Open Source Vulnerabilities
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling
Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data
Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
rancher-agent
containerd is an open-source container runtime
kubeflow-pipelines-frontend, kubeflow-pipelines-frontend
kubeflow-pipelines-frontend/ kubeflow-pipelines-frontend
kubeflow-pipelines-frontend, kubeflow-pipelines-frontend
kubeflow-pipelines-frontend/ kubeflow-pipelines-frontend
Collabora Online: Reflected HTML injection through host_session_id
Collabora Online: Reflected HTML injection through host_session_id
libass: Out-of-bounds read and write in wrap_lines_measure
joserfc
joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
joserfc
joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
joserfc
joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
joserfc
joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
github.com/charmbracelet/soft-serve
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
github.com/charmbracelet/soft-serve
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
libass: Out-of-bounds bit clears for negative Matroska ReadOrder values
libass: Out-of-bounds bit clears for negative Matroska ReadOrder values
SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)
SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)
ddtrace
CVE-2026-116588 in ddtrace - Patched by Root
ddtrace
CVE-2026-116588 in ddtrace - Patched by Root
ddtrace
CVE-2026-116589 in ddtrace - Patched by Root
ddtrace
CVE-2026-116589 in ddtrace - Patched by Root
fulcio-fips, fulcio-fips, fulcio-fips, fulcio-fips
sigstore framework is a common go library shared across sigstore services and clients
fulcio-fips/ fulcio-fips/ fulcio-fips/ fulcio-fips
sigstore framework is a common go library shared across sigstore services and clients
argo-workflows
vulnerability was found in juliangruber brace-expansion up to 1
argo-workflows
vulnerability was found in juliangruber brace-expansion up to 1
argo-workflows, argo-workflows, argo-workflows
`yaml` is a YAML parser and serialiser for JavaScript
argo-workflows/ argo-workflows/ argo-workflows
`yaml` is a YAML parser and serialiser for JavaScript
argo-workflows, argo-workflows, argo-workflows
Impact: When a user-configured proxy on webpack-dev-server has a broad context (e
argo-workflows/ argo-workflows/ argo-workflows
Impact: When a user-configured proxy on webpack-dev-server has a broad context (e
