container statistics

11 container package(s) · generated 2026-11-02T04:45:47Z

674,402 combined downloads
11configured packages

ghcr.io/openvoxproject/openbolt

GitHub Container Registry

Downloads

2,143 downloads

ghcr.io/openvoxproject/openbolt:latest (2026-08-27)

Trivy

HIGH 4 MEDIUM 8 LOW 1 UNKNOWN 8
SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-85396rubyzip2.4.1 >= 3.4.0rubyzip: rubyzip: Arbitrary file write via path traversal — Ruby
HIGH CVE-2026-80212resolv0.2.3 ~> 0.3.2, >= 0.7.2resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — Ruby
HIGH GHSA-vxj5-fg65-x765net-ssh7.3.3 ~> 7.3, >= 7.3.4, >= 8.0.0.beta3net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295) — Ruby
HIGH GHSA-qpg5-fx6p-8cq3net-ssh7.3.3 ~> 7.3, >= 7.3.5, >= 8.0.0.rc2Using port forwarding silently enables server access to the local SSH agent — Ruby
MEDIUM GHSA-8gmh-2hhj-2hv9addressable2.9.0 >= 2.9.1Addressable URI normalization resolves some dotted path segments to the wrong path — Ruby
MEDIUM GHSA-9crm-g4mf-wc5jaddressable2.9.0 >= 2.9.1Addressable display_uri can show misleading hosts with invalid Punycode A-labels — Ruby
MEDIUM GHSA-9f42-57jx-vpp3addressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with multiple variables — Ruby
MEDIUM GHSA-j82w-28jv-3pmjaddressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with certain exploded expressions — Ruby
MEDIUM GHSA-qq38-m9mg-xjj5addressable2.9.0 >= 2.9.1Denial of service in Addressable URI path normalization — Ruby
MEDIUM GHSA-4w5q-wg7v-w6gpaddressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with several exploded variables — Ruby
MEDIUM CVE-2026-85091zlib1.3.2-r0 1.3.2-r1zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/openvoxproject/openbolt:latest (alpine 3.23.4)
MEDIUM CVE-2026-80213resolv0.2.3 ~> 0.3.2, >= 0.7.2resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — Ruby
LOW GHSA-539f-xcgw-2gjgaddressable2.9.0 >= 2.9.1Addressable display_uri can show misleading hosts containing bidi and invisible characters — Ruby
UNKNOWN CVE-2026-107891musl1.2.5-r23 1.2.5-r24Title Not Available — ghcr.io/openvoxproject/openbolt:latest (alpine 3.23.4)
UNKNOWN GHSA-cx24-f932-rr55rubyntlm0.6.5 >= 0.6.6NTLMv2 authentication bypass - Type3#password? ignores its password argument and verifies every message against the empty password — Ruby
UNKNOWN CVE-2026-107891musl-utils1.2.5-r23 1.2.5-r24Title Not Available — ghcr.io/openvoxproject/openbolt:latest (alpine 3.23.4)
UNKNOWN GHSA-rpq3-v334-f5pmnet-ssh7.3.3 ~> 7.3, >= 7.3.5, >= 8.0.0.rc2Parsing a specifically crafted ed25519 ssh key will lock net/ssh in DOS — Ruby
UNKNOWN GHSA-r75w-7fhp-84w8net-ssh7.3.3 ~> 7.3, >= 7.3.5, >= 8.0.0.rc2Pre-auth unbounded banner/identification buffering DoS — Ruby
UNKNOWN GHSA-pfqh-p9vh-wx4pnet-ssh7.3.3 ~> 7.3, >= 7.3.5, >= 8.0.0.rc2Pre-auth unbounded transport packet_size leads to memory exhaustion — Ruby
UNKNOWN GHSA-ggxh-cfwq-5xqcnet-ssh7.3.3 ~> 7.3, >= 7.3.5, >= 8.0.0.rc2Pre-auth unbounded KEX packet queue leads to memory exhaustion — Ruby
UNKNOWN GHSA-3x7f-q7wf-fp73net-ssh7.3.3 ~> 7.3, >= 7.3.5, >= 8.0.0.rc2Shell injection via unescaped substitution in ProxyCommand and ProxyJump command templates in net-ssh — Ruby

Grype

HIGH 2 UNKNOWN 2 NVD/CPE filtered 29
SeverityIDPackageInstalledFixedTitle / target
HIGH GHSA-47m2-wp7j-p9vcrubyzip2.4.1 3.4.0rubyzip path traversal vulnerability — /opt/openbolt/vendor/bundle/ruby/3.2.0/specifications/rubyzip-2.4.1.gemspec
HIGH CVE-2026-85091zlib1.3.2-r0 1.3.2-r1/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl1.2.5-r23 1.2.5-r24/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl-utils1.2.5-r23 1.2.5-r24/lib/apk/db/installed
Filtered NVD/CPE matches (29)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-84782libcrypto33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libssl33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libcrypto33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libssl33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libcrypto33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libssl33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-72897libcrypto33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-72897libssl33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libssl33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libcrypto33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libssl33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libcrypto33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2026-42772libssl33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libcrypto33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libssl33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libcrypto33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libssl33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libcrypto33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
LOW CVE-2026-77696libcrypto33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-77696libssl33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-54872libssl33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54872libcrypto33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54875libssl33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-54875libcrypto33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-35191libssl33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed
LOW CVE-2026-35191libcrypto33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed

ghcr.io/openvoxproject/openvoxagent

GitHub Container Registry

Downloads

22,424 downloads

ghcr.io/openvoxproject/openvoxagent:latest (2026-10-14)

Trivy

HIGH 4 MEDIUM 48 LOW 5
SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-97031stdlibv1.26.7 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — usr/bin/pebble
HIGH CVE-2026-78669stdlibv1.26.7 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/bin/pebble
HIGH CVE-2026-78667stdlibv1.26.7 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — usr/bin/pebble
HIGH CVE-2026-111943stdlibv1.26.7 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — usr/bin/pebble
MEDIUM CVE-2026-35357rust-coreutils0.10.0-1ubuntu2~26.04.1 The cp utility in uutils coreutils is vulnerable to an information dis ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35359rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35360rust-coreutils0.10.0-1ubuntu2~26.04.1 The touch utility in uutils coreutils is vulnerable to a Time-of-Check ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35363rust-coreutils0.10.0-1ubuntu2~26.04.1 A vulnerability in the rm utility of uutils coreutils allows the bypas ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35364rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils mv utility: Arbitrary File Overwrite via TOCTOU Race Condition — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35367rust-coreutils0.10.0-1ubuntu2~26.04.1 The nohup utility in uutils coreutils creates its default output file, ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35368rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils: Privilege escalation and arbitrary code execution in chroot utility — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35370rust-coreutils0.10.0-1ubuntu2~26.04.1 The id utility in uutils coreutils miscalculates the groups= section o ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35371rust-coreutils0.10.0-1ubuntu2~26.04.1 The id utility in uutils coreutils exhibits incorrect behavior in its ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35373rust-coreutils0.10.0-1ubuntu2~26.04.1 A logic error in the ln utility of uutils coreutils causes the program ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35374rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35377rust-coreutils0.10.0-1ubuntu2~26.04.1 A logic error in the env utility of uutils coreutils causes a failure ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-18477tar1.35+dfsg-4ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-18508tar1.35+dfsg-4ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-85091zlib1g1:1.3.dfsg+really1.3.1-1ubuntu3.1 1:1.3.dfsg+really1.3.1-1ubuntu3.2zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-56866stdlibv1.26.7 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — usr/bin/pebble
MEDIUM CVE-2026-78659stdlibv1.26.7 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/bin/pebble
MEDIUM CVE-2026-78660stdlibv1.26.7 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/bin/pebble
MEDIUM CVE-2026-78663stdlibv1.26.7 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/bin/pebble
MEDIUM CVE-2026-94439stdlibv1.26.7 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — usr/bin/pebble
MEDIUM CVE-2026-94440stdlibv1.26.7 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — usr/bin/pebble
MEDIUM CVE-2026-94448stdlibv1.26.7 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — usr/bin/pebble
MEDIUM CVE-2026-97030stdlibv1.26.7 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — usr/bin/pebble
MEDIUM CVE-2026-97032stdlibv1.26.7 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/bin/pebble
MEDIUM CVE-2026-102473dash0.5.12-12ubuntu3 dash: dash: Super-polynomial backtracking in pmatch when libc fnmatch is disabled — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-102474dash0.5.12-12ubuntu3 dash: dash: Heap out-of-bounds write in conv_escape via undersized Unicode escape reservation — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc-bin2.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc-bin2.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc-gconv-modules-extra2.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc-gconv-modules-extra2.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc62.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc62.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-103111libpcre2-8-010.46-1build1 pcre2: pcre2: Out-of-bounds write via crafted regular expression — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-86145libpcre2-8-010.46-1build1 pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89156libpcre2-8-010.46-1build1 PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89157libpcre2-8-010.46-1build1 pcre2: PCRE2: Out-of-bounds write via large pattern input — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89158libpcre2-8-010.46-1build1 PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89160libpcre2-8-010.46-1build1 pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89161libpcre2-8-010.46-1build1 pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-89162libpcre2-8-010.46-1build1 pcre2: PCRE2: Information disclosure via pcre2_serialize_encode — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35341rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils mkfifo: Information disclosure via unauthorized file permission modification — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35344rust-coreutils0.10.0-1ubuntu2~26.04.1 The dd utility in uutils coreutils suppresses errors during file trunc ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35345rust-coreutils0.10.0-1ubuntu2~26.04.1 A vulnerability in the tail utility of uutils coreutils allows for the ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35348rust-coreutils0.10.0-1ubuntu2~26.04.1 The sort utility in uutils coreutils is vulnerable to a process panic ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35350rust-coreutils0.10.0-1ubuntu2~26.04.1 The cp utility in uutils coreutils fails to properly handle setuid and ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35351rust-coreutils0.10.0-1ubuntu2~26.04.1 The mv utility in uutils coreutils fails to preserve file ownership du ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35352rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
MEDIUM CVE-2026-35354rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ... — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
LOW CVE-2026-40228libsystemd0259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
LOW CVE-2026-40228libudev1259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
LOW CVE-2024-56433login.defs1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
LOW CVE-2024-56433passwd1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise — ghcr.io/openvoxproject/openvoxagent:latest (ubuntu 26.04)
LOW CVE-2026-56857stdlibv1.26.7 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — usr/bin/pebble

Grype

CRITICAL 1 HIGH 8 MEDIUM 97 LOW 6
SeverityIDPackageInstalledFixedTitle / target
CRITICAL GO-2026-6612stdlibgo1.26.7 1.26.9The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/bin/pebble
HIGH GO-2026-6603stdlibgo1.26.7 1.26.9When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/bin/pebble
HIGH GO-2026-6611stdlibgo1.26.7 1.26.9A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/bin/pebble
HIGH GO-2026-6607stdlibgo1.26.7 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/bin/pebble
HIGH GO-2026-6608stdlibgo1.26.7 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/bin/pebble
HIGH GO-2026-6617stdlibgo1.26.7 1.26.9HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/bin/pebble
HIGH GO-2026-6605stdlibgo1.26.7 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/bin/pebble
HIGH GO-2026-6610stdlibgo1.26.7 1.26.9Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/bin/pebble
HIGH GO-2026-6613stdlibgo1.26.7 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/bin/pebble
MEDIUM CVE-2026-89162libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-54369libacl12.3.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-35352rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18508tar1.35+dfsg-4ubuntu0.4 /var/lib/dpkg/status
MEDIUM CVE-2026-93658rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35368rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35348rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35351rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-56391coreutils9.5-1ubuntu2+0.0.0~ubuntu25 9.7-3ubuntu2.1/var/lib/dpkg/status
MEDIUM CVE-2026-95818libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-78410util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-35341rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35363rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-118131gpgv2.4.8-4ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-78409util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-35374rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-18477tar1.35+dfsg-4ubuntu0.4 /var/lib/dpkg/status
MEDIUM CVE-2026-54370libacl12.3.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-35357rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35364rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35345rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35377rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-102473dash0.5.12-12ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-35360rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35370rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35354rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-102474dash0.5.12-12ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-35367rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35344rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35373rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35371rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35350rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-89161libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-35359rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2025-15649perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89158libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-48961perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-89160libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-103111libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89156libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89157libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-7017perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-86145libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-48962perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-42497perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM GO-2026-6809stdlibgo1.26.7 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/bin/pebble
MEDIUM CVE-2026-85091zlib1g1:1.3.dfsg+really1.3.1-1ubuntu3.1 1:1.3.dfsg+really1.3.1-1ubuntu3.2/var/lib/dpkg/status
MEDIUM CVE-2026-9538perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48959perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-82560perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-78409mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
LOW CVE-2024-56433login.defs1:4.17.4-2ubuntu3 /var/lib/dpkg/status
LOW CVE-2024-56433passwd1:4.17.4-2ubuntu3 /var/lib/dpkg/status
LOW CVE-2026-40228libudev1259.5-0ubuntu3.4 /var/lib/dpkg/status
LOW CVE-2026-40228libsystemd0259.5-0ubuntu3.4 /var/lib/dpkg/status
LOW CVE-2025-5278coreutils9.5-1ubuntu2+0.0.0~ubuntu25 9.7-3ubuntu2.1/var/lib/dpkg/status
LOW CVE-2026-105712gpgv2.4.8-4ubuntu3.1 /var/lib/dpkg/status

ghcr.io/openvoxproject/openvoxdb

GitHub Container Registry

Downloads

215,613 downloads

ghcr.io/openvoxproject/openvoxdb:latest (2026-10-21)

Trivy

HIGH 6 MEDIUM 59 LOW 9
SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-111497libbrotli11.2.0-3build1 1.2.0-3ubuntu0.1brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
HIGH CVE-2022-41404org.ini4j:ini4j0.5.4 org.ini4j: unspecified DoS — Java
HIGH CVE-2026-111943stdlibv1.27.1 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — usr/bin/pebble
HIGH CVE-2026-97031stdlibv1.27.1 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — usr/bin/pebble
HIGH CVE-2026-78669stdlibv1.27.1 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/bin/pebble
HIGH CVE-2026-78667stdlibv1.27.1 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — usr/bin/pebble
MEDIUM CVE-2026-35371rust-coreutils0.10.0-1ubuntu2~26.04.1 The id utility in uutils coreutils exhibits incorrect behavior in its ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35370rust-coreutils0.10.0-1ubuntu2~26.04.1 The id utility in uutils coreutils miscalculates the groups= section o ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35368rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils: Privilege escalation and arbitrary code execution in chroot utility — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35367rust-coreutils0.10.0-1ubuntu2~26.04.1 The nohup utility in uutils coreutils creates its default output file, ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35364rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils mv utility: Arbitrary File Overwrite via TOCTOU Race Condition — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35363rust-coreutils0.10.0-1ubuntu2~26.04.1 A vulnerability in the rm utility of uutils coreutils allows the bypas ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35360rust-coreutils0.10.0-1ubuntu2~26.04.1 The touch utility in uutils coreutils is vulnerable to a Time-of-Check ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35359rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35357rust-coreutils0.10.0-1ubuntu2~26.04.1 The cp utility in uutils coreutils is vulnerable to an information dis ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35354rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35352rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35351rust-coreutils0.10.0-1ubuntu2~26.04.1 The mv utility in uutils coreutils fails to preserve file ownership du ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35350rust-coreutils0.10.0-1ubuntu2~26.04.1 The cp utility in uutils coreutils fails to properly handle setuid and ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35348rust-coreutils0.10.0-1ubuntu2~26.04.1 The sort utility in uutils coreutils is vulnerable to a process panic ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35345rust-coreutils0.10.0-1ubuntu2~26.04.1 A vulnerability in the tail utility of uutils coreutils allows for the ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35344rust-coreutils0.10.0-1ubuntu2~26.04.1 The dd utility in uutils coreutils suppresses errors during file trunc ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35373rust-coreutils0.10.0-1ubuntu2~26.04.1 A logic error in the ln utility of uutils coreutils causes the program ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35374rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35377rust-coreutils0.10.0-1ubuntu2~26.04.1 A logic error in the env utility of uutils coreutils causes a failure ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-18477tar1.35+dfsg-4ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-18508tar1.35+dfsg-4ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-85091zlib1g1:1.3.dfsg+really1.3.1-1ubuntu3.1 1:1.3.dfsg+really1.3.1-1ubuntu3.2zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-56866stdlibv1.27.1 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — usr/bin/pebble
MEDIUM CVE-2026-78659stdlibv1.27.1 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/bin/pebble
MEDIUM CVE-2026-78660stdlibv1.27.1 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/bin/pebble
MEDIUM CVE-2026-78663stdlibv1.27.1 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/bin/pebble
MEDIUM CVE-2026-94439stdlibv1.27.1 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — usr/bin/pebble
MEDIUM CVE-2026-94440stdlibv1.27.1 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — usr/bin/pebble
MEDIUM CVE-2026-94448stdlibv1.27.1 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — usr/bin/pebble
MEDIUM CVE-2026-97030stdlibv1.27.1 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — usr/bin/pebble
MEDIUM CVE-2026-97032stdlibv1.27.1 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/bin/pebble
MEDIUM CVE-2026-89156libpcre2-8-010.46-1build1 PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-86145libpcre2-8-010.46-1build1 pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-103111libpcre2-8-010.46-1build1 pcre2: pcre2: Out-of-bounds write via crafted regular expression — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-13757libp11-kit00.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-95210libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: certificates with invalid extensions incorrectly accepted — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-95209libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: legitimate CA certificates incorrectly rejected causing denial of service — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-95184libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: legitimate user certificates incorrectly rejected causing denial of service — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-88648libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: Cross-domain certificate restriction bypass via incomplete X.509 validation — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-88647libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: Information disclosure via hostname verification bypass — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-67693libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: Information disclosure via contradictory Key Usage and Extended Key Usage extensions — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc62.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc62.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc-gconv-modules-extra2.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc-gconv-modules-extra2.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc-bin2.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc-bin2.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-102474dash0.5.12-12ubuntu3 dash: dash: Heap out-of-bounds write in conv_escape via undersized Unicode escape reservation — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-102473dash0.5.12-12ubuntu3 dash: dash: Super-polynomial backtracking in pmatch when libc fnmatch is disabled — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-35341rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils mkfifo: Information disclosure via unauthorized file permission modification — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2025-10990ruby3.33.3.8-2ubuntu3.1 rexml: REXML: Denial of Service via inefficient regex parsing — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-107161libsasl2-modules-db2.1.28+dfsg1-9ubuntu3 cyrus-sasl: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-107161libsasl2-22.1.28+dfsg1-9ubuntu3 cyrus-sasl: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2025-10990libruby3.33.3.8-2ubuntu3.1 rexml: REXML: Denial of Service via inefficient regex parsing — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-89162libpcre2-8-010.46-1build1 pcre2: PCRE2: Information disclosure via pcre2_serialize_encode — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-89161libpcre2-8-010.46-1build1 pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-89160libpcre2-8-010.46-1build1 pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-89158libpcre2-8-010.46-1build1 PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
MEDIUM CVE-2026-89157libpcre2-8-010.46-1build1 pcre2: PCRE2: Out-of-bounds write via large pattern input — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2025-58767libruby3.33.3.8-2ubuntu3.1 rexml: REXML denial of service — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2025-61594libruby3.33.3.8-2ubuntu3.1 uri: URI module: Credential exposure via URI + operator — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2026-40228libsystemd0259.9-0ubuntu0.1 systemd: systemd-journald: Unintended output to user terminals via logger command — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2026-40228libudev1259.9-0ubuntu0.1 systemd: systemd-journald: Unintended output to user terminals via logger command — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2024-56433login.defs1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2024-56433passwd1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2025-58767ruby3.33.3.8-2ubuntu3.1 rexml: REXML denial of service — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2025-61594ruby3.33.3.8-2ubuntu3.1 uri: URI module: Credential exposure via URI + operator — ghcr.io/openvoxproject/openvoxdb:latest (ubuntu 26.04)
LOW CVE-2026-56857stdlibv1.27.1 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — usr/bin/pebble

