Open Source Vulnerabilities

gitlab-runner-fips-18.5, gitlab-docker-machine-fips-18.5, gitlab-runner-helper-compat-fips-18.5, gitlab-runner-helper-fips-18.5, gitlab-runner-helper-oci-entrypoint-fips-18.5, gitlab-runner-oci-entrypoint-fips-18.5

squid3, squid3, squid, squid, squid, squid

fetchmail

fetchmail-6.5.6-1.1 on GA media

ImageMagick

ImageMagick-7.1.2.7-1.1 on GA media

binutils

binutils-2.45-1.2 on GA media

cargo-audit-advisory-db

cargo-audit-advisory-db-20251021-1.1 on GA media

git-bug

git-bug-0.10.1-2.1 on GA media

istioctl

istioctl-1.27.3-1.1 on GA media

sccache

sccache-0.12.0~1-1.1 on GA media

FriBidi_jll

A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the...

FriBidi_jll

A heap-based buffer overflow flaw was found in the Fribidi package and affects the...

FriBidi_jll

A stack-based buffer overflow flaw was found in the Fribidi package

FriBidi_jll

A buffer overflow in the `fribidi_get_par_embedding_levels_ex()` function in `lib/fribidi-bidi.c` of...

linux-intel-iot-realtime, linux-realtime, linux-aws-fips, linux-azure-fips, linux-fips, linux-gcp-fips

linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips, linux-intel-iot-realtime, linux-realtime vulnerabilities

mbedtls, mbedtls, mbedtls

mbedtls, mbedtls, mbedtls, mbedtls, mbedtls

mbedtls, mbedtls, mbedtls, mbedtls, mbedtls, mbedtls

linux-hwe-5.15, linux-ibm-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15, linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-nvidia, linux-oracle, linux-xilinx-zynqmp

linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

taguette

Taguette vulnerable to cross-site scripting via tag name, tag description, document name and document description

taguette

taguette

mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

gitlab-runner-18.5, gitlab-runner-18.5, gitlab-docker-machine-18.5, gitlab-docker-machine-18.5, gitlab-runner-helper-18.5, gitlab-runner-helper-18.5, gitlab-runner-helper-compat-18.5, gitlab-runner-helper-compat-18.5, gitlab-runner-helper-oci-entrypoint-18.5, gitlab-runner-helper-oci-entrypoint-18.5, gitlab-runner-oci-entrypoint-18.5, gitlab-runner-oci-entrypoint-18.5

taguette

Taguette password reset link poisoning

Taguette cross-site scripting vulnerability via tag name, tag description, document name and document description

Taguette vulnerable to password reset link poisoning

uptime-kuma

Uptime Kuma Server-side Template Injection (SSTI) in Notification Templates Allows Arbitrary File Read

vite allows server.fs.deny bypass via backslash on Windows

vite, vite, vite, vite, vite, vite, vite

vite allows server.fs.deny bypass via backslash on Windows

quictls

Updated quictls packages with two security issues and bug fixes

python3, python3-debug, python3-devel, python3-idle, python3-libs, python3-test, python3-tkinter

python3: Fix of CVE-2025-8194