Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    binwalk

    Summary

    path traversal vulnerability was identified in ReFirm Labs binwalk from version 2

    Published
    31 Oct 2026
    Packages

    libraw

    Summary

    In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx

    Published
    31 Oct 2026
    Packages

    libraw

    Summary

    In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng

    Published
    31 Oct 2026
    Packages

    tiledb

    Summary

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority

    Published
    31 Oct 2026
    Packages

    libraw

    Summary

    In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched

    Published
    31 Oct 2026
    Packages

    neovim, vim

    Summary

    vim before patch 8

    Published
    31 Oct 2026
    Packages

    libraw

    Summary

    In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched

    Published
    31 Oct 2026
    Packages

    guix, nix, nix, nix

    Summary

    Nix is a package manager for Linux and other Unix systems

    Published
    31 Oct 2026
    Packages

    libraw

    Summary

    In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched

    Published
    31 Oct 2026
    Packages

    neovim, vim

    Summary

    vim before patch 8

    Published
    31 Oct 2026
    Packages

    libraw

    Summary

    Nagios XI 5

    Published
    31 Oct 2026
    Packages

    neovim, vim

    Summary

    integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8

    Published
    31 Oct 2026
    Packages

    libraw

    Summary

    libraw 20

    Published
    31 Oct 2026
    Packages

    fail2ban

    Summary

    fail2ban is a daemon to ban hosts that cause multiple authentication errors

    Published
    31 Oct 2026
    Packages

    neovim, vim

    Summary

    integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    invalid memory address dereference was discovered in the canUnpack function in p_mach

    Published
    31 Oct 2026
    Packages

    libraw

    Summary

    flaw was found in LibRaw

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    heap-based buffer over-read was discovered in canUnpack in p_mach

    Published
    31 Oct 2026
    Packages

    neovim, vim

    Summary

    getchar

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    canUnpack in p_vmlinx

    Published
    31 Oct 2026
    Packages

    thunderbird

    Summary

    parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Use After Free

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    PackLinuxElf64::unpack in p_lx_elf

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    flaw was found in upx canPack in p_lx_elf

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    CGA-mwgv-5mcw-7gg2
    Fix available
    Packages

    ts-patch, ts-patch

    Summary

    Published
    31 Oct 2026
    CGA-hm63-j84r-vpvg
    Fix available
    Packages

    ts-patch, ts-patch

    Summary

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    assertion abort was found in upx MemBuffer::alloc() in mem

    Published
    31 Oct 2026
    CGA-q9cx-95ww-4j76
    Fix available
    Packages

    ts-patch, ts-patch

    Summary

    Published
    31 Oct 2026
    CGA-8f68-85mh-q48v
    Fix available
    Packages

    ts-patch, ts-patch

    Summary

    Published
    31 Oct 2026
    CGA-vp9h-3w56-7cvp
    Fix available
    Packages

    ts-patch, ts-patch

    Summary

    Published
    31 Oct 2026
    CGA-wcf2-vg3p-5r4x
    Fix available
    Packages

    ts-patch, ts-patch

    Summary

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf

    Published
    31 Oct 2026
    Packages

    perl-email-mime

    Summary

    excessive memory use issue (CWE-770) exists in Email-MIME, before version 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    floating point exception was discovered in the elf_lookup function in p_lx_elf

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    heap-based buffer over-read was discovered in the get_le64 function in bele

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Use After Free

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    heap-based buffer over-read was discovered in the get_le32 function in bele

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc

    Published
    31 Oct 2026
    Packages

    py3-joblib

    Summary

    package joblib from 0 and before 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    invalid memory address reference was discovered in the adjABS function in p_lx_elf

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Use of Uninitialized Variable

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    invalid memory address reference was discovered in the elf_lookup function in p_lx_elf

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026