Grype

CRITICAL 1 HIGH 11 MEDIUM 224 LOW 16
SeverityIDPackageInstalledFixedTitle / target
CRITICAL GO-2026-6612stdlibgo1.27.1 1.27.2The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/bin/pebble
HIGH GO-2026-6613stdlibgo1.27.1 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/bin/pebble
HIGH GO-2026-6610stdlibgo1.27.1 1.27.2Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/bin/pebble
HIGH GO-2026-6605stdlibgo1.27.1 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/bin/pebble
HIGH GO-2026-6617stdlibgo1.27.1 1.27.2HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/bin/pebble
HIGH GO-2026-6608stdlibgo1.27.1 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/bin/pebble
HIGH GO-2026-6607stdlibgo1.27.1 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/bin/pebble
HIGH GO-2026-6611stdlibgo1.27.1 1.27.2A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/bin/pebble
HIGH GO-2026-6603stdlibgo1.27.1 1.27.2When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/bin/pebble
HIGH CVE-2026-111497libbrotli11.2.0-3build1 1.2.0-3ubuntu0.1/var/lib/dpkg/status
HIGH GHSA-jr6h-r7vg-f9mcini4j0.5.4 org.ini4j allows attackers to cause a Denial of Service (DoS) — /opt/puppetlabs/server/apps/puppetdb/puppetdb.jar
HIGH GHSA-q339-8rmv-2mhverb4.0.3 4.0.3.1ERB has an @_init deserialization guard bypass via def_module / def_method / def_class — /usr/lib/ruby/gems/3.3.0/specifications/default/erb-4.0.3.gemspec
MEDIUM CVE-2026-78409libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-88648libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM GHSA-46q3-7gv7-qmggnet-imap0.4.19 0.5.15Net::IMAP: Command Injection via ID command argument — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
MEDIUM CVE-2026-78409login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-91461openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-118131gpgv2.4.8-4ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2025-15649perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-95184libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35341rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47242libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47242ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-112060librtmp12.4+20151223.gitfa8646d.1-3 /var/lib/dpkg/status
MEDIUM CVE-2026-91374openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91487openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35363rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91395openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83376openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87367openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-105111openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89158libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-95209libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91415openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87292openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91381openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91398openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91463openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83381openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-112061librtmp12.4+20151223.gitfa8646d.1-3 /var/lib/dpkg/status
MEDIUM CVE-2026-76642bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-83378openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87293openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91335openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91334openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-88647libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35359rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-89161libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-35350rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35371rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91379openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35373rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35344rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35367rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-102474dash0.5.12-12ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-35354rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35370rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91484openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18938libp11-kit00.26.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-35360rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-102473dash0.5.12-12ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-35377rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91380openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35345rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91397openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91375openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35364rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35357rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-54370libacl12.3.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-18477tar1.35+dfsg-4ubuntu0.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35374rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-78410bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-95210libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-89162libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-13757libp11-kit00.26.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-54369libacl12.3.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-67693libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35352rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18508tar1.35+dfsg-4ubuntu0.4 /var/lib/dpkg/status
MEDIUM CVE-2026-93658rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35368rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35348rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35351rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-56391coreutils9.5-1ubuntu2+0.0.0~ubuntu25 9.7-3ubuntu2.1/var/lib/dpkg/status
MEDIUM CVE-2026-95818libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2025-15649libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2025-15649perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2025-15649perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-41316libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-46727libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-46727ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47057openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-85091zlib1g1:1.3.dfsg+really1.3.1-1ubuntu3.1 1:1.3.dfsg+really1.3.1-1ubuntu3.2/var/lib/dpkg/status
MEDIUM GO-2026-6809stdlibgo1.27.1 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/bin/pebble
MEDIUM CVE-2026-42497libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-42497perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-42497perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-42497perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-83357openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-63435libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-63435ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91373openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-48962libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48962perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48962perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48962perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-86145libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-107778libgssapi-krb5-21.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107778libk5crypto31.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107778libkrb5-31.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107778libkrb5support01.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-83408openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91394openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-54696libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-54696ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91418openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83400openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-47058openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-41316ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM GHSA-8p34-64r3-mwg8net-imap0.4.19 0.5.15Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
MEDIUM CVE-2026-47240libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47240ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM GHSA-75xq-5h9v-w6pxnet-imap0.4.19 0.4.24net-imap vulnerable to command Injection via unvalidated Symbol inputs — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
MEDIUM CVE-2026-42258libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-42258ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM GHSA-g857-hhfv-j68wzlib3.1.1 3.1.2Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption — /usr/lib/ruby/gems/3.3.0/specifications/default/zlib-3.1.1.gemspec
MEDIUM CVE-2026-82560libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-82560perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-82560perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-82560perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-27820libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-27820ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-48959libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48959perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48959perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48959perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2025-10990libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2025-10990ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM GHSA-j3g3-5qv5-52mjnet-imap0.4.19 0.4.20net-imap rubygem vulnerable to possible DoS by memory exhaustion — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
MEDIUM CVE-2026-107708libgssapi-krb5-21.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107708libk5crypto31.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107708libkrb5-31.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107708libkrb5support01.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-9538libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-9538perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-9538perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-9538perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48961perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-87291openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91410openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91417openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-48961perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48961libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-89156libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-91332openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91451openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91452openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91453openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91464openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83374openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-101516openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-94114openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-70907openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83368openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87294openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91462openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91333openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-60589openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-103111libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-89160libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-91411openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-47241libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47241ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91382openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-107161libsasl2-22.1.28+dfsg1-9ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-107161libsasl2-modules-db2.1.28+dfsg1-9ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-75466libjpeg-turbo82.1.5-4ubuntu4 /var/lib/dpkg/status
MEDIUM CVE-2026-7017libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-7017perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-7017perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-7017perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-89157libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-91396openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91400openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83395openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83387openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87290openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83380openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-48961perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-61308openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87255openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
LOW CVE-2024-56433passwd1:4.17.4-2ubuntu3 /var/lib/dpkg/status
LOW CVE-2026-105712gpgv2.4.8-4ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2018-10126libjpeg-turbo82.1.5-4ubuntu4 /var/lib/dpkg/status
LOW CVE-2024-56433login.defs1:4.17.4-2ubuntu3 /var/lib/dpkg/status
LOW CVE-2026-40228libudev1259.9-0ubuntu0.1 /var/lib/dpkg/status
LOW CVE-2026-40228libsystemd0259.9-0ubuntu0.1 /var/lib/dpkg/status
LOW GHSA-c2f4-jgmc-q2r5rexml3.3.9 3.4.2REXML has DoS condition when parsing malformed XML file — /usr/lib/ruby/gems/3.3.0/specifications/rexml-3.3.9.gemspec
LOW CVE-2025-43857ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-43857libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW GHSA-c4fp-cxrr-mj66net-imap0.4.19 0.5.15Net::IMAP: Denial of Service via incomplete raw argument validation — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
LOW GHSA-j4pr-3wm6-xx2ruri0.13.2 0.13.3URI Credential Leakage Bypass over CVE-2025-27221 — /usr/lib/ruby/gems/3.3.0/specifications/default/uri-0.13.2.gemspec
LOW CVE-2025-58767ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-58767libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-61594ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-61594libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-5278coreutils9.5-1ubuntu2+0.0.0~ubuntu25 9.7-3ubuntu2.1/var/lib/dpkg/status

ghcr.io/openvoxproject/openvoxdb:latest-alpine (2026-10-21)

Trivy

CRITICAL 12 HIGH 6 MEDIUM 25 LOW 54
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-114820openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-46470openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0An issue was discovered in GStreamer gst-plugins-good before 1.28.2. W ... — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-91403openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-110264ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-89078ruby3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-93577ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-97229ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-110264ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-89078ruby-libs3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-93577ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-97229ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-80212ruby3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-6732openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0libxml2: libxml2: Denial of Service via crafted XSD-validated document — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-80212ruby-libs3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
HIGH CVE-2022-41404org.ini4j:ini4j0.5.4 org.ini4j: unspecified DoS — Java
HIGH CVE-2026-92392libcurl8.22.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-92392curl8.22.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83374openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83378openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Improve C2 loop transformations (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83381openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance SASL Authentication (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83387openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance WebRowSets (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83400openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance XML Processing (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-87290openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance XPath Expressions (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-87291openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance HTTP Server (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91332openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance HTTP Client (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91373openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance TLS handshakes (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91374openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance jstatd (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91375openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance jmod handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91379openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance JShell (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91417openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance CORBA (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91418openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance GIF loading (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91451openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91452openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance HTTP server (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91453openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Improve HTTP headers (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91462openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance krb5 tokens (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91463openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance krb5 client (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91464openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Kerberos validation (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91487openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance C2 comparisons (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-80213ruby3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-92388curl8.22.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-80213ruby-libs3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-92388libcurl8.22.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-94266curl8.22.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-94265curl8.22.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92391curl8.22.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92390curl8.22.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-83376openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87255openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Vector Processing (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87292openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Network Clients (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87367openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Template Handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91335openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Image Handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91381openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Font Rendering (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91397openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91400openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance MIDI file handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91402openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjfx: openjfx: information disclosure via untrusted code execution — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91461openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance TLS Extensions (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86415curl8.22.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86414curl8.22.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86413curl8.22.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86412curl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86411curl8.22.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92389curl8.22.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86410curl8.22.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86409curl8.22.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-107929curl8.22.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-107928curl8.22.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92387curl8.22.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92386curl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87866curl8.22.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92386libcurl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92387libcurl8.22.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92389libcurl8.22.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92390libcurl8.22.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92391libcurl8.22.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-94265libcurl8.22.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-94266libcurl8.22.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87864curl8.22.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87863curl8.22.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87862curl8.22.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87861curl8.22.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87866libcurl8.22.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87865libcurl8.22.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87864libcurl8.22.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87863libcurl8.22.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87862libcurl8.22.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87861libcurl8.22.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86415libcurl8.22.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86414libcurl8.22.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86413libcurl8.22.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86412libcurl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86411libcurl8.22.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86410libcurl8.22.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86409libcurl8.22.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-107929libcurl8.22.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-107928libcurl8.22.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87865curl8.22.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/openvoxproject/openvoxdb:latest-alpine (alpine 3.24.2)

Grype

CRITICAL 26 HIGH 39 MEDIUM 23 LOW 11 NVD/CPE filtered 18
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-86413curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-91403openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
CRITICAL CVE-2026-114820openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
CRITICAL CVE-2026-46470openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-107929curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-q339-8rmv-2mhverb4.0.4 4.0.4.1ERB has an @_init deserialization guard bypass via def_module / def_method / def_class — /usr/lib/ruby/gems/3.4.0/specifications/default/erb-4.0.4.gemspec
HIGH CVE-2026-92392libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-6732openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
HIGH CVE-2026-92392curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-jr6h-r7vg-f9mcini4j0.5.4 org.ini4j allows attackers to cause a Denial of Service (DoS) — /opt/puppetlabs/server/apps/puppetdb/puppetdb.jar
HIGH CVE-2026-86415curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86415libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-86412curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-83400openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91462openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91464openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-91463openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-83381openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-83378openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91374openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91487openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91379openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91375openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-83387openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91418openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91373openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-87290openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-87291openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91417openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-83374openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91332openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91451openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91452openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91453openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91397openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91335openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91461openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91402openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91381openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91400openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-87292openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-87367openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-83376openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-87255openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW GHSA-x2f5-4prf-w687json2.9.1 2.19.9Ruby json: JSON generator heap buffer overflow when streaming to an IO — /usr/lib/ruby/gems/3.4.0/specifications/default/json-2.9.1.gemspec
Filtered NVD/CPE matches (18)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
MEDIUM CVE-2026-5704tar1.35-r5 A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. — /lib/apk/db/installed
MEDIUM CVE-2016-2781coreutils9.11-r0 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. — /lib/apk/db/installed
MEDIUM CVE-2016-2781coreutils-env9.11-r0 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. — /lib/apk/db/installed
MEDIUM CVE-2016-2781coreutils-fmt9.11-r0 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. — /lib/apk/db/installed
MEDIUM CVE-2016-2781coreutils-sha512sum9.11-r0 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2026-56392coreutils9.11-r0 GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d — /lib/apk/db/installed
MEDIUM CVE-2026-56392coreutils-env9.11-r0 GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d — /lib/apk/db/installed
MEDIUM CVE-2026-56392coreutils-fmt9.11-r0 GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d — /lib/apk/db/installed
MEDIUM CVE-2026-56392coreutils-sha512sum9.11-r0 GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d — /lib/apk/db/installed
MEDIUM CVE-2026-56391coreutils9.11-r0 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. — /lib/apk/db/installed
MEDIUM CVE-2026-56391coreutils-env9.11-r0 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. — /lib/apk/db/installed
MEDIUM CVE-2026-56391coreutils-fmt9.11-r0 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. — /lib/apk/db/installed
MEDIUM CVE-2026-56391coreutils-sha512sum9.11-r0 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. — /lib/apk/db/installed
MEDIUM CVE-2026-18508tar1.35-r5 A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction. — /lib/apk/db/installed
MEDIUM CVE-2026-18477tar1.35-r5 A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue. — /lib/apk/db/installed

ghcr.io/openvoxproject/openvoxserver

GitHub Container Registry

Downloads

196,948 downloads

ghcr.io/openvoxproject/openvoxserver:latest (2026-10-16)

