Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Unknownpppoatm: ensure a writable skb header and linear dataOct 6, 2026
- Unknowndrm/xe/i2c: Disable IRQ on unbindOct 6, 2026
- Unknowndrm/amdgpu: check ras and obj before dereferenceOct 6, 2026
- High8.1cifs: Fix server use-after-free in cifs_chan_skip_or_disable()Oct 6, 2026
- Unknownscsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()Oct 6, 2026
- Unknownwifi: iwlegacy: fix broadcast stations deallocationOct 6, 2026
- High7.1smb: client: fix potential OOB read in smb3_enum_snapshots()Oct 6, 2026
- UnknownImportant: nodejs:22 security updateOct 6, 2026
- High8.4PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encodingOct 5, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionOct 5, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresEPSS 0.3%Oct 5, 2026
- Unknownuv: Path traversal on Windows through wheel extractionEPSS 0.4%Oct 5, 2026
- Medium6.5Snowflake drivers writes sensitive information to logsOct 5, 2026
- Low3.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Oct 5, 2026
- Medium5.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Oct 5, 2026
- UnknownCVE-2026-82458 affecting package influxdb for versions less than 2.7.5-21Oct 2, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026
- UnknownA vulnerability was determined in Blosc C-Blosc2 up to 3.3.2.EPSS 0.3%Sep 30, 2026
- UnknownCVE-2026-103111 affecting package rust for versions less than 1.75.0-30Sep 30, 2026
- UnknownImportant: nodejs:24 security, bug fix, and enhancement updateSep 30, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)EPSS 0.4%Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationEPSS 0.3%Sep 29, 2026
- Medium5.9libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.EPSS 0.3%Sep 29, 2026
- Unknownurllib3 is an HTTP client library for Python.Sep 29, 2026
- UnknownImproper parsing of fractional NumericDate from JWT exp claimsSep 29, 2026