Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    singularity

    Summary

    BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access

    Published
    31 Oct 2026
    Packages

    znc

    Summary

    ZNC before 1

    Published
    31 Oct 2026
    CGA-6jrg-6fxm-54g7
    Fix available
    Packages

    dbt-bigquery

    Summary

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In the IMAP Server in Dovecot 2

    Published
    31 Oct 2026
    CGA-wmm4-6qpm-9qc5
    Fix available
    Packages

    dbt-bigquery

    Summary

    Published
    31 Oct 2026
    CGA-p9rp-6922-c85h
    Fix available
    Packages

    dbt-bigquery

    Summary

    Published
    31 Oct 2026
    CGA-m78x-4pq3-6jhg
    Fix available
    Packages

    dbt-bigquery

    Summary

    Published
    31 Oct 2026
    Packages

    znc

    Summary

    ZNC before 1

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In the IMAP Server in Dovecot 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclos...

    Published
    31 Oct 2026
    Packages

    znc

    Summary

    Modules

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access

    Published
    31 Oct 2026
    Packages

    znc

    Summary

    ZNC 1

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privi...

    Published
    31 Oct 2026
    Packages

    znc

    Summary

    In ZNC before 1

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    IMAP and LMTP components in Dovecot 2

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    lib-smtp in submission-login and lmtp in Dovecot 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access

    Published
    31 Oct 2026
    CGA-cmv5-3qg8-ww5r
    Fix available
    Packages

    authentik-2025.12

    Summary

    Published
    31 Oct 2026
    CGA-xw23-64gr-f437
    No fix available
    Packages

    authentik-2025.12

    Summary

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to potentially enable denial of service via network access

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In Dovecot before 2

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Improper input validation in some Intel(R) TDX module software before version 1

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    In Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    issue was discovered in Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    submission service in Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege ...

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    Dovecot before 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Improper finite state machines (FSMs) in hardware logic in some Intel(R) Processors may allow an privileged user to potentially enable a denial of service via local access

    Published
    31 Oct 2026
    Packages

    dovecot

    Summary

    issue was discovered in the auth component in Dovecot 2

    Published
    31 Oct 2026
    Packages

    intel-ucode, intel-ucode

    Summary

    Observable discrepancy in RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access

    Published
    31 Oct 2026
    Packages

    syncthing

    Summary

    Syncthing is a continuous file synchronization program

    Published
    31 Oct 2026
    Packages

    qpdf

    Summary

    tokenizer in QPDF 6

    Published
    31 Oct 2026
    Packages

    qpdf

    Summary

    stack-consumption vulnerability was found in libqpdf in QPDF 6

    Published
    31 Oct 2026
    Packages

    qpdf

    Summary

    stack-consumption vulnerability was found in libqpdf in QPDF 6

    Published
    31 Oct 2026
    Packages

    qpdf

    Summary

    stack-consumption vulnerability was found in libqpdf in QPDF 6

    Published
    31 Oct 2026