Trivy

CRITICAL 12 HIGH 289 MEDIUM 2669 LOW 596
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-98805linux-libc-dev7.0.0-38.38 kernel: tipc: prevent GCM nonce reuse on peer key changes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-98725linux-libc-dev7.0.0-38.38 kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-98621linux-libc-dev7.0.0-38.38 kernel: net: gue: reject invalid REMCSUM offsets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-89530linux-libc-dev7.0.0-38.38 kernel: svcrdma: Reject inline replies that overflow the pull-up buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-89652linux-libc-dev7.0.0-38.38 kernel: ceph: bound copied dentry name length in NFS export get_name — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-89659linux-libc-dev7.0.0-38.38 kernel: NFSD: Prevent client use-after-free during delegation revoke — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-89708linux-libc-dev7.0.0-38.38 kernel: nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-90037linux-libc-dev7.0.0-38.38 kernel: NFSD: Prevent client use-after-free during close_lru reaping — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-90162linux-libc-dev7.0.0-38.38 kernel: ksmbd: defer publishing granted locks to prevent UAF/double-free race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-93221linux-libc-dev7.0.0-38.38 kernel: nfsd: convert nfsd_net boolean flags to unsigned long flags word — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-98365linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
CRITICAL CVE-2026-98571linux-libc-dev7.0.0-38.38 kernel: net: stmmac: clear stale buf->page after recycling on skb build failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93828linux-libc-dev7.0.0-38.38 kernel: exfat: fix handling of damaged volume in exfat_create_upcase_table() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97415linux-libc-dev7.0.0-38.38 kernel: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97429linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: fix UAF race in destroy_queue_cpsch — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97442linux-libc-dev7.0.0-38.38 kernel: wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98084linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93824linux-libc-dev7.0.0-38.38 kernel: tls: reject the combination of TLS and sockmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93817linux-libc-dev7.0.0-38.38 kernel: perf: Fix addr_filter_ranges lifetime — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93806linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: validate assoc response length before status and IE access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93796linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: pcie: null RX pointers after free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93792linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: w ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98056linux-libc-dev7.0.0-38.38 kernel: nvme: remove stale namespaces by NSID range during scan — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98041linux-libc-dev7.0.0-38.38 kernel: bpf: Don't predict JMP32 pointer vs zero comparisons — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98034linux-libc-dev7.0.0-38.38 kernel: bpf: Mark NULL kptr stores precise — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98033linux-libc-dev7.0.0-38.38 kernel: bpf: Preserve inner map identity in callback frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98019linux-libc-dev7.0.0-38.38 kernel: bpf: mark a NULL call argument precise — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98017linux-libc-dev7.0.0-38.38 kernel: net/sched: defer qdisc freeing after failed creation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97988linux-libc-dev7.0.0-38.38 kernel: vhost: invalidate vring access on IOTLB transitions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97960linux-libc-dev7.0.0-38.38 kernel: perf/x86/intel: Prevent drain_pebs() reentry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97906linux-libc-dev7.0.0-38.38 kernel: bootconfig: Fix integer overflow in initrd size check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97615linux-libc-dev7.0.0-38.38 kernel: net: bridge: use option bits for CFM/MRP frame handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97603linux-libc-dev7.0.0-38.38 kernel: idpf: disable DIM work before freeing q_vectors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97581linux-libc-dev7.0.0-38.38 kernel: media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97565linux-libc-dev7.0.0-38.38 kernel: smb: client: reject short READ responses in CIFSSMBRead() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97564linux-libc-dev7.0.0-38.38 kernel: smb: client: reject userspace cifs.idmap descriptions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97562linux-libc-dev7.0.0-38.38 kernel: smb: client: pin DFS superblock in iterator callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97557linux-libc-dev7.0.0-38.38 kernel: smb: client: avoid leaking refcount in cifs_queue_oplock_break() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97555linux-libc-dev7.0.0-38.38 kernel: smb: client: fix heap overflow in DACL owner/group rewrite — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97530linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97513linux-libc-dev7.0.0-38.38 kernel: media: chips-media: wave5: Release m2m_ctx after Instance Removed from List — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97497linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-97493linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: Bound GPIO I2C table entry count from VBIOS — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90398linux-libc-dev7.0.0-38.38 kernel: wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90392linux-libc-dev7.0.0-38.38 kernel: bpf: Fix potential UAF when reading bpf link info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90380linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90375linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: fix non-AQL packet accounting for MLO stations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90343linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: stop PMSR before P2P and NAN teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90324linux-libc-dev7.0.0-38.38 kernel: ublk: check import_ubuf() return value — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90321linux-libc-dev7.0.0-38.38 kernel: ocfs2: validate inline xattrs during inode block validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90320linux-libc-dev7.0.0-38.38 kernel: ocfs2: validate external xattr entries when reading metadata — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90317linux-libc-dev7.0.0-38.38 kernel: bpf: Invalidate RCU pointers after final spin unlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90313linux-libc-dev7.0.0-38.38 kernel: bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90256linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90237linux-libc-dev7.0.0-38.38 kernel: netfilter: nft_ct: move custom expectation support to helper — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90227linux-libc-dev7.0.0-38.38 kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90217linux-libc-dev7.0.0-38.38 kernel: bpf: Compare iterator types during state pruning — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90205linux-libc-dev7.0.0-38.38 kernel: ocfs2: validate orphan slot during inode read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90204linux-libc-dev7.0.0-38.38 kernel: ocfs2: validate DIO orphan slot during inode read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90200linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: fix integer overflow in MFT cluster validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90199linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: reject out-of-range evcn in mi_enum_attr() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90169linux-libc-dev7.0.0-38.38 kernel: ksmbd: free preauth sessions on connection teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90167linux-libc-dev7.0.0-38.38 kernel: ksmbd: serialize oplock close with pending break ownership — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74465linux-libc-dev7.0.0-38.38 kernel: net: openvswitch: fix potential UAF on meter attach failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93790linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93787linux-libc-dev7.0.0-38.38 kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93282linux-libc-dev7.0.0-38.38 kernel: ksmbd: fix maximum allowed access checks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93210linux-libc-dev7.0.0-38.38 kernel: smb: client: harden DFS cache against invalid target hints — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93199linux-libc-dev7.0.0-38.38 kernel: i3c: master: Do not treat master device as a duplicate target — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93196linux-libc-dev7.0.0-38.38 kernel: nvdimm: virtio_pmem: refcount requests for token lifetime — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93192linux-libc-dev7.0.0-38.38 kernel: drm/v3d: Clear queue->active_job when v3d_fence_create() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93176linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: Fix dangling pointer in plane reset function — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93175linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: Fix dangling pointer in CRTC reset function — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93154linux-libc-dev7.0.0-38.38 kernel: RDMA/irdma: Add refcounting to user ring MRs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93148linux-libc-dev7.0.0-38.38 kernel: bpf: Reject MEM_ALLOC BTF accesses past object bounds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93144linux-libc-dev7.0.0-38.38 kernel: bpf: Reject writes through untrusted BTF pointers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93125linux-libc-dev7.0.0-38.38 kernel: bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-93105linux-libc-dev7.0.0-38.38 kernel: esp: do not unref managed frag pages in esp_ssg_unref() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-92512linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Fix use after free in ib_query_qp() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-92511linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Fix potential use after free in ib_destroy_cq_user() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-92510linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Fix potential use after free in ib_destroy_srq_user() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-92509linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Fix potential use after free in counter_release() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-92507linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-92499linux-libc-dev7.0.0-38.38 kernel: ext4: validate readdir offset before accessing dirent — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90417linux-libc-dev7.0.0-38.38 kernel: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98706linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: drain PS delivery work during station teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98599linux-libc-dev7.0.0-38.38 kernel: bpf: Reject non-negative offsets in stack_slot_obj_get_spi() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98591linux-libc-dev7.0.0-38.38 kernel: bpf: Fix bounds check for skb-backed dynptrs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98590linux-libc-dev7.0.0-38.38 kernel: bpf: Fix bpf_sock context code generation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98589linux-libc-dev7.0.0-38.38 kernel: bpf: Reject pkt arguments in mutating subprogs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98588linux-libc-dev7.0.0-38.38 kernel: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98586linux-libc-dev7.0.0-38.38 kernel: sctp: hold asoc or transport before mod_timer() in timer handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98580linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: Fix race condition in accept_queue lifecycle — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98573linux-libc-dev7.0.0-38.38 kernel: net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98572linux-libc-dev7.0.0-38.38 kernel: bpf: Fix immediate JMP JEQ/JNE on MIPS32 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98570linux-libc-dev7.0.0-38.38 kernel: net: ipv6: keep room for the mac header in dst_dev_overhead() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98568linux-libc-dev7.0.0-38.38 kernel: vxlan: use one headroom snapshot for neighbour replies — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98567linux-libc-dev7.0.0-38.38 kernel: net: xps: reject an out of range traffic class — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98561linux-libc-dev7.0.0-38.38 kernel: nfp: hold IPsec RX state under the XArray lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98548linux-libc-dev7.0.0-38.38 kernel: sctp: discard the rest of the packet on a stale-cookie error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98532linux-libc-dev7.0.0-38.38 kernel: ipv6: do not let ipv6_find_hdr() return an offset past the packet end — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98526linux-libc-dev7.0.0-38.38 kernel: llc: reserve device headroom for allocated frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98524linux-libc-dev7.0.0-38.38 kernel: rds: ib: Clear the sg list when mapping an MR fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98515linux-libc-dev7.0.0-38.38 kernel: drm/nouveau: fix double-free in nvif_vmm_dtor — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98704linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: keep fallback association elements alive — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98702linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via invalid channel switch frame in mac80211 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98701linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: release mesh path quota on failed additions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98699linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: fix mesh fast xmit path deletion UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98689linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98652linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Add missing srcu in kvm_s390_set_irq_state() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98651linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98649linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Fix race in _destroy_pages_crste() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98642linux-libc-dev7.0.0-38.38 kernel: bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98641linux-libc-dev7.0.0-38.38 kernel: bpf, arm64: set up the frame pointer for the exception callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98635linux-libc-dev7.0.0-38.38 kernel: scsi: block: Fix zones_cond out-of-bounds write on zone report — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98634linux-libc-dev7.0.0-38.38 kernel: scsi: sd_zbc: Reject disks with too many zones — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98632linux-libc-dev7.0.0-38.38 kernel: Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98626linux-libc-dev7.0.0-38.38 kernel: bpf: Restrict CO-RE poisoning to relocatable instructions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98625linux-libc-dev7.0.0-38.38 kernel: netfilter: flowtable: publish HW_DEAD after worker is done — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98624linux-libc-dev7.0.0-38.38 kernel: netfilter: nfnetlink_queue: hold nfnl mutex in event notifier — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98606linux-libc-dev7.0.0-38.38 kernel: drm/virtio: release the GEM object on virtio_gpu_vram_create() errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98601linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel_pcie: validate device-supplied DMA indices — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98376linux-libc-dev7.0.0-38.38 kernel: bpf: Use array_map_meta_equal for percpu array inner map replacement — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98364linux-libc-dev7.0.0-38.38 kernel: xfrm: hold net_device reference under RCU in bundle creation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98359linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98341linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: don't free driver-owned scan requests — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98333linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: reset the LED state when ifup fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98332linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: only operate on TDLS peers in the TDLS code — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98283linux-libc-dev7.0.0-38.38 kernel: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98260linux-libc-dev7.0.0-38.38 kernel: exec: Cleanup POSIX timers right after de_thread() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98229linux-libc-dev7.0.0-38.38 kernel: xfrm: save input state data before secpath resets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98222linux-libc-dev7.0.0-38.38 kernel: KEYS: encrypted: fix integer overflow of datablob_len — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98171linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98167linux-libc-dev7.0.0-38.38 kernel: smb: client: fix server->total_read for compound encrypted PDUs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98164linux-libc-dev7.0.0-38.38 kernel: KVM: x86/mmu: Check write tracking in all address spaces — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98134linux-libc-dev7.0.0-38.38 kernel: bpf: check_cond_jmp_op(): properly infer if register is null — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98115linux-libc-dev7.0.0-38.38 kernel: ksmbd: safely drain sessions during logoff — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98107linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98104linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98085linux-libc-dev7.0.0-38.38 kernel: bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98503linux-libc-dev7.0.0-38.38 kernel: packet: use ubuf_info completion for TX_RING packets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98491linux-libc-dev7.0.0-38.38 kernel: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98490linux-libc-dev7.0.0-38.38 kernel: net: openvswitch: conntrack: fix helper UAF due to extensions realloc — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98487linux-libc-dev7.0.0-38.38 kernel: net: bridge: mdb: restart port group walk after deletion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98479linux-libc-dev7.0.0-38.38 kernel: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98464linux-libc-dev7.0.0-38.38 kernel: RISC-V: KVM: Synchronize hrtimer callback during teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98462linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_conn: fix CIS hold ownership on reuse — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98459linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: balance the parent hold in hci_bind_bis() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98457linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: validate frame length before control and FCS access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98456linux-libc-dev7.0.0-38.38 kernel: Bluetooth: mgmt: fix race in read_unconf_index_list() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98454linux-libc-dev7.0.0-38.38 kernel: smb: client: fix create context out-of-bounds reads — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98446linux-libc-dev7.0.0-38.38 kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_init — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98442linux-libc-dev7.0.0-38.38 kernel: net/sched: act_ct: fix helper UAF due to extensions realloc — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98441linux-libc-dev7.0.0-38.38 kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98440linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98439linux-libc-dev7.0.0-38.38 kernel: smb/server: cancel async requests when closing connection — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98432linux-libc-dev7.0.0-38.38 kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98420linux-libc-dev7.0.0-38.38 kernel: ksmbd: follow SMB2 session expiration semantics — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74454linux-libc-dev7.0.0-38.38 kernel: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74446linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: hold event_mutex while checkpointing CRIU events — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-72497linux-libc-dev7.0.0-38.38 kernel: RDMA/bnxt_re: Add a max slot check for SQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-72198linux-libc-dev7.0.0-38.38 kernel: ntfs: reject non-resident records for resident-only attributes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-68451linux-libc-dev7.0.0-38.38 kernel: s390/zcrypt: Validate length for CCA ECC private key requests — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-68103linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: reject mapping a reserved doorbell to a new queue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-100074linux-libc-dev7.0.0-38.38 kernel: bpf: Mark bpf_refcount field as unique — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2025-40190linux-libc-dev7.0.0-38.38 kernel: ext4: guard against EA inode refcount underflow in xattr update — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2022-50240linux-libc-dev7.0.0-38.38 kernel: binder: fix UAF of alloc->vma in race with munmap() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-78669stdlibv1.26.7 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/bin/pebble
HIGH CVE-2026-97031stdlibv1.26.7 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — usr/bin/pebble
HIGH CVE-2026-98707linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: shut down RX BA session timer on teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98708linux-libc-dev7.0.0-38.38 kernel: kernel: mac80211: Denial of Service via use-after-free in channel context replacement — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98709linux-libc-dev7.0.0-38.38 kernel: kernel: mac80211: Denial of Service via use-after-free during channel switching — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98712linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98719linux-libc-dev7.0.0-38.38 kernel: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98730linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74723linux-libc-dev7.0.0-38.38 kernel: btrfs: lzo: reject inline extents without valid headers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74715linux-libc-dev7.0.0-38.38 kernel: bpf: Fix netns reference imbalance in conntrack kfuncs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74714linux-libc-dev7.0.0-38.38 kernel: bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74700linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74684linux-libc-dev7.0.0-38.38 kernel: net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74677linux-libc-dev7.0.0-38.38 kernel: net: usb: ipheth: fix carrier_work UAF on disconnect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74578linux-libc-dev7.0.0-38.38 kernel: crypto: algif_skcipher - force synchronous processing on trees without ctx->state — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74565linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_tables: make nft_object rhltable per table — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74537linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: hold sk properly in iso_conn_ready — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74535linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74534linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: fix refcounting of iso_conn — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74533linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74530linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74529linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74522linux-libc-dev7.0.0-38.38 kernel: ksmbd: fix use-after-free in __close_file_table_ids() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74510linux-libc-dev7.0.0-38.38 kernel: Bluetooth: mgmt: fix UAF in pair command cancellation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74506linux-libc-dev7.0.0-38.38 kernel: afs: Fix UAF when sending a message — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74470linux-libc-dev7.0.0-38.38 kernel: scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98797linux-libc-dev7.0.0-38.38 kernel: net: cap skb->queue_mapping when the tx queue is picked — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98799linux-libc-dev7.0.0-38.38 kernel: bpf: Skip detached progs in trampoline images that are still in use — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98800linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free in BPF trampoline — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98803linux-libc-dev7.0.0-38.38 kernel: net: stmmac: fix rx Scatter-Gather support — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98804linux-libc-dev7.0.0-38.38 kernel: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98813linux-libc-dev7.0.0-38.38 kernel: bpf: Hold map BTF for the memory allocator destructor record — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98823linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: preserve hidden-group beacon IE ownership — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98824linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: validate TX status rate metadata — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98827linux-libc-dev7.0.0-38.38 kernel: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98829linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: drop oversized fragments to avoid extra_len overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98836linux-libc-dev7.0.0-38.38 kernel: ALSA: line6: reject oversized playback packets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-111497libbrotli11.2.0-3build1 1.2.0-3ubuntu0.1brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98837linux-libc-dev7.0.0-38.38 kernel: ALSA: caiaq: unregister the input device when probe fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98846linux-libc-dev7.0.0-38.38 kernel: sctp: check RCV_SHUTDOWN after the sendmsg connect wait — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98858linux-libc-dev7.0.0-38.38 kernel: io_uring: fix task_work add use-after-free with SQPOLL — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98861linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via fprobe use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98862linux-libc-dev7.0.0-38.38 kernel: audit: fix exe mark UAF in kill_rules() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98863linux-libc-dev7.0.0-38.38 kernel: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98733linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free in Bluetooth ISO packet queueing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98734linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free in Bluetooth connection scheduling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98735linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98737linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of service via Bluetooth inquiry cache use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98738linux-libc-dev7.0.0-38.38 kernel: kernel: denial of service via race condition in Bluetooth SMP remote OOB handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98739linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: Fix initial port reference race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98741linux-libc-dev7.0.0-38.38 kernel: ALSA: ua101: reject mismatched capture/playback packet sizes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-78667stdlibv1.26.7 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — usr/bin/pebble
HIGH CVE-2026-111943stdlibv1.26.7 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — usr/bin/pebble
HIGH CVE-2022-41404org.ini4j:ini4j0.5.4 org.ini4j: unspecified DoS — Java
