Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    DEBIAN-CVE-2026-88050
    No fix available
    Packages

    tesseract, tesseract, tesseract

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88049
    No fix available
    Packages

    tesseract, tesseract, tesseract

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88048
    No fix available
    Packages

    tesseract, tesseract, tesseract

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88047
    No fix available
    Packages

    tesseract, tesseract, tesseract

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88046
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88045
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88044
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    CVE-2026-85228
    No fix available
    Packages

    Summary

    Integer overflow in tensor buffer validation in Deep Java Library

    Published
    10 Sept 2026
    CGA-cg4v-gv7c-g93f
    No fix available
    Packages

    cilium-fips-1.19-operator-aws

    Summary

    Published
    10 Sept 2026
    CGA-225w-pxp9-r979
    No fix available
    Packages

    spark-4.0-scala-2.13, spark-4.0-scala-2.13

    Summary

    Published
    10 Sept 2026
    PYSEC-2026-3972
    No fix available
    Packages

    lightning

    Summary

    PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization

    Published
    10 Sept 2026
    PYSEC-2026-3973
    Fix available
    Packages

    lightning

    Summary

    Compromise of PyTorch Lightning PyPi Package Versions

    Published
    10 Sept 2026
    PYSEC-2026-3968
    Fix available
    Packages

    lightning

    Summary

    Published
    10 Sept 2026
    PYSEC-2026-3971
    No fix available
    Packages

    lightning

    Summary

    PyTorch Lightning denial of service vulnerability

    Published
    10 Sept 2026
    PYSEC-2026-3969
    Fix available
    Packages

    lightning

    Summary

    Published
    10 Sept 2026
    PYSEC-2026-3970
    Fix available
    Packages

    lightning

    Summary

    PyTorch Lightning path traversal vulnerability

    Published
    10 Sept 2026
    PYSEC-2026-3975
    Fix available
    Packages

    pytorch-lightning

    Summary

    pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint

    Published
    10 Sept 2026
    PYSEC-2026-3974
    Fix available
    Packages

    pytorch-lightning

    Summary

    Remote code execution in pytorch lightning

    Published
    10 Sept 2026
    CGA-j5ph-w2vr-q5rg
    No fix available
    Packages

    cilium-fips-1.19-operator-azure

    Summary

    Published
    10 Sept 2026
    CGA-j5p6-gh63-xxpr
    No fix available
    Packages

    cilium-fips-1.19-host-utils

    Summary

    Published
    10 Sept 2026
    MINI-v4xh-cmhm-fv97
    No fix available
    Packages

    dogstatsd

    Summary

    Published
    10 Sept 2026
    MINI-rw6q-3wp4-q6w3
    No fix available
    Packages

    datadog-agent

    Summary

    Published
    10 Sept 2026
    CVE-2026-88050
    No fix available
    Packages

    Summary

    Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values

    Published
    10 Sept 2026
    CVE-2026-88049
    No fix available
    Packages

    Summary

    Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch

    Published
    10 Sept 2026
    CVE-2026-88048
    No fix available
    Packages

    Summary

    Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward via layer/weight-matrix dimension mismatch

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88018
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88017
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88016
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88015
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88014
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    DEBIAN-CVE-2026-88013
    No fix available
    Packages

    rclone, rclone

    Summary

    Published
    10 Sept 2026
    CVE-2026-88047
    No fix available
    Packages

    Summary

    Tesseract: ReadNormProtos stack buffer overflow

    Published
    10 Sept 2026
    CVE-2026-88046
    Fix available
    Packages

    Summary

    rclone: source object names can escape the configured root on upload

    Published
    10 Sept 2026
    CVE-2026-88045
    Fix available
    Packages

    Summary

    rclone: S3 multipart declared-length memory exhaustion

    Published
    10 Sept 2026
    CVE-2026-88044
    Fix available
    Packages

    Summary

    rclone: RC per-server auth-proxy bypass

    Published
    10 Sept 2026
    CGA-p4xp-h6hq-3q64
    No fix available
    Packages

    cilium-fips-1.19-host-utils

    Summary

    Published
    10 Sept 2026
    CVE-2026-79987
    Fix available
    Packages

    Summary

    Low-privilege RCE through element-search eager loading

    Published
    10 Sept 2026
    SUSE-SU-2026:3835-1
    Fix available
    Packages

    openssl, openssl-3, nodejs24

    Summary

    Security update for openssl, openssl-3

    Published
    10 Sept 2026
    CVE-2026-88018
    Fix available
    Packages

    Summary

    rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass

    Published
    10 Sept 2026
    USN-8747-1
    Fix available
    Packages

    beets, beets, beets, beets, beets, beets

    Summary

    beets vulnerability

    Published
    10 Sept 2026
    CVE-2026-88017
    Fix available
    Packages

    Summary

    rclone: FTP cross-session auth-proxy backend confusion

    Published
    10 Sept 2026
    CVE-2026-88016
    Fix available
    Packages

    Summary

    rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

    Published
    10 Sept 2026
    CVE-2026-88015
    Fix available
    Packages

    Summary

    rclone local: crafted Range request against a translated symlink panics (DoS)

    Published
    10 Sept 2026
    USN-8746-1
    Fix available
    Packages

    libebml, libebml, libebml, libebml

    Summary

    libebml vulnerability

    Published
    10 Sept 2026
    CVE-2026-88014
    Fix available
    Packages

    Summary

    rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace

    Published
    10 Sept 2026
    ECHO-697c-1fee-1fce
    Fix available
    Packages

    org.springframework.security:spring-security-core

    Summary

    Published
    10 Sept 2026
    CGA-qp39-2g5g-qr7m
    No fix available
    Packages

    consul-k8s-1.6-cli

    Summary

    Published
    10 Sept 2026
    CVE-2026-88959
    No fix available
    Packages

    Summary

    Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpoints

    Published
    10 Sept 2026
    CVE-2026-88013
    Fix available
    Packages

    Summary

    rclone: http backend forwards custom/auth headers to a different host on redirect

    Published
    10 Sept 2026
    USN-8745-1
    Fix available
    Packages

    kissfft, kissfft, kissfft

    Summary

    kissfft vulnerabilities

    Published
    10 Sept 2026