Open Source Vulnerabilities

python-pyasn1

CVE-2026-119196 affecting package python-pyasn1 0.4.8-3

python-pyasn1

CVE-2026-119195 affecting package python-pyasn1 0.4.8-3

python-tensorboard

CVE-2026-119188 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-119186 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-119187 affecting package python-tensorboard 2.16.2-6

python-tensorboard

CVE-2026-119189 affecting package python-tensorboard 2.16.2-6

Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1

pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1

pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1

pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1, pyasn1

node-node-forge, node-node-forge

node-node-forge, node-node-forge

node-node-forge, node-node-forge

node-node-forge, node-node-forge

node-node-forge, node-node-forge

node-node-forge, node-node-forge

Nuxt dev server exposes private runtime config through the Nitro dev bundle

Nuxt dev server arbitrary file read through client error reports

io.opentelemetry:opentelemetry-api

mitmproxy, mitmproxy

mitmproxy, mitmproxy

mitmproxy, mitmproxy

sentry-fips

sentry-fips

faker

TuxCare security update for faker (1 CVE)

pyasn1: Quadratic-complexity denial of service in binary REAL decoding

pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding

org.springframework.boot:spring-boot, org.springframework.boot:spring-boot-actuator, org.springframework.boot:spring-boot-actuator-autoconfigure, org.springframework.boot:spring-boot-autoconfigure, org.springframework.boot:spring-boot-devtools, org.springframework.boot:spring-boot-starter-actuator, org.springframework.boot:spring-boot-starter-mail

TuxCare security update for org.springframework.boot (8 CVEs)

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

commercial-gitlab-workhorse-ee-fips-19.2

pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding

pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding

consul-k8s-1.7

consul-k8s-1.7

foundry-chisel

PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer

percona-grafana

percona-grafana

Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

linux-desktop-6.18-bootc

linux-desktop-6.18-bootc

wal-g-pg, wal-g-pg

wal-g-pg, wal-g-pg

Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Forge: Denial of service in TLS record processing via call stack exhaustion