HIGH CVE-2026-98742linux-libc-dev7.0.0-38.38 kernel: kernel: Use-after-free via race condition in ALSA sequencer compatibility ioctls — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98752linux-libc-dev7.0.0-38.38 kernel: tty: port: fix tty_port_tty_vhangup() race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98754linux-libc-dev7.0.0-38.38 kernel: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98763linux-libc-dev7.0.0-38.38 kernel: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98776linux-libc-dev7.0.0-38.38 kernel: kernel: Privilege escalation via binderfs use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98788linux-libc-dev7.0.0-38.38 kernel: kernel: Privilege escalation via use-after-free during futex hash resizing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98792linux-libc-dev7.0.0-38.38 kernel: netfilter: flowtable: generalize pending status bit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-98794linux-libc-dev7.0.0-38.38 kernel: ipvs: filter some flags received in the backup server — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89810linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89805linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89803linux-libc-dev7.0.0-38.38 kernel: drm/nouveau: unsubscribe the channel-kill event before the fence context — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89788linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: k ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89707linux-libc-dev7.0.0-38.38 kernel: nfsd: release path refs on follow_down() error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89685linux-libc-dev7.0.0-38.38 kernel: nfsd: fix clock domain mismatch in clients_still_reclaiming() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89680linux-libc-dev7.0.0-38.38 kernel: nfsd: fix nfsd_file leak on inter-server COPY setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89676linux-libc-dev7.0.0-38.38 kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89675linux-libc-dev7.0.0-38.38 kernel: nfsd: fix UAF in async copy cancel and shutdown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89638linux-libc-dev7.0.0-38.38 kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89637linux-libc-dev7.0.0-38.38 kernel: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89633linux-libc-dev7.0.0-38.38 kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89631linux-libc-dev7.0.0-38.38 kernel: smb: client: reject a tree connect response whose byte count is too small — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89622linux-libc-dev7.0.0-38.38 kernel: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89580linux-libc-dev7.0.0-38.38 kernel: bpf: Disable preemption in __bpf_get_stack — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89565linux-libc-dev7.0.0-38.38 kernel: ipip: fix skb leak in collect_md mode when metadata_dst allocation fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89564linux-libc-dev7.0.0-38.38 kernel: ip: orphan prefetched skbs before multicast forwarding — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89550linux-libc-dev7.0.0-38.38 kernel: SUNRPC: svcauth_gss: enforce krb5 token minimum length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90161linux-libc-dev7.0.0-38.38 kernel: erofs: fix interlaced ztailpacking pclusters — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90155linux-libc-dev7.0.0-38.38 kernel: ksmbd: detach blocked lock requests before freeing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90152linux-libc-dev7.0.0-38.38 kernel: smb/server: fix session leak in ksmbd_session_register() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90150linux-libc-dev7.0.0-38.38 kernel: pnfs/blocklayout: Fix device leaks on parse failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90149linux-libc-dev7.0.0-38.38 kernel: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90148linux-libc-dev7.0.0-38.38 kernel: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90111linux-libc-dev7.0.0-38.38 kernel: ip6mr: do not clone dst in ip6mr_cache_report() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90108linux-libc-dev7.0.0-38.38 kernel: net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90104linux-libc-dev7.0.0-38.38 kernel: NFSv4.1: zero referring call lists before decoding — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90093linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: access chan->conn safely in get/setsockopt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90092linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90057linux-libc-dev7.0.0-38.38 kernel: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90048linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-90003linux-libc-dev7.0.0-38.38 kernel: futex: Prevent rcuwait use-after-free during requeue PI — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89922linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Take srcu when importing watchpoint data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89913linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89907linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: L ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89837linux-libc-dev7.0.0-38.38 kernel: f2fs: fix dentry folio leak in find_in_level — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80837linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_tables: don't queue packet path object notifications — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80721linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: ensure no dangling hcon references in iso_conn — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80718linux-libc-dev7.0.0-38.38 kernel: mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80716linux-libc-dev7.0.0-38.38 kernel: ALSA: pcm: wake linked drain waiters on unlink — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80714linux-libc-dev7.0.0-38.38 kernel: ipvs: do not propagate one-packet flag to synced conns — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80710linux-libc-dev7.0.0-38.38 kernel: s390/dasd: Fix undersized format-check buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80702linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80700linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: validate external BO copy bounds for both stride paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80693linux-libc-dev7.0.0-38.38 kernel: idpf: bound interrupt-vector register fill to the allocated array — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80692linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80691linux-libc-dev7.0.0-38.38 kernel: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80683linux-libc-dev7.0.0-38.38 kernel: Bluetooth: SCO: give the socket its own sco_conn reference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80681linux-libc-dev7.0.0-38.38 kernel: vxlan: re-fetch eth header after route_shortcircuit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80554linux-libc-dev7.0.0-38.38 kernel: s390/vfio_ccw: Limit the number of channel program segments — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80551linux-libc-dev7.0.0-38.38 kernel: s390/vfio_ccw: Ensure first IDAW remains constant — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74752linux-libc-dev7.0.0-38.38 kernel: sctp: validate cookie AUTH state before use — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74744linux-libc-dev7.0.0-38.38 kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-74724linux-libc-dev7.0.0-38.38 kernel: ipvs: avoid out-of-bounds write in ip_vs_nat_icmp — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89544linux-libc-dev7.0.0-38.38 kernel: SUNRPC: fix gssx_dec_option_array error path bugs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89537linux-libc-dev7.0.0-38.38 kernel: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89531linux-libc-dev7.0.0-38.38 kernel: svcrdma: Reject connection when transport allocation fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89528linux-libc-dev7.0.0-38.38 kernel: svcrdma: Reject Read lists that exceed the page budget — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89526linux-libc-dev7.0.0-38.38 kernel: svcrdma: Validate Read chunk positions before reconstruction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89520linux-libc-dev7.0.0-38.38 kernel: sched/core: Make core-sched flips wait for in-flight selections — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89492linux-libc-dev7.0.0-38.38 kernel: ocfs2: validate directory-index entry counts when reading metadata — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89481linux-libc-dev7.0.0-38.38 kernel: nvme-tcp: fix host memory disclosure on R2T for a read command — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-89448linux-libc-dev7.0.0-38.38 kernel: iommu/vt-d: Force requesting ACS when tboot is enabled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80991linux-libc-dev7.0.0-38.38 kernel: net: ravb: serialize PTP clock teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80982linux-libc-dev7.0.0-38.38 kernel: net/smc: fix use-after-free in smc_rx_pipe_buf_release() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80980linux-libc-dev7.0.0-38.38 kernel: net/smc: stop killed, freed and out_of_sync sharing a byte — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80937linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80905linux-libc-dev7.0.0-38.38 kernel: net: tap: fix wrong transport_header when sending VLAN-tagged frame — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80891linux-libc-dev7.0.0-38.38 kernel: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80864linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80852linux-libc-dev7.0.0-38.38 kernel: tls: device: fix out-of-bounds write in tls_append_frag() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
HIGH CVE-2026-80841linux-libc-dev7.0.0-38.38 kernel: net/packet: defer vmalloc TX_RING free until skbs finish — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97910linux-libc-dev7.0.0-38.38 kernel: ASoC: sprd: validate compress buffer sizes against fixed allocations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97912linux-libc-dev7.0.0-38.38 kernel: accel: ethosu: Ensure SRAM size is 0 on mapping failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97605linux-libc-dev7.0.0-38.38 kernel: erofs: preserve LZMA decoders on resize failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97604linux-libc-dev7.0.0-38.38 kernel: fbdev: vfb: defer cleanup until the last reference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97602linux-libc-dev7.0.0-38.38 kernel: inet: frags: invalidate queues before flushing them — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97601linux-libc-dev7.0.0-38.38 kernel: ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97598linux-libc-dev7.0.0-38.38 kernel: ipv4: fib: bound automatic table ID allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97597linux-libc-dev7.0.0-38.38 kernel: ipv6: flowlabel: cap duplicate leases per socket — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97596linux-libc-dev7.0.0-38.38 kernel: ipvs: reject invalid states in connection template sync records — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97595linux-libc-dev7.0.0-38.38 kernel: mac802154: fix use-after-free of sdata via queued RX frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97594linux-libc-dev7.0.0-38.38 kernel: landlock: Fix use-after-free of the source's parent directory — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97593linux-libc-dev7.0.0-38.38 kernel: iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97592linux-libc-dev7.0.0-38.38 kernel: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97591linux-libc-dev7.0.0-38.38 kernel: s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97590linux-libc-dev7.0.0-38.38 kernel: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97589linux-libc-dev7.0.0-38.38 kernel: s390/crypto: Fix wrong return code to engine in asynch callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97588linux-libc-dev7.0.0-38.38 kernel: s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97587linux-libc-dev7.0.0-38.38 kernel: perf: RISC-V: store available counter mask as bitmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97586linux-libc-dev7.0.0-38.38 kernel: afs: Fix missing kunmap in afs_dir_search_bucket() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97585linux-libc-dev7.0.0-38.38 kernel: afs: Fix double-unmap of directory block — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97584linux-libc-dev7.0.0-38.38 kernel: afs: Fix incorrect free in candidate cleanup in afs_lookup_server() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97486linux-libc-dev7.0.0-38.38 kernel: hpfs: handle set_blocksize failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97909linux-libc-dev7.0.0-38.38 kernel: ASoC: sti: initialize IRQ lock before requesting IRQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97907linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97905linux-libc-dev7.0.0-38.38 kernel: cpufreq: zero-initialize policy cpumask before sysfs publication — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97904linux-libc-dev7.0.0-38.38 kernel: cpufreq: initialize policy rwsem before sysfs publication — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97903linux-libc-dev7.0.0-38.38 kernel: exit: hold a reference to thread_pid across proc_flush_pid — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97902linux-libc-dev7.0.0-38.38 kernel: fs: don't return -EINVAL for successful nested thaw — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97900linux-libc-dev7.0.0-38.38 kernel: drm/drm_exec: fix up contended obj when num_objects is 0 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97899linux-libc-dev7.0.0-38.38 kernel: drm/i915: Fix memory leak in query_perf_config_list() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97621linux-libc-dev7.0.0-38.38 kernel: drm/rockchip: analogix_dp: fix unchecked bound endpoint name length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97620linux-libc-dev7.0.0-38.38 kernel: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97618linux-libc-dev7.0.0-38.38 kernel: io_uring/net: don't overconsume buffers when using MSG_TRUNC — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97617linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Check resize_disabled before publishing the new subbuf order — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97614linux-libc-dev7.0.0-38.38 kernel: net: dsa: tag_brcm: legacy FCS: request needed tailroom — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97613linux-libc-dev7.0.0-38.38 kernel: net: mana: Reserve extra CQ slot for the fence completion CQE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97612linux-libc-dev7.0.0-38.38 kernel: net: mpls: clear inner_protocol when the last label is popped — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97611linux-libc-dev7.0.0-38.38 kernel: net: openvswitch: fix use-after-free of the flow table mask array — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97610linux-libc-dev7.0.0-38.38 kernel: netfs: Fix uninitialized return value in netfs_unbuffered_write() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97608linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_log: unregister loggers before per-net teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97607linux-libc-dev7.0.0-38.38 kernel: vdpa: ifcvf: Put device on unsupported feature error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97606linux-libc-dev7.0.0-38.38 kernel: fs: autofs: fix memory leak in autofs_fill_super() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97943linux-libc-dev7.0.0-38.38 kernel: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97944linux-libc-dev7.0.0-38.38 kernel: x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97945linux-libc-dev7.0.0-38.38 kernel: x86/mm: Fix user-space data loss with MADV_FREE and THP — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97946linux-libc-dev7.0.0-38.38 kernel: x86/amd_node: Fix PCI device reference counting in amd_smn_init() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97947linux-libc-dev7.0.0-38.38 kernel: x86/amd_node: Fix potential NULL pointer dereference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97948linux-libc-dev7.0.0-38.38 kernel: powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97951linux-libc-dev7.0.0-38.38 kernel: scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97953linux-libc-dev7.0.0-38.38 kernel: net: stmmac: fix TX descriptor availability check for TSO traffic — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97954linux-libc-dev7.0.0-38.38 kernel: net/rds: fix tcp stream corruption with large pages — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97955linux-libc-dev7.0.0-38.38 kernel: net: mana: restore the XDP program pointer when pre-allocation fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97956linux-libc-dev7.0.0-38.38 kernel: net: net_failover: Fix the deadlock in net_failover_slave_name_change() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97957linux-libc-dev7.0.0-38.38 kernel: net: hinic: fix mailbox segment buffer overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97958linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97959linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_route: free emptied bucket on filter move — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97961linux-libc-dev7.0.0-38.38 kernel: perf/core: Allow list_del during perf_event_overflow() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97963linux-libc-dev7.0.0-38.38 kernel: net: stmmac: initialize ptp_lock at probe time — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97964linux-libc-dev7.0.0-38.38 kernel: ppp_synctty: ensure a writeable skb header — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97965linux-libc-dev7.0.0-38.38 kernel: vxlan: initialize _md in vxlan_xmit_one() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97966linux-libc-dev7.0.0-38.38 kernel: octeontx2-pf: reset HTB scheduler topology before freeing queues — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97967linux-libc-dev7.0.0-38.38 kernel: hwmon: (corsair-cpro) Remove debugfs entries when probe fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97968linux-libc-dev7.0.0-38.38 kernel: hwmon: (corsair-cpro) Create debugfs entries after hwmon registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97913linux-libc-dev7.0.0-38.38 kernel: accel: ethosu: Ensure cmd stream ends with a stop op — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97914linux-libc-dev7.0.0-38.38 kernel: accel: ethosu: Fix ethosu_job_open() return value — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97915linux-libc-dev7.0.0-38.38 kernel: accel/ivpu: Limit firmware log name prints to field size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97916linux-libc-dev7.0.0-38.38 kernel: accel/ivpu: Validate firmware log buffer metadata — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97917linux-libc-dev7.0.0-38.38 kernel: accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97919linux-libc-dev7.0.0-38.38 kernel: tracing: Take the reference before publishing the named histogram trigger — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97920linux-libc-dev7.0.0-38.38 kernel: tracing: Keep the entry count when the histogram stats allocation fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97921linux-libc-dev7.0.0-38.38 kernel: tracing: Free histogram the field rejected for a bad modifier — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97923linux-libc-dev7.0.0-38.38 kernel: tracing: Free histogram the var ref when its initialization fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97924linux-libc-dev7.0.0-38.38 kernel: tracing/user_events: Don't destroy fields when event removal fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97926linux-libc-dev7.0.0-38.38 kernel: ufs: validate cylinder group metadata before caching it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97927linux-libc-dev7.0.0-38.38 kernel: ufs: create the root dentry after loading cylinder metadata — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97928linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: skip the VMID 0 flush for VRAM — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97930linux-libc-dev7.0.0-38.38 kernel: ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97931linux-libc-dev7.0.0-38.38 kernel: ALSA: us122l: Prevent write upgrades for read mappings — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97932linux-libc-dev7.0.0-38.38 kernel: tracing: Don't dereference trace_event_file in deferred trigger free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97934linux-libc-dev7.0.0-38.38 kernel: tracing: Fix memory corruption from a "STACKTRACE" histogram key — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97936linux-libc-dev7.0.0-38.38 kernel: tracing: Fix memory corruption from the histogram stacktrace modifier — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97939linux-libc-dev7.0.0-38.38 kernel: ipmr: account multicast table and route memory — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97940linux-libc-dev7.0.0-38.38 kernel: ipv6: fix fib6 walker UAF on seq stop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97942linux-libc-dev7.0.0-38.38 kernel: x86/alternatives: Exclude text poking against change_page_attr() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97487linux-libc-dev7.0.0-38.38 kernel: jfs: handle set_blocksize failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97488linux-libc-dev7.0.0-38.38 kernel: qnx4: handle set_blocksize failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97489linux-libc-dev7.0.0-38.38 kernel: bfs: handle set_blocksize failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97490linux-libc-dev7.0.0-38.38 kernel: affs: handle set_blocksize failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97491linux-libc-dev7.0.0-38.38 kernel: net/rds: Don't sleep inside rds_ib_conn_path_shutdown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97492linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97498linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97500linux-libc-dev7.0.0-38.38 kernel: wifi: rtw89: phy: check length before parsing PHY status IE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97502linux-libc-dev7.0.0-38.38 kernel: mmc: davinci: avoid NULL deref of host->data in IRQ handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97506linux-libc-dev7.0.0-38.38 kernel: crypto: ixp4xx - fix buffer chain unwind on allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97507linux-libc-dev7.0.0-38.38 kernel: media: dm1105: fix missing error check for dma_alloc_coherent — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97508linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Set tb->root_switch to NULL when domain is stopped — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97509linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Keep XDomain reference during the lifetime of a service — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97510linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97511linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: avoid out-of-bounds access in monitor — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97514linux-libc-dev7.0.0-38.38 kernel: media: chips-media: wave5: Fix Reports from Kernel Lock Validator — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97515linux-libc-dev7.0.0-38.38 kernel: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97516linux-libc-dev7.0.0-38.38 kernel: wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97517linux-libc-dev7.0.0-38.38 kernel: wifi: nl80211: reject beacons with bad HE operation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97518linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: reject duplicate wiphy cipher suite entries — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93037linux-libc-dev7.0.0-38.38 kernel: RDMA/hfi1: Propagate sdma_txinit_ahg() errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97444linux-libc-dev7.0.0-38.38 kernel: ACPICA: add boundary checks in two places — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97445linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97446linux-libc-dev7.0.0-38.38 kernel: ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97448linux-libc-dev7.0.0-38.38 kernel: ACPICA: Add validation for node in acpi_ns_build_normalized_path() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97449linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97450linux-libc-dev7.0.0-38.38 kernel: ACPICA: validate handler object type in two places — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97451linux-libc-dev7.0.0-38.38 kernel: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97452linux-libc-dev7.0.0-38.38 kernel: ACPICA: Prevent adding invalid references — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97453linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97454linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97455linux-libc-dev7.0.0-38.38 kernel: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97456linux-libc-dev7.0.0-38.38 kernel: ACPICA: Fix condition check in acpi_ps_parse_loop() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97472linux-libc-dev7.0.0-38.38 kernel: ipv6: addrconf: fix temp address generation after prefix deprecation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97475linux-libc-dev7.0.0-38.38 kernel: thermal/drivers/tegra/soctherma: Switch to devm cooling device registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97476linux-libc-dev7.0.0-38.38 kernel: rds: filter RDS_INFO_* getsockopt by caller's netns — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97481linux-libc-dev7.0.0-38.38 kernel: serial: 8250: fix possible ISR soft lockup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97482linux-libc-dev7.0.0-38.38 kernel: usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97483linux-libc-dev7.0.0-38.38 kernel: usb: core: hcd: fix possible deadlock in rh control transfers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97484linux-libc-dev7.0.0-38.38 kernel: usbip: vhci_hcd: fix NULL deref in status_show_vhci — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97485linux-libc-dev7.0.0-38.38 kernel: omfs: handle set_blocksize failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97552linux-libc-dev7.0.0-38.38 kernel: xfs: initialise error in xfs_defer_finish_one() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97553linux-libc-dev7.0.0-38.38 kernel: xfs: lock the healthmon when inserting unmount event — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97558linux-libc-dev7.0.0-38.38 kernel: smb: client: fix cifsFileInfo reference leak in deferred close — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97560linux-libc-dev7.0.0-38.38 kernel: smb: client: fix one-byte OOB read in smb2_parse_native_symlink() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97561linux-libc-dev7.0.0-38.38 kernel: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97563linux-libc-dev7.0.0-38.38 kernel: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97566linux-libc-dev7.0.0-38.38 kernel: mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97567linux-libc-dev7.0.0-38.38 kernel: mptcp: prevent race between disconnect() and rtx — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97568linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97571linux-libc-dev7.0.0-38.38 kernel: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97572linux-libc-dev7.0.0-38.38 kernel: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97573linux-libc-dev7.0.0-38.38 kernel: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97574linux-libc-dev7.0.0-38.38 kernel: bnxt_en: Don't free the live ring's TPA state on queue restart failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97575linux-libc-dev7.0.0-38.38 kernel: media: v4l2-ctrls: validate AV1 tile counts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97576linux-libc-dev7.0.0-38.38 kernel: media: v4l2-ctrls: validate HEVC tile counts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97577linux-libc-dev7.0.0-38.38 kernel: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97578linux-libc-dev7.0.0-38.38 kernel: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97579linux-libc-dev7.0.0-38.38 kernel: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97580linux-libc-dev7.0.0-38.38 kernel: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97582linux-libc-dev7.0.0-38.38 kernel: hwmon: (gpio-fan) Fix use-after-free in alarm work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97583linux-libc-dev7.0.0-38.38 kernel: afs: Clear stale peer app data after address list changes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97520linux-libc-dev7.0.0-38.38 kernel: gfs2: move quota_init qc iterator increment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97522linux-libc-dev7.0.0-38.38 kernel: mptcp: fix bad accounting in __mptcp_subflow_push_pending() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97523linux-libc-dev7.0.0-38.38 kernel: mptcp: close race between scheduler and state change — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97524linux-libc-dev7.0.0-38.38 kernel: mptcp: avoid unneeded actions on subflow reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97525linux-libc-dev7.0.0-38.38 kernel: x86/mm/pat: Allocate split page tables as kernel page tables — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97526linux-libc-dev7.0.0-38.38 kernel: s390/pai: Support CPU hotplug for PMU PAI — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97527linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97528linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97529linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97533linux-libc-dev7.0.0-38.38 