Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CGA-54cx-h3x9-45w7
    No fix available
    Packages

    gitlab-rails-ce-18.8

    Summary

    Published
    31 Oct 2026
    CGA-82f8-2gjw-vjch
    No fix available
    Packages

    gitlab-rails-ce-18.8

    Summary

    Published
    31 Oct 2026
    CGA-382r-j3v4-gc69
    No fix available
    Packages

    gitlab-rails-ce-18.8

    Summary

    Published
    31 Oct 2026
    CGA-wffp-rv66-6qx8
    No fix available
    Packages

    gitlab-rails-ce-18.8

    Summary

    Published
    31 Oct 2026
    CGA-q7qg-27f9-77m8
    No fix available
    Packages

    gitlab-rails-ce-18.8

    Summary

    Published
    31 Oct 2026
    CGA-8j4m-p8qr-mvrw
    No fix available
    Packages

    gitlab-rails-ce-18.8

    Summary

    Published
    31 Oct 2026
    Packages

    xorg-server, xwayland

    Summary

    flaw was found in X

    Published
    31 Oct 2026
    CGA-2pmc-6j8q-wxvv
    No fix available
    Packages

    gitlab-rails-ce-18.8

    Summary

    Published
    31 Oct 2026
    Packages

    xorg-server, xwayland

    Summary

    use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers

    Published
    31 Oct 2026
    Packages

    xorg-server, xwayland

    Summary

    heap-based buffer over-read vulnerability was found in the X

    Published
    31 Oct 2026
    Packages

    xorg-server, xwayland

    Summary

    heap-based buffer over-read vulnerability was found in the X

    Published
    31 Oct 2026
    Packages

    xorg-server, xwayland

    Summary

    flaw was found in the X

    Published
    31 Oct 2026
    Packages

    libvirt

    Summary

    It was discovered that libvirtd before versions 4

    Published
    31 Oct 2026
    Packages

    mozjs115

    Summary

    Memory safety bugs present in Firefox 120, Firefox ESR 115

    Published
    31 Oct 2026
    Packages

    libvirt

    Summary

    It was discovered that libvirtd, versions 4

    Published
    31 Oct 2026
    Packages

    mozjs115

    Summary

    Memory safety bugs present in Firefox 122, Firefox ESR 115

    Published
    31 Oct 2026
    Packages

    libvirt

    Summary

    virConnectGetDomainCapabilities() libvirt API, versions 4

    Published
    31 Oct 2026
    Packages

    libvirt

    Summary

    virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4

    Published
    31 Oct 2026
    Packages

    mozjs115

    Summary

    attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process

    Published
    31 Oct 2026
    Packages

    libvirt

    Summary

    flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process

    Published
    31 Oct 2026
    Packages

    mozjs115

    Summary

    Unexpected marking work at the start of sweeping could have led to a use-after-free

    Published
    31 Oct 2026
    Packages

    libvirt

    Summary

    double free memory issue was found to occur in the libvirt API, in versions before 6

    Published
    31 Oct 2026
    Packages

    mozjs115

    Summary

    JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes

    Published
    31 Oct 2026
    Packages

    libvirt

    Summary

    flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels

    Published
    31 Oct 2026
    Packages

    libvirt

    Summary

    flaw was found in libvirt

    Published
    31 Oct 2026
    CGA-wgw3-6pr9-mwc8
    Fix available
    Packages

    vitess-23, vitess-23

    Summary

    Published
    31 Oct 2026
    CGA-v8fq-rwj7-9wgr
    Fix available
    Packages

    vitess-23, vitess-23

    Summary

    Published
    31 Oct 2026
    CGA-vq99-76jx-x7pr
    Fix available
    Packages

    litellm-fips

    Summary

    Published
    31 Oct 2026
    CGA-g49r-445g-r26g
    Fix available
    Packages

    litellm-fips

    Summary

    Published
    31 Oct 2026
    CGA-c98x-j9h9-rjm4
    Fix available
    Packages

    litellm-fips

    Summary

    Published
    31 Oct 2026
    CGA-79m8-5wc5-qr49
    Fix available
    Packages

    litellm-fips

    Summary

    Published
    31 Oct 2026
    Packages

    nodejs-23

    Summary

    vulnerability has been identified in Node

    Published
    31 Oct 2026
    Packages

    nodejs-23

    Summary

    security flaw in Node

    Published
    31 Oct 2026
    Packages

    nodejs-23

    Summary

    vulnerability has been identified in Node

    Published
    31 Oct 2026
    Packages

    ghostscript

    Summary

    mem_get_bits_rectangle function in base/gdevmem

    Published
    31 Oct 2026
    Packages

    ghostscript

    Summary

    mem_get_bits_rectangle function in Artifex Software, Inc

    Published
    31 Oct 2026
    CGA-mv5v-hhwf-v38j
    Fix available
    Packages

    kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver

    Summary

    Published
    31 Oct 2026
    CGA-j7hp-r9jv-w23w
    Fix available
    Packages

    kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver

    Summary

    Published
    31 Oct 2026
    CGA-hwg2-v78h-cj3m
    Fix available
    Packages

    kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver

    Summary

    Published
    31 Oct 2026
    CGA-8g8m-7m4f-fx5r
    Fix available
    Packages

    kubeflow-pipelines-apiserver, kubeflow-pipelines-apiserver

    Summary

    Published
    31 Oct 2026
    Packages

    ghostscript

    Summary

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via

    Published
    31 Oct 2026
    Packages

    gstreamer

    Summary

    GStreamer before 1

    Published
    31 Oct 2026
    Packages

    gstreamer

    Summary

    GStreamer before 1

    Published
    31 Oct 2026
    Packages

    ghostscript

    Summary

    In Artifex Ghostscript 9

    Published
    31 Oct 2026
    Packages

    gst-plugins-base

    Summary

    GStreamer before 1

    Published
    31 Oct 2026
    Packages

    ghostscript

    Summary

    In Artifex Ghostscript before 9

    Published
    31 Oct 2026
    Packages

    gst-plugins-base

    Summary

    GStreamer before 1

    Published
    31 Oct 2026
    Packages

    gst-plugins-ugly

    Summary

    gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux

    Published
    31 Oct 2026
    Packages

    ghostscript

    Summary

    In Artifex Ghostscript 9

    Published
    31 Oct 2026
    Packages

    ruby-rexml

    Summary

    REXML is an XML toolkit for Ruby

    Published
    31 Oct 2026