50.828646Z | 2026-06-13T14:18:46.395248Z |
| osv-2021-586 | Use-of-uninitialized-value in void intra_prediction_angular<unsigned short> | 2021-03-31T00:01:03.787831Z | 2026-06-13T14:18:36.099285Z |
| osv-2026-910 | Heap-use-after-free in gf_node_unregister | 2026-06-13T00:12:13.307183Z | 2026-06-13T00:12:13.307421Z |
| osv-2026-907 | Heap-use-after-free in gf_sg_route_del | 2026-06-13T00:07:07.915391Z | 2026-06-13T00:07:07.915676Z |
| osv-2021-972 | UNKNOWN READ in void mc_chroma<unsigned short> | 2021-07-13T00:00:16.631711Z | 2026-06-12T14:19:20.443816Z |
| osv-2026-903 | UNKNOWN in avi_parse_input_file | 2026-06-12T00:09:53.280533Z | 2026-06-12T00:09:53.280823Z |
| osv-2022-867 | Heap-buffer-overflow in get_utf_8_string | 2022-09-09T00:01:54.157712Z | 2026-06-11T15:16:00.958530Z |
| osv-2026-879 | Heap-use-after-free in lsr_restore_base | 2026-06-08T00:02:29.284145Z | 2026-06-11T14:37:17.340007Z |
| osv-2026-892 | Heap-buffer-overflow in decode_R13_RNUMBER | 2026-06-09T00:07:59.081654Z | 2026-06-10T14:44:34.266794Z |
| osv-2026-895 | Heap-buffer-overflow in ihevcd_fmt_conv | 2026-06-10T00:07:09.972504Z | 2026-06-10T00:07:09.972922Z |
| osv-2024-245 | Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept | 2024-04-08T00:11:03.595756Z | 2026-06-09T14:18:44.856483Z |
| osv-2026-889 | Use-of-uninitialized-value in vp8_compute_skin_block | 2026-06-08T00:20:52.435198Z | 2026-06-08T00:20:52.435472Z |
| osv-2026-886 | Heap-buffer-overflow in ihevcd_fmt_conv | 2026-06-08T00:10:39.649555Z | 2026-06-08T00:10:39.649853Z |
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0147 | Read-only volume remount bypass via guest CAP_SYS_ADMIN | 2026-05-16T12:00:00Z | 2026-05-20T09:41:31Z |
| rustsec-2026-0137 | Possible unaligned data access for implementations of `SqliteAggregate` | 2026-04-24T12:00:00Z | 2026-05-20T07:14:04Z |
| rustsec-2026-0136 | Command injection in Diesel's implementation of `COPY FROM`/`COPY TO` | 2026-04-24T12:00:00Z | 2026-05-20T07:14:04Z |
| rustsec-2026-0125 | Signature Verification on AVX2 Platforms Mishandles Edge Case | 2026-05-05T12:00:00Z | 2026-05-20T07:14:04Z |
| rustsec-2026-0124 | Potential Panic on Overlong Ciphertext Buffer | 2026-03-29T12:00:00Z | 2026-05-20T07:14:04Z |
| rustsec-2026-0140 | DNS rebinding and cross-origin CSRF in dynoxide's MCP HTTP transport | 2026-05-12T12:00:00Z | 2026-05-19T05:50:44Z |
| rustsec-2026-0146 | `InterfaceAccount` allows account substitution between unexpected types | 2026-05-08T12:00:00Z | 2026-05-19T04:53:18Z |
| rustsec-2026-0145 | PAX Header Desynchronization in astral-tokio-tar | 2026-05-18T12:00:00Z | 2026-05-19T04:53:18Z |
| rustsec-2026-0144 | `Program<System>` accepts arbitrary executable programs | 2026-05-07T12:00:00Z | 2026-05-18T19:28:44Z |
| rustsec-2026-0132 | Potential out-of-bounds write via public `Context` fields | 2026-05-02T12:00:00Z | 2026-05-17T20:07:58Z |
| rustsec-2026-0122 | Potential use-after-free due to lack of panic safety in `InlineVec::clear` and `SerVec::clear` | 2026-04-23T12:00:00Z | 2026-05-16T07:08:02Z |
| rustsec-2026-0143 | Double-free in `vmem` storage reachable from safe Rust | 2026-05-14T12:00:00Z | 2026-05-14T21:26:19Z |
| rustsec-2026-0142 | Double-free in `vmem` storage reachable from safe Rust (predecessor of `oneringbuf`) | 2026-05-14T12:00:00Z | 2026-05-14T21:26:19Z |
| rustsec-2026-0141 | TLS hostname verification disabled when using Boring TLS backend | 2026-05-14T12:00:00Z | 2026-05-14T09:14:38Z |
| rustsec-2026-0139 | Null-pointer dereference and double-free via safe APIs | 2026-05-02T12:00:00Z | 2026-05-13T14:54:08Z |
| rustsec-2026-0138 | Unsound access to padding bytes while serializing date/time values using the Mysql backend | 2026-04-30T12:00:00Z | 2026-05-13T14:16:31Z |
| rustsec-2026-0135 | Unsound transmute while debug/display printing batch Insert statements in Diesel's SQLite backend | 2026-04-24T12:00:00Z | 2026-05-13T14:16:31Z |
| rustsec-2026-0134 | Unsound access to padding bytes while serializing date/time values using the Mysql backend | 2026-04-24T12:00:00Z | 2026-05-13T14:16:31Z |
| rustsec-2026-0133 | Invalid pointer arithmetic in `iter()` and `iter_mut()` | 2026-05-02T12:00:00Z | 2026-05-13T12:38:12Z |
| rustsec-2026-0131 | Double-free in `Chomp::inner()` | 2026-05-02T12:00:00Z | 2026-05-13T12:38:12Z |
| rustsec-2026-0130 | Out-of-bounds read/write in `Index` and `IndexMut` implementations | 2026-05-02T12:00:00Z | 2026-05-13T12:34:44Z |
| rustsec-2026-0129 | Buffer overflow in `Clusterings::from_i32_column_major_order()` | 2026-05-02T12:00:00Z | 2026-05-13T12:34:44Z |
| rustsec-2026-0128 | Double-free and use-after-free in `Keys::next()` | 2026-05-02T12:00:00Z | 2026-05-13T12:19:05Z |
| rustsec-2026-0127 | Integer overflow in `array::ReadWrite::new()` leading to potential memory corruption | 2026-05-02T12:00:00Z | 2026-05-13T12:16:15Z |
| rustsec-2026-0126 | AVX2 Implementation Did Not Fully Reduce Intermediate Values | 2026-04-27T12:00:00Z | 2026-05-13T10:05:44Z |
| rustsec-2026-0123 | Out-of-bounds read in `bytes_helper` public safe functions | 2026-05-02T12:00:00Z | 2026-05-12T17:04:47Z |
| rustsec-2026-0121 | Denial of service in Steamworks game clients/servers using P2P authentication | 2026-05-05T12:00:00Z | 2026-05-12T05:04:00Z |
| rustsec-2026-0120 | NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses | 2026-05-01T12:00:00Z | 2026-05-07T08:56:41Z |
| rustsec-2026-0119 | CPU exhaustion during message encoding due to O(n²) name compression | 2026-05-01T12:00:00Z | 2026-05-07T08:56:41Z |
| rustsec-2026-0118 | NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses | 2026-05-01T12:00:00Z | 2026-05-07T08:56:41Z |