kernel: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97538linux-libc-dev7.0.0-38.38 kernel: hwmon: (asus_rog_ryujin) Validate HID report lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97542linux-libc-dev7.0.0-38.38 kernel: xfs: bail out on bitmap errors in xrep_agfl_fill — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97543linux-libc-dev7.0.0-38.38 kernel: xfs: destroy seen inode bitmap when we fail to add a dirpath — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97544linux-libc-dev7.0.0-38.38 kernel: xfs: don't leak dqacct if rhashtable insertion fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97545linux-libc-dev7.0.0-38.38 kernel: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97546linux-libc-dev7.0.0-38.38 kernel: xfs: don't spin forever on zero-length dirents when salvaging them — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97547linux-libc-dev7.0.0-38.38 kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97548linux-libc-dev7.0.0-38.38 kernel: xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97549linux-libc-dev7.0.0-38.38 kernel: xfs: fix under-reservation of blocks when repairing sf directories — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97550linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: x ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97551linux-libc-dev7.0.0-38.38 kernel: xfs: initialise args->total for parent pointer updates — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98105linux-libc-dev7.0.0-38.38 kernel: net: ethernet: oa_tc6: Improve the error recovery — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98106linux-libc-dev7.0.0-38.38 kernel: drm/pagemap: Prevent double migration of device pages — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98108linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98109linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_core: Fix race condition during device registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98110linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel: bound firmware ID by TLV length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98111linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel: validate version TLV value lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98112linux-libc-dev7.0.0-38.38 kernel: ksmbd: fix listener task lifetime on netdev events — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98113linux-libc-dev7.0.0-38.38 kernel: ksmbd: rate limit unmapped SID errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98114linux-libc-dev7.0.0-38.38 kernel: ksmbd: propagate DACL parsing errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98116linux-libc-dev7.0.0-38.38 kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98117linux-libc-dev7.0.0-38.38 kernel: cachefiles: Fix potential UAF/KASAN warning — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98118linux-libc-dev7.0.0-38.38 kernel: netfs: Fix readahead synchronisation issues by loading all folios upfront — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98119linux-libc-dev7.0.0-38.38 kernel: netfs: break unbuffered write when netfs_alloc_subrequest() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98120linux-libc-dev7.0.0-38.38 kernel: netfs: Fix subreq ref leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98121linux-libc-dev7.0.0-38.38 kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98122linux-libc-dev7.0.0-38.38 kernel: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98123linux-libc-dev7.0.0-38.38 kernel: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98125linux-libc-dev7.0.0-38.38 kernel: smb/client: fix stale page cache in insert/collapse range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98126linux-libc-dev7.0.0-38.38 kernel: smb/client: validate new EOF for zero range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98127linux-libc-dev7.0.0-38.38 kernel: smb/client: validate new EOF for insert range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98128linux-libc-dev7.0.0-38.38 kernel: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98000linux-libc-dev7.0.0-38.38 kernel: hwmon: Fix potential UAF in pec_store — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98079linux-libc-dev7.0.0-38.38 kernel: btrfs: zstd: fix lost wakeup when waiting for a workspace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98080linux-libc-dev7.0.0-38.38 kernel: btrfs: do not force reloc root creation during qgroup_account_snapshot() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98081linux-libc-dev7.0.0-38.38 kernel: btrfs: zoned: finish active block group cleanup if call_zone_finish() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98082linux-libc-dev7.0.0-38.38 kernel: btrfs: fix the possible bioc_list memory leak during error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98083linux-libc-dev7.0.0-38.38 kernel: btrfs: fix transaction use-after-free in raid stripe insertion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98086linux-libc-dev7.0.0-38.38 kernel: ALSA: ump: do not touch legacy_rmidi before it exists — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98087linux-libc-dev7.0.0-38.38 kernel: sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98088linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98089linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98090linux-libc-dev7.0.0-38.38 kernel: btrfs: restore active device pointers after failed sprout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98091linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98092linux-libc-dev7.0.0-38.38 kernel: ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98093linux-libc-dev7.0.0-38.38 kernel: ASoC: fsl_micfil: balance mclk enable/disable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98094linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98095linux-libc-dev7.0.0-38.38 kernel: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98096linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98097linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: t ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98098linux-libc-dev7.0.0-38.38 kernel: tipc: fix NULL deref in tipc_named_node_up() on empty publication list — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98099linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98103linux-libc-dev7.0.0-38.38 kernel: igmp: convert struct ip_sf_list to RCU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98170linux-libc-dev7.0.0-38.38 kernel: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98173linux-libc-dev7.0.0-38.38 kernel: smb: client: fix use-after-free of iface in cifs_try_adding_channels() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98176linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98177linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Avoid integer underflow in EOP ring size calculation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98179linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: fix rmmio iounmap skipped on device removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98180linux-libc-dev7.0.0-38.38 kernel: drm/msm: RCU-free the scheduler-containing ring and VM objects — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98181linux-libc-dev7.0.0-38.38 kernel: drm/gud: fix out-of-bounds write in gud_plane_atomic_check() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98184linux-libc-dev7.0.0-38.38 kernel: wifi: mwifiex: prevent authentication frame length truncation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98185linux-libc-dev7.0.0-38.38 kernel: wifi: mwifiex: validate scan response extents — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98186linux-libc-dev7.0.0-38.38 kernel: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98187linux-libc-dev7.0.0-38.38 kernel: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98188linux-libc-dev7.0.0-38.38 kernel: wifi: p54: validate curve data length in the calibration curve converters — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98189linux-libc-dev7.0.0-38.38 kernel: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98190linux-libc-dev7.0.0-38.38 kernel: wifi: wilc1000: fix out-of-bounds read in P2P public action frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98191linux-libc-dev7.0.0-38.38 kernel: wifi: wlcore: release runtime PM ref on regdomain config failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98193linux-libc-dev7.0.0-38.38 kernel: wifi: libipw: reject TKIP frames without a full MIC — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98194linux-libc-dev7.0.0-38.38 kernel: wifi: libertas_tf: fix UAF in lbtf_free_adapter() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98195linux-libc-dev7.0.0-38.38 kernel: wifi: iwlegacy: fix broadcast stations deallocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98196linux-libc-dev7.0.0-38.38 kernel: wifi: brcmsmac: fix UAF in brcms_free_timer() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98197linux-libc-dev7.0.0-38.38 kernel: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98199linux-libc-dev7.0.0-38.38 kernel: hwmon: (pmbus/core) increase number of phases and add new mask — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98129linux-libc-dev7.0.0-38.38 kernel: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98130linux-libc-dev7.0.0-38.38 kernel: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98143linux-libc-dev7.0.0-38.38 kernel: accel: ethosu: Don't read the U65 rounding mode as a storage mode — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98144linux-libc-dev7.0.0-38.38 kernel: accel/amdxdna: put the chained BO when its mapping fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98146linux-libc-dev7.0.0-38.38 kernel: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98147linux-libc-dev7.0.0-38.38 kernel: printk: Don't WARN on kthread_run failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98149linux-libc-dev7.0.0-38.38 kernel: bpf: Fix percpu map update indexing with sparse CPU IDs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98150linux-libc-dev7.0.0-38.38 kernel: bpf: Fix BPF_F_CPU validation for sparse CPU IDs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98151linux-libc-dev7.0.0-38.38 kernel: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98152linux-libc-dev7.0.0-38.38 kernel: nvmet-rdma: fix queue leak when connect backlog is exceeded — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98153linux-libc-dev7.0.0-38.38 kernel: nvme: fix racy access to FDP placement id array — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98154linux-libc-dev7.0.0-38.38 kernel: nvme-rdma: fix -EIO cleanup order in queue_rq — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98155linux-libc-dev7.0.0-38.38 kernel: accel/qaic: Address potential out-of-bounds read in resp_worker() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98157linux-libc-dev7.0.0-38.38 kernel: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98158linux-libc-dev7.0.0-38.38 kernel: ppp_async: drop the errored frame instead of resetting its headroom — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98159linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7921: validate CLC firmware records — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98160linux-libc-dev7.0.0-38.38 kernel: staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98162linux-libc-dev7.0.0-38.38 kernel: smb/server: fix tree connection leak in smb2_tree_connect() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98163linux-libc-dev7.0.0-38.38 kernel: cgroup: Avoid iteration of dying tasks with zero refcount — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98166linux-libc-dev7.0.0-38.38 kernel: drm/ttm: fix swapped-out resources never leaving their bulk_move range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98168linux-libc-dev7.0.0-38.38 kernel: smb: client: fix reparse buffer bounds in cifs_query_reparse_point() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98001linux-libc-dev7.0.0-38.38 kernel: hwmon: (ltc4282) Make sure clk_init_data is fully initialized — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98002linux-libc-dev7.0.0-38.38 kernel: iommu/amd: Fix ineffective error check in nested domain allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98004linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98005linux-libc-dev7.0.0-38.38 kernel: erofs: delimit inode_share cache key components — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98006linux-libc-dev7.0.0-38.38 kernel: ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98007linux-libc-dev7.0.0-38.38 kernel: bpf: Reject non-scalar bpf_loop iteration counts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98009linux-libc-dev7.0.0-38.38 kernel: net/sched: ets: clamp quantum in parse and fallback paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98010linux-libc-dev7.0.0-38.38 kernel: net/sched: drr: clamp quantum in change class — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98011linux-libc-dev7.0.0-38.38 kernel: net/sched: hhf: clamp quantum in change and init paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98012linux-libc-dev7.0.0-38.38 kernel: net/sched: sfq: clamp quantum in change path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98013linux-libc-dev7.0.0-38.38 kernel: net/sched: fq_pie: clamp quantum in change path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98014linux-libc-dev7.0.0-38.38 kernel: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98015linux-libc-dev7.0.0-38.38 kernel: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98016linux-libc-dev7.0.0-38.38 kernel: net/mlx5e: Fix use-after-free race in sample_restore_put() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98018linux-libc-dev7.0.0-38.38 kernel: net: mctp: i3c: serialize probe with bus removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98020linux-libc-dev7.0.0-38.38 kernel: pds_core: fix cmd_regs access racing BAR unmap on reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98021linux-libc-dev7.0.0-38.38 kernel: net: reject oversized tx_queue_len at netlink parse time — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98022linux-libc-dev7.0.0-38.38 kernel: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98023linux-libc-dev7.0.0-38.38 kernel: vxlan: reject dynamic fdb entries that reference a nexthop id — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98024linux-libc-dev7.0.0-38.38 kernel: s390/ism: folio_put() after error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97969linux-libc-dev7.0.0-38.38 kernel: watchdog: msc313e: Fix clock leak and spurious timer in settimeout() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97970linux-libc-dev7.0.0-38.38 kernel: watchdog: msc313e: Avoid division by zero — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97971linux-libc-dev7.0.0-38.38 kernel: nstree: check listing permission before taking a namespace reference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97972linux-libc-dev7.0.0-38.38 kernel: net: macb: put the "mdio" child node reference on success — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97974linux-libc-dev7.0.0-38.38 kernel: ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97975linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97976linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel_pcie: validate packet_len before skb_put_data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97977linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btusb: Fix UAF of btusb_data by rx_work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97979linux-libc-dev7.0.0-38.38 kernel: ice: add missing xa_destroy for sched_node_ids — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97981linux-libc-dev7.0.0-38.38 kernel: net: ethernet: cortina: Count dropped frames as NAPI work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97982linux-libc-dev7.0.0-38.38 kernel: net: ethernet: cortina: Fix budget accounting — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97983linux-libc-dev7.0.0-38.38 kernel: vduse: return compat ioctl results directly — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97984linux-libc-dev7.0.0-38.38 kernel: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97985linux-libc-dev7.0.0-38.38 kernel: af_unix: Update last skb marker in manage_oob() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97990linux-libc-dev7.0.0-38.38 kernel: vdpa_sim_net: check TX pull result before RX copy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97991linux-libc-dev7.0.0-38.38 kernel: vdpa_sim_blk: reject out-of-range sector starts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97993linux-libc-dev7.0.0-38.38 kernel: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97995linux-libc-dev7.0.0-38.38 kernel: virtio_console: do not free control-out buffers on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97996linux-libc-dev7.0.0-38.38 kernel: virtio: fix use-after-free in unregister_virtio_device() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97997linux-libc-dev7.0.0-38.38 kernel: virtio_ring: fix stale descriptor flags after a failed packed add — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97998linux-libc-dev7.0.0-38.38 kernel: netfilter: nfnetlink_log: cope with concurrent instance destruction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98055linux-libc-dev7.0.0-38.38 kernel: ASoC: Intel: avs: Clean up the bus when fetching ML caps fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98057linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98058linux-libc-dev7.0.0-38.38 kernel: bpf: Mark syscall helpers as sleepable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98059linux-libc-dev7.0.0-38.38 kernel: bpf: Mark sched_process_wait argument as nullable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98060linux-libc-dev7.0.0-38.38 kernel: bpf: Reject resilient lock operations in rbtree callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98061linux-libc-dev7.0.0-38.38 kernel: bpf: Reject tail calls directly from callback frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98062linux-libc-dev7.0.0-38.38 kernel: bpf: Mark signal tracepoint siginfo arguments as scalar — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98063linux-libc-dev7.0.0-38.38 kernel: bpf: Fix NULL-ptr-deref in btf_var_show() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98064linux-libc-dev7.0.0-38.38 kernel: bpf: Fix NULL-ptr-deref when showing a void BTF type — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98065linux-libc-dev7.0.0-38.38 kernel: bpf: Reject key-less BTF for hash maps — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98066linux-libc-dev7.0.0-38.38 kernel: ALSA: caiaq: Fix potential double-free at error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98068linux-libc-dev7.0.0-38.38 kernel: net/rds: don't let rds_conn_shutdown() consume a concurrent drop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98069linux-libc-dev7.0.0-38.38 kernel: net/rds: acquire the fastpath locks in rds_conn_shutdown() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98070linux-libc-dev7.0.0-38.38 kernel: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98071linux-libc-dev7.0.0-38.38 kernel: net/rds: clear cp_flags bits individually in rds_conn_path_reset() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98072linux-libc-dev7.0.0-38.38 kernel: net/rds: use wq_has_sleeper() in release_in_xmit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98074linux-libc-dev7.0.0-38.38 kernel: bonding: do not clear curr_active_slave prematurely when releasing all slaves — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98075linux-libc-dev7.0.0-38.38 kernel: bpf: reject BPF_PSEUDO_FUNC reference to the main program — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98076linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: t ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98077linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98078linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98025linux-libc-dev7.0.0-38.38 kernel: net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98026linux-libc-dev7.0.0-38.38 kernel: net: bridge: mcast: properly convert mglist to rcu — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98027linux-libc-dev7.0.0-38.38 kernel: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98028linux-libc-dev7.0.0-38.38 kernel: eth: nfp: drop the replaced rule from the list when reprogramming fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98029linux-libc-dev7.0.0-38.38 kernel: eth: nfp: bound the ntuple rule dump by the caller's buffer size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98030linux-libc-dev7.0.0-38.38 kernel: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98031linux-libc-dev7.0.0-38.38 kernel: nexthop: Initialize extack in remove_nh_grp_entry() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98037linux-libc-dev7.0.0-38.38 kernel: bpf: Reject untrusted allocated-object pointers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98038linux-libc-dev7.0.0-38.38 kernel: bpf: Keep refcount_acquire nullable for borrowed RCU kptrs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98039linux-libc-dev7.0.0-38.38 kernel: bpf: Require MEM_PERCPU for percpu kptr stores — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98043linux-libc-dev7.0.0-38.38 kernel: bpf: Don't infer non-NULL from a pointer with an unbounded offset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98044linux-libc-dev7.0.0-38.38 kernel: bpf: Reject legacy packet loads from callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98045linux-libc-dev7.0.0-38.38 kernel: bpf: Mark faultable stack helpers as sleepable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98047linux-libc-dev7.0.0-38.38 kernel: bpf: Check ancestor frames for rbtree callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98048linux-libc-dev7.0.0-38.38 kernel: bpf: don't rewrite bpf_fastcall patterns entered by a jump — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98049linux-libc-dev7.0.0-38.38 kernel: bpf: zero extend the result of an arena 32-bit cmpxchg — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98050linux-libc-dev7.0.0-38.38 kernel: mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98051linux-libc-dev7.0.0-38.38 kernel: net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98052linux-libc-dev7.0.0-38.38 kernel: net: bcmasp: clear txcb->last before writing each descriptor — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98053linux-libc-dev7.0.0-38.38 kernel: ASoC: Intel: avs: Refactor and fix init_config access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98054linux-libc-dev7.0.0-38.38 kernel: ASoC: Intel: avs: Fix unbalanced module reference count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93039linux-libc-dev7.0.0-38.38 kernel: ASoC: meson: Keep link pointers valid on realloc failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93040linux-libc-dev7.0.0-38.38 kernel: dmaengine: dw-edma: Serialize channel state checks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93041linux-libc-dev7.0.0-38.38 kernel: dmaengine: dw-edma: Serialize abort state updates — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93043linux-libc-dev7.0.0-38.38 kernel: bpf: Disallow interpreter fallback for gotox insn — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93044linux-libc-dev7.0.0-38.38 kernel: bpf: Disallow interpreter fallback for arena-related insns — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93045linux-libc-dev7.0.0-38.38 kernel: bpf: Reject arena frees below the arena base — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93046linux-libc-dev7.0.0-38.38 kernel: software node: Fix software_node_get_reference_args() with index -1 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93048linux-libc-dev7.0.0-38.38 kernel: mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93049linux-libc-dev7.0.0-38.38 kernel: mtd: mtdswap: Avoid freeing registered blktrans device twice — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93051linux-libc-dev7.0.0-38.38 kernel: misc: ad525x_dpot: use driver core groups for sysfs files — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93052linux-libc-dev7.0.0-38.38 kernel: misc: bcm-vk: Use acquire/release for msgq_inited — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93053linux-libc-dev7.0.0-38.38 kernel: speakup: keyhelp: guard letter_offsets possible out-of-range indexing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93054linux-libc-dev7.0.0-38.38 kernel: uio: Fix stale info pointer in failed registration path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93055linux-libc-dev7.0.0-38.38 kernel: UDF symlink pathComponent header OOB read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93056linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_uac1_legacy: remove broken string configfs attributes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93059linux-libc-dev7.0.0-38.38 kernel: drm/msm: Fix task_struct reference leak in recover_worker — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93061linux-libc-dev7.0.0-38.38 kernel: gpu: host1x: Avoid stack over-read in debug output helpers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93063linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mei: check SAP message length before reading it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93064linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93065linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90372linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92500linux-libc-dev7.0.0-38.38 kernel: ext4: use fsdata to track inline data write state and fix race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92501linux-libc-dev7.0.0-38.38 kernel: ext4: drain in-flight DIO before buffered write fallback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92503linux-libc-dev7.0.0-38.38 kernel: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92504linux-libc-dev7.0.0-38.38 kernel: thermal: intel: int3400: clean up ODVP on probe failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92505linux-libc-dev7.0.0-38.38 kernel: iommu/amd: Fix undefined behavior in devid_write debugfs function — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92506linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Fix requested device removal race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92508linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Fix potential use after free in ib_free_cq() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92513linux-libc-dev7.0.0-38.38 kernel: RDMA/mana_ib: drain QP references after partial table insertion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92514linux-libc-dev7.0.0-38.38 kernel: RDMA/erdma: Fix CEQ tasklet use-after-free on removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92515linux-libc-dev7.0.0-38.38 kernel: bpf: Preserve unique-field state across nested structs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92516linux-libc-dev7.0.0-38.38 kernel: bpf: Fix offset warn check for bpf_res_spin_lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92517linux-libc-dev7.0.0-38.38 kernel: bpf, riscv: Fix extable handling for arena load_acquire — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92518linux-libc-dev7.0.0-38.38 kernel: riscv, bpf: Fix kernel stack corruption in tailcall with CFI — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92519linux-libc-dev7.0.0-38.38 kernel: riscv, bpf: Fix memory leak in bpf_jit_free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92520linux-libc-dev7.0.0-38.38 kernel: bpf: Zero queue and stack outputs on lock failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92521linux-libc-dev7.0.0-38.38 kernel: ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92522linux-libc-dev7.0.0-38.38 kernel: ACPI: processor: validate MADT IOAPIC entry bounds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92523linux-libc-dev7.0.0-38.38 kernel: RDMA/nldev: validate dynamic counter attribute length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92524linux-libc-dev7.0.0-38.38 kernel: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92525linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93096linux-libc-dev7.0.0-38.38 kernel: cxl/features: Serialize multi-part Get/Set Feature transfers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93097linux-libc-dev7.0.0-38.38 kernel: cxl/mbox: Break poison list loop on an empty payload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93098linux-libc-dev7.0.0-38.38 kernel: rpmsg: glink: fix deadlock in endpoint destroy during driver detach — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93101linux-libc-dev7.0.0-38.38 kernel: media: v4l2-async: Unregister sub-device if asc_list is empty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93102linux-libc-dev7.0.0-38.38 kernel: RDMA/hfi1: Free RX data on late probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93103linux-libc-dev7.0.0-38.38 kernel: RDMA/hfi1: Preserve unit 0 on allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93106linux-libc-dev7.0.0-38.38 kernel: crash_dump: release keyring reference at the correct time — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93107linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93108linux-libc-dev7.0.0-38.38 