Open Source Vulnerabilities
jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC)
jackson-dataformat-cbor: quadratic-time TagList growth on unbounded stacked tags (CPU/GC DoS, PoC)
node-forge
TuxCare security update for node-forge (4 CVEs)
node-forge
TuxCare security update for node-forge (4 CVEs)
pillow, pillow, pillow
pillow vulnerabilities
cakephp/cakephp
TuxCare security update for cakephp/cakephp (5 CVEs)
cakephp/cakephp
TuxCare security update for cakephp/cakephp (5 CVEs)
craftcms/cms
TuxCare security update for craftcms/cms (1 CVE)
craftcms/cms
TuxCare security update for craftcms/cms (1 CVE)
Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal
Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal
Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak
Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak
Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key
Parse Server before 8.6.113 and 9.10.6-alpha.5 Prototype Pollution via Dot Notation Key
FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment
FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment
FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close
FreeRDP before 3.32.2 Use-After-Free via Dynamic rdpsnd Channel Close
FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read
FreeRDP before 3.32.2 Heap Buffer Overflow via Early User Authorization Read
FreeRDP before 3.32.2 Use-After-Free via DRDYNVC Tracker Race
FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest
FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest
FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
FreeRDP before 3.32.2 Infinite Loop via Truncated WebSocket Frame
FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys
FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys
FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race
FreeRDP before 3.32.2 Use-After-Free via RDPGFX ResetGraphics Race
FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt
FreeRDP before 3.32.2 Double Free in WinPR Kerberos retrieveSomeTgt
FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext
FreeRDP before 3.32.2 Use-After-Free in Smartcard Emulation ReleaseContext
FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec
FreeRDP before 3.32.2 Heap Out-of-Bounds Write in Planar Codec
FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close
FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close
FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability
FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability
FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event
FreeRDP 3.0.0 before 3.32.2 Denial of Service via Slow-Path Input Event
FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap
FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap
apache2-mod_php8, php8, php8-embed, php8-fastcgi, php8-fpm, php8-test
Security update for php8
apache2-mod_php8/ php8/ php8-embed/ php8-fastcgi/ php8-fpm/ php8-test
Security update for php8
net-snmp, net-snmp, net-snmp
net-snmp vulnerability
SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution
SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution
fastify
TuxCare security update for fastify (1 CVE)
org.springframework.boot:spring-boot, org.springframework.boot:spring-boot-autoconfigure, org.springframework.boot:spring-boot-starter-mail
TuxCare security update for org.springframework.boot (2 CVEs)
org.springframework.boot:spring-boot/ org.springframework.boot:spring-boot-autoconfigure/ org.springframework.boot:spring-boot-starter-mail
TuxCare security update for org.springframework.boot (2 CVEs)
Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller
Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller
follow-redirects
TuxCare security update for follow-redirects (1 CVE)
follow-redirects
TuxCare security update for follow-redirects (1 CVE)
nodemailer
TuxCare security update for nodemailer (1 CVE)
decode-uri-component
TuxCare security update for decode-uri-component (1 CVE)
decode-uri-component
TuxCare security update for decode-uri-component (1 CVE)
libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl
libsql-abstract-perl/ libsql-abstract-perl/ libsql-abstract-perl
libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl
libsql-abstract-perl/ libsql-abstract-perl/ libsql-abstract-perl
libsql-abstract-perl, libsql-abstract-perl, libsql-abstract-perl
libsql-abstract-perl/ libsql-abstract-perl/ libsql-abstract-perl
frr
CVE-2026-119776 affecting package frr 10.5.5-1