kernel: RDMA/ipoib: Drain RCU callbacks during module teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93109linux-libc-dev7.0.0-38.38 kernel: RDMA/mlx5: Drain RCU callbacks during module teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93110linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Wait for RCU callbacks before unloading ib_core — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93112linux-libc-dev7.0.0-38.38 kernel: bpf: Require a BPF cpumask for bpf_cpumask_populate() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93113linux-libc-dev7.0.0-38.38 kernel: clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93114linux-libc-dev7.0.0-38.38 kernel: platform/surface: acpi-notify: Check ACPI companion before use — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93115linux-libc-dev7.0.0-38.38 kernel: platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93118linux-libc-dev7.0.0-38.38 kernel: usb: gadget: aspeed_udc: check endpoint DMA allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93119linux-libc-dev7.0.0-38.38 kernel: usb: ljca: bound bank_num in ljca_enumerate_gpio() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93120linux-libc-dev7.0.0-38.38 kernel: usb: gadget: configfs: fix out-of-bounds read of qw_sign — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93121linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93126linux-libc-dev7.0.0-38.38 kernel: remoteproc: qcom_q6v5_adsp: Fix reference leak for device node — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93127linux-libc-dev7.0.0-38.38 kernel: bpf: Drop scalar id on sign-extending narrowing stack fills — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93066linux-libc-dev7.0.0-38.38 kernel: x86/mm/pat: Take cpa_lock around large-page collapse — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93067linux-libc-dev7.0.0-38.38 kernel: drm/bridge: tc358767: clamp the reported AUX read size to the request — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93068linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: Fix DM I2C teardown race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93069linux-libc-dev7.0.0-38.38 kernel: OPP: Fix cleanup ordering — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93070linux-libc-dev7.0.0-38.38 kernel: media: ipu6: Do not free aux device pdata after init — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93071linux-libc-dev7.0.0-38.38 kernel: media: bcm2835-unicam: Fix asc leaked in error/remove path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93073linux-libc-dev7.0.0-38.38 kernel: dax: read holder_ops once in dax_holder_notify_failure() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93077linux-libc-dev7.0.0-38.38 kernel: cxl/features: Clamp Get Feature output size to the remaining buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93078linux-libc-dev7.0.0-38.38 kernel: cxl/features: Reject Set Features output buffer smaller than the header — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93079linux-libc-dev7.0.0-38.38 kernel: cxl/features: Reject Get Feature count larger than the output buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93080linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Fix transport device teardown lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93082linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Unwind P2A receiver mailbox setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93083linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Unwind TX receiver mailbox setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93084linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Drop handle on protocol bind failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93085linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Reject out of range DT protocol IDs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93086linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Avoid IDR updates while cleaning channels — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93089linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Free transport channel on IDR failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93090linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Clean up channels on setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93092linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Unregister device notifier before IDR teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93094linux-libc-dev7.0.0-38.38 kernel: wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93095linux-libc-dev7.0.0-38.38 kernel: hfsplus: validate thread record before delete key rebuild — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90373linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90374linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[] — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90376linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90377linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: fix RX data queuing of RRO 3.0 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90378linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt792x: Fix memory leak in SDIO TX path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90381linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90382linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90384linux-libc-dev7.0.0-38.38 kernel: iomap: release the folio batch on iomap callback failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90386linux-libc-dev7.0.0-38.38 kernel: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90387linux-libc-dev7.0.0-38.38 kernel: swiotlb: Preserve allocation virtual address for dynamic pools — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90388linux-libc-dev7.0.0-38.38 kernel: iommu/dma: Check atomic pool allocation result directly — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90390linux-libc-dev7.0.0-38.38 kernel: md/bitmap: resume array on backlog_store() error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90391linux-libc-dev7.0.0-38.38 kernel: lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90393linux-libc-dev7.0.0-38.38 kernel: bpf: Fix potential UAF in bpf_netns_link_update_prog — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90394linux-libc-dev7.0.0-38.38 kernel: power: supply: sc2731_charger: cancel work on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90395linux-libc-dev7.0.0-38.38 kernel: power: supply: isp1704_charger: cancel work on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90396linux-libc-dev7.0.0-38.38 kernel: block: fix dio leak on metadata mapping error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90397linux-libc-dev7.0.0-38.38 kernel: firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90399linux-libc-dev7.0.0-38.38 kernel: wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90400linux-libc-dev7.0.0-38.38 kernel: md: recheck spare changes before starting sync — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80757linux-libc-dev7.0.0-38.38 kernel: selinux: reject a class permission count below its inherited common — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90347linux-libc-dev7.0.0-38.38 kernel: arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90348linux-libc-dev7.0.0-38.38 kernel: wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90349linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90350linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: reject out-of-range link ids in mt76_vif_link() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90352linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: release hif2 reference on probe IRQ failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90353linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90354linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: fix double hif2 init on the non-WED path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90355linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: clear stale link state on full reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90356linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90357linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90358linux-libc-dev7.0.0-38.38 kernel: bpf, x86: Fix trampoline stack size for 128-bit arguments — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90360linux-libc-dev7.0.0-38.38 kernel: regulator: core: use system_freezable_wq for init complete work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90361linux-libc-dev7.0.0-38.38 kernel: wifi: ath11k: fix leak in ath11k_service_ready_ext_event() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90362linux-libc-dev7.0.0-38.38 kernel: drm/msm/dsi: Drop dev_pm_opp_set_rate(0) — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90364linux-libc-dev7.0.0-38.38 kernel: ACPI: processor: Unregister cpufreq notifier on init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90366linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90368linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: unwind state on add_interface failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90369linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: fix out-of-bounds access in mmio copy helpers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90370linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90371linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: fix RXDMAD_C buffer recycling race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90430linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90431linux-libc-dev7.0.0-38.38 kernel: remoteproc: Prevent crash handling to race with rproc_del() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90434linux-libc-dev7.0.0-38.38 kernel: isofs: release zisofs block pointer buffer head — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90435linux-libc-dev7.0.0-38.38 kernel: RDMA/mlx5: Fix integer overflow of user QP buffer size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92476linux-libc-dev7.0.0-38.38 kernel: crypto: keembay - Initialize completion before requesting IRQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92477linux-libc-dev7.0.0-38.38 kernel: scsi: ufs: debugfs: Reserve space for a string terminator — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92479linux-libc-dev7.0.0-38.38 kernel: scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92480linux-libc-dev7.0.0-38.38 kernel: scsi: ufs: core: Validate string descriptors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92483linux-libc-dev7.0.0-38.38 kernel: liveupdate: Remember FLB retrieve() status — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92484linux-libc-dev7.0.0-38.38 kernel: cxl/region: Fix use-after-free in find_pos_and_ways() error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92485linux-libc-dev7.0.0-38.38 kernel: bpf: Fix WARNING in bpf_tracing_link_release — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92486linux-libc-dev7.0.0-38.38 kernel: bpf: Fix CFI mismatch in task work callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92488linux-libc-dev7.0.0-38.38 kernel: RDMA/erdma: complete object teardown when the destroy command fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92489linux-libc-dev7.0.0-38.38 kernel: xfrm: Fix skb double-free in xfrm_dev_direct_output() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92490linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Unrequest devices if driver registration fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92491linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Roll back partial protocol table registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92494linux-libc-dev7.0.0-38.38 kernel: ext4: fix buffer_head leak in ext4_init_orphan_info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92495linux-libc-dev7.0.0-38.38 kernel: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92496linux-libc-dev7.0.0-38.38 kernel: wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92497linux-libc-dev7.0.0-38.38 kernel: wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-92498linux-libc-dev7.0.0-38.38 kernel: wifi: ath6kl: avoid buffer overreads in WMI event handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90402linux-libc-dev7.0.0-38.38 kernel: bus: mhi: host: Fix controller cleanup on EDL sysfs failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90403linux-libc-dev7.0.0-38.38 kernel: wifi: rtlwifi: pci: fix error path in rtl_pci_probe() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90404linux-libc-dev7.0.0-38.38 kernel: platform/chrome: cros_ec_debugfs: Unregister panic notifier — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90406linux-libc-dev7.0.0-38.38 kernel: media: qcom: iris: handle runtime PM resume failure in core deinit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90407linux-libc-dev7.0.0-38.38 kernel: wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90409linux-libc-dev7.0.0-38.38 kernel: drm/panthor: Add vm_bind region with kbo range overlap check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90411linux-libc-dev7.0.0-38.38 kernel: nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90412linux-libc-dev7.0.0-38.38 kernel: nvmet: fix return status of RMI log page on allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90413linux-libc-dev7.0.0-38.38 kernel: IB/isert: reject login PDUs declaring more data than was received — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90414linux-libc-dev7.0.0-38.38 kernel: IB/isert: reject PDUs declaring more data than was received — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90415linux-libc-dev7.0.0-38.38 kernel: RDMA/cxgb4: free STAG index when TPT entry write fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90416linux-libc-dev7.0.0-38.38 kernel: RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90419linux-libc-dev7.0.0-38.38 kernel: nilfs2: prevent out-of-bounds read in super root block parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90420linux-libc-dev7.0.0-38.38 kernel: nilfs2: fix infinite loop in nilfs_clean_segments() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90423linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: Fix UAF in ODP init error-handling path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90424linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90425linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90426linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90427linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90428linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90429linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93281linux-libc-dev7.0.0-38.38 kernel: wifi: rtw89: fix HE extended capability length check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93283linux-libc-dev7.0.0-38.38 kernel: i3c: master: Fix device_register() error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93284linux-libc-dev7.0.0-38.38 kernel: drm/pagemap: dma-unmap pages before handling migration errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93286linux-libc-dev7.0.0-38.38 kernel: net: appletalk: fix NULL pointer dereference in aarp_send_ddp() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93287linux-libc-dev7.0.0-38.38 kernel: i2c: smbus: reject oversized block transfers in the common path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93288linux-libc-dev7.0.0-38.38 kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93781linux-libc-dev7.0.0-38.38 kernel: scsi: core: Do not block on tag allocation in scsi_eh_lock_door() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93782linux-libc-dev7.0.0-38.38 kernel: vhost-scsi: flush backend after device ioctls — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93783linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: B ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93784linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: w ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93785linux-libc-dev7.0.0-38.38 kernel: cifs: validate idmap key payload length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93789linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: bound aligned TLV advance in FW parser — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93791linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93793linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mvm: validate TX_CMD response layout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93794linux-libc-dev7.0.0-38.38 kernel: smb/client: flush dirty data before punching a hole — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93795linux-libc-dev7.0.0-38.38 kernel: blk-cgroup: fix leaks and online flag on radix_tree_insert failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93797linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: w ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93798linux-libc-dev7.0.0-38.38 kernel: btrfs: fix reloc root cleanup in merge_reloc_roots() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93799linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mvm: validate sta_id in BA window status notif — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93800linux-libc-dev7.0.0-38.38 kernel: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93801linux-libc-dev7.0.0-38.38 kernel: smb/client: zero-initialize stack-allocated cifs_open_info_data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93160linux-libc-dev7.0.0-38.38 kernel: crypto: atmel-ecc - reject hardware ECDH without a public key — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93252linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: o ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93253linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93256linux-libc-dev7.0.0-38.38 kernel: arm64: hibernate: mask DAIF before restoring hibernated kernel — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93258linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: o ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93259linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93261linux-libc-dev7.0.0-38.38 kernel: locking/lockdep: Fix NULL pointer dereference in __lock_set_class() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93262linux-libc-dev7.0.0-38.38 kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93264linux-libc-dev7.0.0-38.38 kernel: RDMA/efa: Fix PBL chunk length computation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93265linux-libc-dev7.0.0-38.38 kernel: PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93266linux-libc-dev7.0.0-38.38 kernel: arm64: RSI: fix field-spanning write warning in attestation token init — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93267linux-libc-dev7.0.0-38.38 kernel: RDMA/core: Fix potential use after free in uverbs_free_dmah() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93268linux-libc-dev7.0.0-38.38 kernel: ext4: skip extra isize expansion during mount to prevent deadlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93269linux-libc-dev7.0.0-38.38 kernel: ext4: fix circular lock dependency in ext4_ext_migrate — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93270linux-libc-dev7.0.0-38.38 kernel: bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93271linux-libc-dev7.0.0-38.38 kernel: wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93273linux-libc-dev7.0.0-38.38 kernel: regulator: tps6594: Fix device node reference leaks in multiphase loop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93274linux-libc-dev7.0.0-38.38 kernel: pinctrl: bcm2835: Don't remove an unregistered GPIO chip — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93275linux-libc-dev7.0.0-38.38 kernel: perf/x86/intel/pt: Fix stop/start with no update — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93276linux-libc-dev7.0.0-38.38 kernel: phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93280linux-libc-dev7.0.0-38.38 kernel: greybus: audio: bound the topology section sizes against the fetched size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97411linux-libc-dev7.0.0-38.38 kernel: net: ibm: emac: mal: fix potential system hang in mal_remove() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97413linux-libc-dev7.0.0-38.38 kernel: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97416linux-libc-dev7.0.0-38.38 kernel: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97417linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97418linux-libc-dev7.0.0-38.38 kernel: ALSA: es18xx: check control allocation before private data setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97419linux-libc-dev7.0.0-38.38 kernel: hsr: broadcast netlink notifications in the device's net namespace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97420linux-libc-dev7.0.0-38.38 kernel: bpf: NUL-terminate replaced sysctl value — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97421linux-libc-dev7.0.0-38.38 kernel: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97422linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: fix SMI event cross-process information leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97430linux-libc-dev7.0.0-38.38 kernel: xhci: Prevent queuing new commands if xhci is inaccessible — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97432linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mvm: fix P2P-Device binding handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97433linux-libc-dev7.0.0-38.38 kernel: nvme: validate FDP configuration descriptor sizes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97434linux-libc-dev7.0.0-38.38 kernel: dpaa2-switch: fix handling of NAPI on the remove path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97435linux-libc-dev7.0.0-38.38 kernel: net: dsa: sja1105: flower: reject cross-chip redirect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97436linux-libc-dev7.0.0-38.38 kernel: dpaa2-switch: rework FDB management on the bridge leave path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97437linux-libc-dev7.0.0-38.38 kernel: ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97438linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: validate index entry key bounds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97439linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97440linux-libc-dev7.0.0-38.38 kernel: net: qrtr: fix node refcount leak on ctrl packet alloc failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97441linux-libc-dev7.0.0-38.38 kernel: ata: ahci: fail probe if BAR too small for claimed ports — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97443linux-libc-dev7.0.0-38.38 kernel: perf/ftrace: Fix WARNING in __unregister_ftrace_function — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93802linux-libc-dev7.0.0-38.38 kernel: wifi: rsi: validate beacon length before fixed buffer copy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93803linux-libc-dev7.0.0-38.38 kernel: wifi: libipw: fix key index receive bound checks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93804linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: ibss: wait for in-flight TX on disconnect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93805linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93807linux-libc-dev7.0.0-38.38 kernel: wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93808linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: caiaq: validate EP1 reply lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93811linux-libc-dev7.0.0-38.38 kernel: ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93812linux-libc-dev7.0.0-38.38 kernel: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93813linux-libc-dev7.0.0-38.38 kernel: btrfs: tree-checker: validate INODE_REF's namelen — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93815linux-libc-dev7.0.0-38.38 kernel: net: au1000: move free_irq out of the close-time spinlocked section — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93816linux-libc-dev7.0.0-38.38 kernel: f2fs: validate inline dentry name lengths before conversion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93819linux-libc-dev7.0.0-38.38 kernel: PCI: mediatek: Protect root bus removal with rescan lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93820linux-libc-dev7.0.0-38.38 kernel: PCI: rockchip: Protect root bus removal with rescan lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93821linux-libc-dev7.0.0-38.38 kernel: PCI: altera: Protect root bus removal with rescan lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93822linux-libc-dev7.0.0-38.38 kernel: PCI: iproc: Protect root bus removal with rescan lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93823linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93825linux-libc-dev7.0.0-38.38 kernel: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93826linux-libc-dev7.0.0-38.38 kernel: HID: hidpp: fix potential UAF in hidpp_connect_event() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93830linux-libc-dev7.0.0-38.38 kernel: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97407linux-libc-dev7.0.0-38.38 kernel: ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-97408linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: validate connectionless PSM length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93161linux-libc-dev7.0.0-38.38 kernel: crypto: qat - clear AES key schedule from stack — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93162linux-libc-dev7.0.0-38.38 kernel: crypto: qat - cancel work on re-enable SR-IOV timeout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93164linux-libc-dev7.0.0-38.38 kernel: uprobes/x86: Move optimized uprobe from nop5 to nop10 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93165linux-libc-dev7.0.0-38.38 kernel: platform/chrome: sensorhub: Fix memory overread in ring handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93167linux-libc-dev7.0.0-38.38 kernel: csky: Fix a4/a5 restoration in syscall trace path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93169linux-libc-dev7.0.0-38.38 kernel: dmaengine: zynqmp_dma: fix race between runtime PM and device removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93170linux-libc-dev7.0.0-38.38 kernel: dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93173linux-libc-dev7.0.0-38.38 kernel: bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93174linux-libc-dev7.0.0-38.38 kernel: bpf: Copy per-CPU map value padding in copy_map_value_long() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93177linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93178linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93179linux-libc-dev7.0.0-38.38 kernel: drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93180linux-libc-dev7.0.0-38.38 kernel: drm/panthor: Fix NPD issue on partial unmap of an evicted BO — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93182linux-libc-dev7.0.0-38.38 kernel: sched/fair: Fix overflow in update_tg_cfs_runnable() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93183linux-libc-dev7.0.0-38.38 kernel: drm/lima: call drm_mm_init() with a valid allocation range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93184linux-libc-dev7.0.0-38.38 kernel: ASoC: fsl_audmix: rework runtime PM handling in probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93185linux-libc-dev7.0.0-38.38 kernel: ASoC: rt700-sdw: always drain jack work on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93188linux-libc-dev7.0.0-38.38 kernel: HID: roccat: bound device-supplied profile index — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93189linux-libc-dev7.0.0-38.38 kernel: HID: core: quiesce input in hid_hw_stop() to prevent use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93190linux-libc-dev7.0.0-38.38 kernel: platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93130linux-libc-dev7.0.0-38.38 kernel: platform/x86: dell-wmi-base: Fix resource leak on module load failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93131linux-libc-dev7.0.0-38.38 kernel: platform/x86: dell-privacy: Fix race condition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93132linux-libc-dev7.0.0-38.38 kernel: ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93133linux-libc-dev7.0.0-38.38 kernel: ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93134linux-libc-dev7.0.0-38.38 kernel: printk: Fix possible console use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93135linux-libc-dev7.0.0-38.38 kernel: bpf: Reject programs with inlined helpers if JIT is not available — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93136linux-libc-dev7.0.0-38.38 kernel: bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93137linux-libc-dev7.0.0-38.38 kernel: bpf: Fix use-after-free on mm_struct in bpf_find_vma() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93138linux-libc-dev7.0.0-38.38 kernel: bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93140linux-libc-dev7.0.0-38.38 kernel: udf: Mark LVID buffer as uptodate before marking it dirty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93141linux-libc-dev7.0.0-38.38 kernel: usb: gadget: r8a66597: avoid double free of ep0_req in probe error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93143linux-libc-dev7.0.0-38.38 kernel: staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93145linux-libc-dev7.0.0-38.38 kernel: clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93149linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211_hwsim: avoid NULL skb in stop queue drain — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93151linux-libc-dev7.0.0-38.38 kernel: nvmet-rdma: fix response resource leak on queue teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93152linux-libc-dev7.0.0-38.38 kernel: nvme-apple: Use acquire/release for queue enabled state — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93153linux-libc-dev7.0.0-38.38 kernel: RDMA/bng_re: return a timeout when firmware responses stall — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93156linux-libc-dev7.0.0-38.38 kernel: crypto: rk3288 - fail ahash requests on HASH idle timeout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93157linux-libc-dev7.0.0-38.38 kernel: hwrng: xilinx-trng - propagate timeout before any data is read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93158linux-libc-dev7.0.0-38.38 kernel: crypto: sa2ul - stop probe if context pool creation fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93159linux-libc-dev7.0.0-38.38 kernel: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93222linux-libc-dev7.0.0-38.38 kernel: signal: avoid shared siginfo namespace rewrites — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93223linux-libc-dev7.0.0-38.38 kernel: staging: media: tegra-video: fix of_node_put() on VIP parse errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93224linux-libc-dev7.0.0-38.38 kernel: svcrdma: Fix unmatched rn_unregister on failed accept — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93225linux-libc-dev7.0.0-38.38 kernel: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93226linux-libc-dev7.0.0-38.38 kernel: ipv6: use RCU iterator to dump route exceptions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93227linux-libc-dev7.0.0-38.38 kernel: mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93228linux-libc-dev7.0.0-38.38 kernel: svcrdma: Reject Write/Reply chunks with segcount 0 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93229linux-libc-dev7.0.0-38.38 kernel: nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93233linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93234linux-libc-dev7.0.0-38.38 kernel: drm/gud: validate TV mode names before creating enum property — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93236linux-libc-dev7.0.0-38.38 kernel: media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93238linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93241linux-libc-dev7.0.0-38.38 kernel: memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93242linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93243linux-libc-dev7.0.0-38.38 kernel: mm/secretmem: properly account locked pages — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93244linux-libc-dev7.0.0-38.38 kernel: drm/sysfb: simpledrm: Improve stride validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93245linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: a ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93247linux-libc-dev7.0.0-38.38 kernel: Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93248linux-libc-dev7.0.0-38.38 kernel: drm/xe: don't WARN on kernel job timeout when device already wedged — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93249linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93250linux-libc-dev7.0.0-38.38 kernel: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93191linux-libc-dev7.0.0-38.38 kernel: smack: fix incorrect task context in smack_msg_queue_msgrcv — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93193linux-libc-dev7.0.0-38.38 kernel: drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93194linux-libc-dev7.0.0-38.38 kernel: drm/rockchip: dw_dp: Release core resources — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93195linux-libc-dev7.0.0-38.38 kernel: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93198linux-libc-dev7.0.0-38.38 kernel: dm-pcache: validate the persisted dirty_tail chain at load — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93201linux-libc-dev7.0.0-38.38 kernel: dm-pcache: validate seg_id fields from persistent memory — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93203linux-libc-dev7.0.0-38.38 kernel: batman-adv: bla: avoid CRC corruption due to parallel claim add — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93204linux-libc-dev7.0.0-38.38 kernel: batman-adv: dat: atomically update mac addresses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93206linux-libc-dev7.0.0-38.38 kernel: PCI/proc: Use file_ns_capable() when checking config space read access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93207linux-libc-dev7.0.0-38.38 kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93208linux-libc-dev7.0.0-38.38 kernel: kasan: fix cache shrink race with CPU hotplug — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93209linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93211linux-libc-dev7.0.0-38.38 kernel: nfsd: initialize DRC hash table before registering shrinker — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93212linux-libc-dev7.0.0-38.38 kernel: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93213linux-libc-dev7.0.0-38.38 kernel: of: fix out-of-bounds read in of_alias_scan() stem parser — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93214linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93215linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93217linux-libc-dev7.0.0-38.38 kernel: mm/madvise: skip device-private PMDs in cold and pageout walks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93218linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93219linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-93220linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98994linux-libc-dev7.0.0-38.38 kernel: statmount: read the parent of an unmounted mount under mount_lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98995linux-libc-dev7.0.0-38.38 kernel: namespace: reset the old parent's ->overmount in mnt_change_mountpoint() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98996linux-libc-dev7.0.0-38.38 kernel: fs: don't silently unmount busy mounts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98997linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu/userq: only accept doorbell BOs as queue doorbell — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98999linux-libc-dev7.0.0-38.38 kernel: drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99000linux-libc-dev7.0.0-38.38 kernel: drm/xe: Fix shrinker accounting double-subtraction on nested external pins — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99001linux-libc-dev7.0.0-38.38 kernel: drm/xe/i2c: cancel the client work on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99002linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: validate pitch coming from userspace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99003linux-libc-dev7.0.0-38.38 kernel: drm/panthor: validate userspace queue count against initialized firmware slot count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99004linux-libc-dev7.0.0-38.38 kernel: drm/imagination: Size page table preallocation by device address — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99005linux-libc-dev7.0.0-38.38 kernel: drm/i915/gt: Unmask interrupts only when ACTIVE is true — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99006linux-libc-dev7.0.0-38.38 kernel: drm/i915/gem: Prevent overstepping exec array boundary — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99007linux-libc-dev7.0.0-38.38 kernel: drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99008linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99009linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99010linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: free the skb when the DLC has no owner — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99011linux-libc-dev7.0.0-38.38 kernel: Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99012linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: Serialize concurrent connect calls — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99013linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: Reject concurrent BIS listener setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99014linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: Fix command skb lifetime during scan setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99015linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sock: Serialize dead-device detachment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98907linux-libc-dev7.0.0-38.38 kernel: btrfs: protect sb_write_pointer() with invalidate lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98973linux-libc-dev7.0.0-38.38 kernel: drm/bridge: Fix unlocked list_del in drm_bridge_add() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98974linux-libc-dev7.0.0-38.38 kernel: kernel: xfs: Unauthorized data modification via improper file size exchange handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98975linux-libc-dev7.0.0-38.38 kernel: xfs: stop exchanging reflink flags when exchanging mappings — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98977linux-libc-dev7.0.0-38.38 kernel: namespace: handle mount locking for automounts correctly — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98978linux-libc-dev7.0.0-38.38 kernel: namespace: never expire a locked mount — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98979linux-libc-dev7.0.0-38.38 kernel: namespace: refuse an automount below a mount that is in no namespace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98980linux-libc-dev7.0.0-38.38 kernel: namei: don't reveal overmounted entries in refwalk — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98981linux-libc-dev7.0.0-38.38 kernel: namespace: unhash a dentry before detaching the mounts on it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98982linux-libc-dev7.0.0-38.38 kernel: namespace: don't let a pseudo dentry become the root of a mount — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98983linux-libc-dev7.0.0-38.38 kernel: unshare: don't drop active namespace references that were never taken — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98984linux-libc-dev7.0.0-38.38 kernel: dcache: don't put a mountpoint on a dentry that's being removed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98985linux-libc-dev7.0.0-38.38 kernel: namespace: check the mounts before reading their parents in pivot_root() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98986linux-libc-dev7.0.0-38.38 kernel: namespace: remove the fsnotify marks of a mount namespace in process context — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98987linux-libc-dev7.0.0-38.38 kernel: namespace: look at the topmost mount for a mount namespace file — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98988linux-libc-dev7.0.0-38.38 kernel: namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98989linux-libc-dev7.0.0-38.38 kernel: namespace: check a recursive bind mount for mount namespace loops — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98990linux-libc-dev7.0.0-38.38 kernel: namespace: check a submount for references right before unmounting it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98991linux-libc-dev7.0.0-38.38 kernel: namespace: queue a mount only once for mount notifications — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98992linux-libc-dev7.0.0-38.38 kernel: namespace: don't copy an unmounted mount tree — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98993linux-libc-dev7.0.0-38.38 kernel: namespace: don't inherit MNT_UMOUNT in clone_mnt() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99037linux-libc-dev7.0.0-38.38 kernel: dm-crypt: reject the lmk IV mode with AEAD ciphers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99038linux-libc-dev7.0.0-38.38 kernel: memstick: rtsx_usb_ms: complete requests after eject instead of dropping them — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99039linux-libc-dev7.0.0-38.38 kernel: memstick: core: wait for request completion before freeing card — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99040linux-libc-dev7.0.0-38.38 kernel: KEYS: Fix add_key() race with keyring restriction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99041linux-libc-dev7.0.0-38.38 kernel: ip6_gre: remove obsolete ERSPAN PMTU update — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99043linux-libc-dev7.0.0-38.38 kernel: ice: fix metadata_dst refcount handling on representor teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99044linux-libc-dev7.0.0-38.38 kernel: ice: fix use-after-free in dynamic port cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99045linux-libc-dev7.0.0-38.38 kernel: ibmveth: h_free logical LAN on open-fail after register — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99046linux-libc-dev7.0.0-38.38 kernel: gve: fix XSK buffer leak on error descriptor — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99047linux-libc-dev7.0.0-38.38 kernel: gve: fix XSK buffer leak when rings are stopped — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99048linux-libc-dev7.0.0-38.38 kernel: gve: fix napi_disable deadlock when attempting to disable XSK pools — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99049linux-libc-dev7.0.0-38.38 kernel: gpio: xilinx: fix runtime PM leak on request error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99050linux-libc-dev7.0.0-38.38 kernel: gpio: mpsse: fix race when arming the IRQ poll worker — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99051linux-libc-dev7.0.0-38.38 kernel: fsverity: RCU-delay the freeing of struct fsverity_info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99052linux-libc-dev7.0.0-38.38 kernel: selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99053linux-libc-dev7.0.0-38.38 kernel: tipc: hold a reference to nodes found by link name — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99054linux-libc-dev7.0.0-38.38 kernel: tipc: destroy topsrv workqueues before closing connections — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99055linux-libc-dev7.0.0-38.38 kernel: tcp: reject net_iov in zerocopy receive mapping hints — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99056linux-libc-dev7.0.0-38.38 kernel: strparser: make sure __strp_recv isn't running before tearing down the parser — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99057linux-libc-dev7.0.0-38.38 kernel: xen/netfront: don't leak the skb when xennet_fill_frags() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99058linux-libc-dev7.0.0-38.38 kernel: workqueue: Fix NULL current_pwq deref in chained work check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99016linux-libc-dev7.0.0-38.38 kernel: riscv: futex: untag the user pointer before the atomic access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99017linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: r ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99018linux-libc-dev7.0.0-38.38 kernel: kernel: privilege escalation via improper shadow call stack pointer reload on RISC-V — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99019linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via reference count leak in SCSI changer driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99020linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: r ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99021linux-libc-dev7.0.0-38.38 kernel: regulator: of: fill in supply names in of_regulator_bulk_get_all() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99022linux-libc-dev7.0.0-38.38 kernel: regulator: ltc3676: don't read the write-only HRST and CLIRQ registers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99023linux-libc-dev7.0.0-38.38 kernel: power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99024linux-libc-dev7.0.0-38.38 kernel: optee: register TEE devices only once fully initialized — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99025linux-libc-dev7.0.0-38.38 kernel: openvswitch: fix soft lockup in the netlink flow dump — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99026linux-libc-dev7.0.0-38.38 kernel: net: team: free skb when broadcast has no txable port — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99027linux-libc-dev7.0.0-38.38 kernel: net: team: stop reusing skb after queue override — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99028linux-libc-dev7.0.0-38.38 kernel: net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99029linux-libc-dev7.0.0-38.38 kernel: net: sparx5: free the matchall entry on destroy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99030linux-libc-dev7.0.0-38.38 kernel: net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99031linux-libc-dev7.0.0-38.38 kernel: net: bridge: avoid recursive multicast port cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99032linux-libc-dev7.0.0-38.38 kernel: net/smc: protect clcsock lifetime in smc_getname — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99033linux-libc-dev7.0.0-38.38 kernel: net/packet: guard the ll header push in packet_rcv_spkt() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99034linux-libc-dev7.0.0-38.38 kernel: mmc: sdhci-sprd: disable runtime PM on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99035linux-libc-dev7.0.0-38.38 kernel: mmc: mtk-sd: Cancel request timeout work on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99036linux-libc-dev7.0.0-38.38 kernel: dm: fix reading free memory in do_resume — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98908linux-libc-dev7.0.0-38.38 kernel: net: microchip: sparx5: clean up PSFP resources on flower setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98909linux-libc-dev7.0.0-38.38 kernel: net: cpsw_new: unregister devlink on port registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98910linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Unwind debug trap enable on copy_to_user failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98911linux-libc-dev7.0.0-38.38 kernel: dpaa2-switch: fix the error path in dpaa2_switch_rx() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98912linux-libc-dev7.0.0-38.38 kernel: ALSA: seq: oss: Reject reads that cannot fit the next event — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98913linux-libc-dev7.0.0-38.38 kernel: net: thunderx: fix PTP device ref leak in nicvf_probe() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98914linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: cap ATOM command table nesting depth — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98915linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98916linux-libc-dev7.0.0-38.38 kernel: wifi: nl80211: check link is beaconing for color change — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98917linux-libc-dev7.0.0-38.38 kernel: parisc: Increase kernel stack size to 32kb — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98918linux-libc-dev7.0.0-38.38 kernel: mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98919linux-libc-dev7.0.0-38.38 kernel: drm/xe: harden adjust_idledly() against divide-by-zero and overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98921linux-libc-dev7.0.0-38.38 kernel: ovl: fix UAF in ovl_do_mkdir() debug print — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98923linux-libc-dev7.0.0-38.38 kernel: arm64: io: Reject non-user protection in ioremap_prot() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98924linux-libc-dev7.0.0-38.38 kernel: fs: avoid repeated scans in evict_inodes() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98925linux-libc-dev7.0.0-38.38 kernel: bpf, sockmap: Fix self-redirect copied_seq double-counting — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98926linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: Remove sink usage from DPMS — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98927linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: nv: Fix life cycle of the nested_mmus array — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98928linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98929linux-libc-dev7.0.0-38.38 kernel: macsec: initialize SecY before registering the netdevice — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98336linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: don't offload TC setup on AP_VLAN interfaces — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98887linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98888linux-libc-dev7.0.0-38.38 kernel: arm64: kprobes: Allow reentering kprobes while single-stepping — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98889linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mvm: fix sched scan IE sizing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98890linux-libc-dev7.0.0-38.38 kernel: wifi: libertas: reject short monitor TX frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98891linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: validate deauth frame length before reason access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98892linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98893linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Validate SENSOR_UPDATE payload size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98894linux-libc-dev7.0.0-38.38 kernel: drm/amd/ras: reset CPER ring on corrupt entry size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98895linux-libc-dev7.0.0-38.38 kernel: net/mlx5: HWS, Handle destroying table that has a miss table — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98896linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Keep the domain reference while processing hotplug — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98897linux-libc-dev7.0.0-38.38 kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ack — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98898linux-libc-dev7.0.0-38.38 kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98899linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98900linux-libc-dev7.0.0-38.38 kernel: xen/gntalloc: validate grant count before allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98901linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: k ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98902linux-libc-dev7.0.0-38.38 kernel: md/raid5: let stripe batch bm_seq comparison wrap-safe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98903linux-libc-dev7.0.0-38.38 kernel: mailbox: imx: Add a channel shutdown field — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98904linux-libc-dev7.0.0-38.38 kernel: mailbox: imx: Use devm_pm_runtime_enable() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98905linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Properly acquire queue buffers in CRIU restore — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98906linux-libc-dev7.0.0-38.38 kernel: net: lan966x: restore RX state on reload failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98952linux-libc-dev7.0.0-38.38 kernel: pfcp: make sure the SEID is linear before reading it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98953linux-libc-dev7.0.0-38.38 kernel: devlink: fix devlink_rel reference leak when notify work is pending — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98954linux-libc-dev7.0.0-38.38 kernel: net: always dissect GSO packets in __virtio_net_hdr_to_skb() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98955linux-libc-dev7.0.0-38.38 kernel: flow_dissector: avoid u16 truncation of skb->len when computing thoff — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98956linux-libc-dev7.0.0-38.38 kernel: ASoC: adau1372: allow sleepy powerdown GPIOs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98957linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7915: disable rx napi when removing device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98958linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: account non-AQL frames per peer rather than per link — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98959linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98960linux-libc-dev7.0.0-38.38 kernel: btrfs: don't stash io_uring encoded data across -EAGAIN — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98961linux-libc-dev7.0.0-38.38 kernel: btrfs: unlock inode and extent in caller when io_uring read extent fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98962linux-libc-dev7.0.0-38.38 kernel: btrfs: free iov when btrfs_uring_read_extent() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98963linux-libc-dev7.0.0-38.38 kernel: btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98964linux-libc-dev7.0.0-38.38 kernel: nvmet: use the local P2P device on metadata allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98965linux-libc-dev7.0.0-38.38 kernel: ice: Restore Ordered MMIO Writes for Tx Doorbells — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98966linux-libc-dev7.0.0-38.38 kernel: bonding: fix the program leak when XDP is replaced — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98967linux-libc-dev7.0.0-38.38 kernel: cxgb4/ch_ktls: disable softirqs around tid_list erases — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98968linux-libc-dev7.0.0-38.38 kernel: amt: send the relay's General Query directly from the receive path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98969linux-libc-dev7.0.0-38.38 kernel: net/sched: em_text: reject unterminated algo before autoload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98970linux-libc-dev7.0.0-38.38 kernel: drm/vc4: Free the BO cache size list on teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98971linux-libc-dev7.0.0-38.38 kernel: gpio: exar: initialize the ID before registering its cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98972linux-libc-dev7.0.0-38.38 kernel: cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98930linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Fix IRQ injection with SIGP Stop and Store Status — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98931linux-libc-dev7.0.0-38.38 kernel: mtd: spinand: fix NULL pointer dereference with no ECC engine — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98932linux-libc-dev7.0.0-38.38 kernel: EDAC/altera: Fix use-after-free in error paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98933linux-libc-dev7.0.0-38.38 kernel: usb: hub: use shorter 120ms post resume hold for SS root hubs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98934linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via missing network context in IPv6 segment routing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98935linux-libc-dev7.0.0-38.38 kernel: kernel: Information disclosure via uninitialized stack memory in RTC driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98936linux-libc-dev7.0.0-38.38 kernel: kernel: ath11k: Denial of Service via unreset station counter during hardware restart — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98937linux-libc-dev7.0.0-38.38 kernel: kernel: information disclosure via unprivileged perf kernel callchain capture — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98938linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via uninitialized memory read in Rust IRQ registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98939linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via circular locking dependency during page freeing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98940linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of service via out-of-bounds write in Qualcomm LPASS driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98941linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via large folios on encrypted ext4 files — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98942linux-libc-dev7.0.0-38.38 kernel: kernel: Information disclosure via race condition in sched_ext — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98944linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via improper cleanup during Steam controller registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98945linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of service via use-after-free in Steam HID driver teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98946linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via improper interrupt handling in drm/vc4 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98947linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via memory leak in vsock VMCI datagram handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98948linux-libc-dev7.0.0-38.38 kernel: kernel: mlxsw: Denial of Service via port range register leak in flower template creation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98949linux-libc-dev7.0.0-38.38 kernel: kernel: drm/imagination: Denial of Service via improper virtual memory remapping — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98950linux-libc-dev7.0.0-38.38 kernel: flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98951linux-libc-dev7.0.0-38.38 kernel: riscv: ptrace: Zero-initialize regset buffers before copyin — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99172linux-libc-dev7.0.0-38.38 kernel: ipc: drop the mqueue mount with kern_unmount() on setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99173linux-libc-dev7.0.0-38.38 kernel: eventfs: Free the eventfs_inode after an rcu grace period too — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99174linux-libc-dev7.0.0-38.38 kernel: ext4: free the sbi after a grace period — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99175linux-libc-dev7.0.0-38.38 kernel: fsnotify: prevent mark additions during connector teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99176linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via improper MMU reset in KVM nested virtualization — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99178linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via race condition in KVM asynchronous page fault handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99179linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via race condition in watch_queue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99180linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99181linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: a ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99182linux-libc-dev7.0.0-38.38 kernel: ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99183linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: a ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99184linux-libc-dev7.0.0-38.38 kernel: kernel: accel/rocket: Denial of Service via out-of-bounds write during core rebinding — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99185linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99186linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: x ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99187linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99188linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via interrupt storm during system resume in stmmac driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99189linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: g ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99190linux-libc-dev7.0.0-38.38 kernel: gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99191linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99192linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99201linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99080linux-libc-dev7.0.0-38.38 kernel: fs: Free any excess xarray nodes in clear_inode() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99151linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via NULL pointer dereference in AMD display driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99152linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99153linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99154linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99155linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99156linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99157linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99158linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: r ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99159linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: r ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99160linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: r ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99161linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99162linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: g ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99163linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: t ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99164linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99165linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99166linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99167linux-libc-dev7.0.0-38.38 kernel: net/sched: fix use-after-free in __tcf_action_put() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99168linux-libc-dev7.0.0-38.38 kernel: mshv_vtl: Check per-CPU register page before mmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99169linux-libc-dev7.0.0-38.38 kernel: futex: Fix mm reuse handling for FUT_OFF_MMSHARED — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99171linux-libc-dev7.0.0-38.38 kernel: ntfs3: free the sbi after a grace period — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35373rust-coreutils0.10.0-1ubuntu2~26.04.1 A logic error in the ln utility of uutils coreutils causes the program ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35371rust-coreutils0.10.0-1ubuntu2~26.04.1 The id utility in uutils coreutils exhibits incorrect behavior in its ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35370rust-coreutils0.10.0-1ubuntu2~26.04.1 The id utility in uutils coreutils miscalculates the groups= section o ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35368rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils: Privilege escalation and arbitrary code execution in chroot utility — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35367rust-coreutils0.10.0-1ubuntu2~26.04.1 The nohup utility in uutils coreutils creates its default output file, ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35364rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils mv utility: Arbitrary File Overwrite via TOCTOU Race Condition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35363rust-coreutils0.10.0-1ubuntu2~26.04.1 A vulnerability in the rm utility of uutils coreutils allows the bypas ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35360rust-coreutils0.10.0-1ubuntu2~26.04.1 The touch utility in uutils coreutils is vulnerable to a Time-of-Check ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35359rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35357rust-coreutils0.10.0-1ubuntu2~26.04.1 The cp utility in uutils coreutils is vulnerable to an information dis ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35354rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35352rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35351rust-coreutils0.10.0-1ubuntu2~26.04.1 The mv utility in uutils coreutils fails to preserve file ownership du ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35350rust-coreutils0.10.0-1ubuntu2~26.04.1 The cp utility in uutils coreutils fails to properly handle setuid and ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35348rust-coreutils0.10.0-1ubuntu2~26.04.1 The sort utility in uutils coreutils is vulnerable to a process panic ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35345rust-coreutils0.10.0-1ubuntu2~26.04.1 A vulnerability in the tail utility of uutils coreutils allows for the ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35344rust-coreutils0.10.0-1ubuntu2~26.04.1 The dd utility in uutils coreutils suppresses errors during file trunc ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35341rust-coreutils0.10.0-1ubuntu2~26.04.1 rust-coreutils: uutils coreutils mkfifo: Information disclosure via unauthorized file permission modification — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-110928openssh-client1:10.2p1-2ubuntu3.8 openssh: openssh: authorized_keys restrict does not apply to tunnel forwarding — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2025-10990ruby3.3-dev3.3.8-2ubuntu3.1 rexml: REXML: Denial of Service via inefficient regex parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2025-10990ruby3.33.3.8-2ubuntu3.1 rexml: REXML: Denial of Service via inefficient regex parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99202linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99203linux-libc-dev7.0.0-38.38 kernel: pipe: preserve existing fasync readers on writer setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99204linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free in OCFS2 DLM debugfs interface — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99205linux-libc-dev7.0.0-38.38 kernel: sched/core: Call wakeup_preempt() for queued tasks during class change — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99206linux-libc-dev7.0.0-38.38 kernel: scsi: target: iscsi: Fix race in discovery auth updates — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99208linux-libc-dev7.0.0-38.38 kernel: kernel: Information disclosure via uninitialized buffer allocation in Intel Xe driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99209linux-libc-dev7.0.0-38.38 kernel: drm/xe: skip eviction of a BO with no resource — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99210linux-libc-dev7.0.0-38.38 kernel: accel/rocket: clear rdev on device init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99211linux-libc-dev7.0.0-38.38 kernel: netlink: reset skb headers before unicast and multicast filtering — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99212linux-libc-dev7.0.0-38.38 kernel: net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99213linux-libc-dev7.0.0-38.38 kernel: vsock: treat TCP_CLOSING as once-established — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99214linux-libc-dev7.0.0-38.38 kernel: drm/vc4: hdmi: Move packet RAM enable to PM runtime — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99215linux-libc-dev7.0.0-38.38 kernel: power: supply: core: prevent unregistering a power supply while a callback runs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99216linux-libc-dev7.0.0-38.38 kernel: Drivers: hv: Don't reset VMBus connection state on error/exit paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99999linux-libc-dev7.0.0-38.38 kernel: ipv4: validate checksum_start before completing checksum — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-85091zlib1g-dev1:1.3.dfsg+really1.3.1-1ubuntu3.1 1:1.3.dfsg+really1.3.1-1ubuntu3.2zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-85091zlib1g1:1.3.dfsg+really1.3.1-1ubuntu3.1 1:1.3.dfsg+really1.3.1-1ubuntu3.2zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-18508tar1.35+dfsg-4ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-18477tar1.35+dfsg-4ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35377rust-coreutils0.10.0-1ubuntu2~26.04.1 A logic error in the env utility of uutils coreutils causes a failure ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-35374rust-coreutils0.10.0-1ubuntu2~26.04.1 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99081linux-libc-dev7.0.0-38.38 kernel: bnxt_en: fix DMA mapping length for padded small packets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99082linux-libc-dev7.0.0-38.38 kernel: KVM: x86: Use active memslots for the per-vCPU MMIO cache — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99083linux-libc-dev7.0.0-38.38 kernel: ksmbd: fix heap out-of-bounds write in krb5_authenticate() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99085linux-libc-dev7.0.0-38.38 kernel: sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99086linux-libc-dev7.0.0-38.38 kernel: dm-integrity: validate the superblock on resume — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99087linux-libc-dev7.0.0-38.38 kernel: dm-integrity: fix NULL pointer dereference when the 'R' flag is used — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99088linux-libc-dev7.0.0-38.38 kernel: net: openvswitch: validate transport header presence in set_ipv6_addr — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99089linux-libc-dev7.0.0-38.38 kernel: ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99090linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: serialize vblank counter reads against GPU reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99091linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: B ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99092linux-libc-dev7.0.0-38.38 kernel: riscv: patch: fix handling of bpf-jit execmem addresses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99093linux-libc-dev7.0.0-38.38 kernel: mm: don't schedule deferred kernel page table freeing while booting — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99094linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel_pcie: fix TX descriptor bounds check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99095linux-libc-dev7.0.0-38.38 kernel: drm/vc4: drain the hangcheck timer and works on V3D unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99096linux-libc-dev7.0.0-38.38 kernel: io_uring/register: don't exempt disabled rings from task restrictions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99097linux-libc-dev7.0.0-38.38 kernel: tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99098linux-libc-dev7.0.0-38.38 kernel: dm-integrity: fix buffer overflow in inline mode with large tag size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99099linux-libc-dev7.0.0-38.38 kernel: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99100linux-libc-dev7.0.0-38.38 kernel: wifi: p54: validate firmware record lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99101linux-libc-dev7.0.0-38.38 kernel: ntfs: move attribute payload before shrinking its record — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99059linux-libc-dev7.0.0-38.38 kernel: wireguard: noise: reject response consumption after intermediate initiation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99060linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7603: initialize global station WCID — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99061linux-libc-dev7.0.0-38.38 kernel: wifi: brcmfmac: fix P2P device removal race in brcmf_detach() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99062linux-libc-dev7.0.0-38.38 kernel: vsock/virtio: account only unread bytes in read_skb() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99063linux-libc-dev7.0.0-38.38 kernel: dm ioctl: don't let data_start run past the buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99064linux-libc-dev7.0.0-38.38 kernel: cipso: adjust cached option offsets when removing CIPSO — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99065linux-libc-dev7.0.0-38.38 kernel: cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99066linux-libc-dev7.0.0-38.38 kernel: can: dev: init_can_skb(): restore skb header initialization — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99067linux-libc-dev7.0.0-38.38 kernel: btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99068linux-libc-dev7.0.0-38.38 kernel: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99069linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: I ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99070linux-libc-dev7.0.0-38.38 kernel: ipv6: do not warn on route notification size race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99071linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99072linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99073linux-libc-dev7.0.0-38.38 kernel: ipv4: stop exception dump when nexthop group shrinks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99074linux-libc-dev7.0.0-38.38 kernel: ipv4: stop PMTU walk when nexthop group shrinks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99075linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via memory leak in Rust Binder — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99076linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99077linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99078linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99079linux-libc-dev7.0.0-38.38 kernel: net/mlx5e: Prevent stale XSK buffer release on refill retry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99128linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via improper SCTP chunk length validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99129linux-libc-dev7.0.0-38.38 kernel: kernel: Security bypass via race condition in SELinux BPF token validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99130linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of service via infinite loop during io_uring cancellation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99131linux-libc-dev7.0.0-38.38 kernel: kernel: xfs: Disk quota bypass via improper capability check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99132linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via deadlock in XFS superblock buffer synchronization — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99133linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via improper receive window handling in af_iucv — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99134linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via race condition in mac802154 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99135linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via infinite loop in dm-integrity discard handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99136linux-libc-dev7.0.0-38.38 kernel: kernel: Data corruption via race condition in dm-crypt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99137linux-libc-dev7.0.0-38.38 kernel: cifs: don't update i_size in cifs_do_truncate without a cached handle — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99138linux-libc-dev7.0.0-38.38 kernel: kernel: Privilege escalation via use-after-free in TCP socket options — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99139linux-libc-dev7.0.0-38.38 kernel: kernel: privilege escalation via use-after-free in do_tcp_getsockopt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99140linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via race condition in tracing subsystem — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99141linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via NULL pointer dereference in tracing subsystem — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99142linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via out-of-bounds write in tracing subsystem — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99143linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via out-of-bounds access in tracing predicate parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99146linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via unvalidated DMC firmware load address in i915 driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99147linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via improper locked object handling in drm_exec — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99148linux-libc-dev7.0.0-38.38 kernel: kernel: amdgpu: memory corruption via premature eviction fence detachment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99149linux-libc-dev7.0.0-38.38 kernel: kernel: amdgpu: Denial of Service via resource leak in amdgpu_gem_userptr_ioctl — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99150linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via double reference count drop in amdgpu debugfs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99103linux-libc-dev7.0.0-38.38 kernel: workqueue: Fix unbound pool lifetime for pending pwqs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99105linux-libc-dev7.0.0-38.38 kernel: sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99106linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: free the userptr ranges when a CS fails after parser_bos — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99109linux-libc-dev7.0.0-38.38 kernel: smb: client: reject SetEA requests that do not fit the request buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99110linux-libc-dev7.0.0-38.38 kernel: smb: client: fix heap overflow in cifs_do_set_acl() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99111linux-libc-dev7.0.0-38.38 kernel: smb: client: fix data corruption with concurrent writes and O_TRUNC — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99112linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_flower: validate mask pointer after nla_next() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99113linux-libc-dev7.0.0-38.38 kernel: ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99114linux-libc-dev7.0.0-38.38 kernel: ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99115linux-libc-dev7.0.0-38.38 kernel: ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99116linux-libc-dev7.0.0-38.38 kernel: net: psp: do not inherit the Rx association on clone — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99117linux-libc-dev7.0.0-38.38 kernel: net: bridge: mcast: don't truncate the port group walk on teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99118linux-libc-dev7.0.0-38.38 kernel: drm/i915/dmc: Harden DMC firmware payload parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99120linux-libc-dev7.0.0-38.38 kernel: KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99121linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via division by zero during IPv4 route rebalancing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99122linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via unvalidated packet source in VMCI sockets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99123linux-libc-dev7.0.0-38.38 kernel: kernel: connection hijacking via missing packet source validation in virtio vsock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99124linux-libc-dev7.0.0-38.38 kernel: kernel: Information disclosure via out-of-bounds read in s390 PCI error reporting — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99125linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via multiple PMU stop callback invocations on s390 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99126linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of service via null pointer dereference in s390/ctcm — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-99127linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via misaligned memory fragment allocations in page_pool — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98337linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: don't start a ROC while scanning — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98339linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: don't filter by BSS type when removing stale entries — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98340linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: only group hidden BSSes with beacon entries — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98342linux-libc-dev7.0.0-38.38 kernel: dmaengine: wait for RCU readers before releasing dma_device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98343linux-libc-dev7.0.0-38.38 kernel: dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98344linux-libc-dev7.0.0-38.38 kernel: dmaengine: Fix device kref underflow in dma_chan_put() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98345linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: check IP header size in cfg80211_classify8021d() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98346linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: don't get the radio mask for netdev-less wdevs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98347linux-libc-dev7.0.0-38.38 kernel: IB/IPoIB: Avoid restoring OPER_UP after multicast flush — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98348linux-libc-dev7.0.0-38.38 kernel: wifi: libipw: reject too-short association responses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98349linux-libc-dev7.0.0-38.38 kernel: wifi: libipw: reject too-short beacon and probe responses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98350linux-libc-dev7.0.0-38.38 kernel: wifi: brcmfmac: cyw: pass PMKID to firmware if present — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98351linux-libc-dev7.0.0-38.38 kernel: wifi: virt_wifi: free skb when disconnected — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98352linux-libc-dev7.0.0-38.38 kernel: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98354linux-libc-dev7.0.0-38.38 kernel: RDMA/mad: Fix receive buffer leak when PKey enforcement fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98356linux-libc-dev7.0.0-38.38 kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98357linux-libc-dev7.0.0-38.38 kernel: IB/isert: wait for deferred control PDU completions before releasing the connection — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98358linux-libc-dev7.0.0-38.38 kernel: IB/iser: reject a remote invalidation of an unregistered direction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98360linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98361linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98228linux-libc-dev7.0.0-38.38 kernel: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98304linux-libc-dev7.0.0-38.38 kernel: net: bcmgenet: restore the hardware filters on open — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98306linux-libc-dev7.0.0-38.38 kernel: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98308linux-libc-dev7.0.0-38.38 kernel: ALSA: hda: trace PCM open only after assigning a stream — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98311linux-libc-dev7.0.0-38.38 kernel: wifi: virt_wifi: don't transfer operstate before register — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98312linux-libc-dev7.0.0-38.38 kernel: ALSA: 6fire: fix OOB write from device-reported iso length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98314linux-libc-dev7.0.0-38.38 kernel: ALSA: pcm: set timer->private_data before registering the PCM timer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98318linux-libc-dev7.0.0-38.38 kernel: smb: client: validate absolute native symlink targets before NT fixups — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98319linux-libc-dev7.0.0-38.38 kernel: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98320linux-libc-dev7.0.0-38.38 kernel: netfilter: flowtable: hold reference on ct until flow is released — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98321linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_nat: unregister and release hooks on error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98322linux-libc-dev7.0.0-38.38 kernel: netfilter: nft_nat: fully initialise new_addr in netmap setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98323linux-libc-dev7.0.0-38.38 kernel: RDMA/siw: Bound fragmented header copies by the remaining length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98324linux-libc-dev7.0.0-38.38 kernel: dmaengine: pxa: fix double counting of the hw descriptors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98327linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: mesh: reset the CSA state when leaving — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98328linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: add HE 6 GHz capability in the scan elems len — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98329linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: don't allow injecting frames wider than the chanctx — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98330linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: get the wiphy out of a dying network namespace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98331linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: unlist vifs when their netdev is unregistered — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98334linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: reset state when starting AP fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98335linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: abort chanswitch when leaving a mesh — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98389linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: skip gfx switch_power_profile during GPU reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98390linux-libc-dev7.0.0-38.38 kernel: x86/amd_node: Avoid divide by zero on virtualized systems — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98391linux-libc-dev7.0.0-38.38 kernel: drm/xe: Guard page-fault worker with runtime PM check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98392linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98393linux-libc-dev7.0.0-38.38 kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98394linux-libc-dev7.0.0-38.38 kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98398linux-libc-dev7.0.0-38.38 kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98401linux-libc-dev7.0.0-38.38 kernel: net: iptunnel: fix stale transport header during tunnel decapsulation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98402linux-libc-dev7.0.0-38.38 kernel: net: icmp: avoid invalid transport header access in icmp_send tracepoint — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98404linux-libc-dev7.0.0-38.38 kernel: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98406linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98407linux-libc-dev7.0.0-38.38 kernel: wifi: rsi: fix heap OOB write on key removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98408linux-libc-dev7.0.0-38.38 kernel: watchdog: rzv2h: Avoid division by zero — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98410linux-libc-dev7.0.0-38.38 kernel: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98411linux-libc-dev7.0.0-38.38 kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98412linux-libc-dev7.0.0-38.38 kernel: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98413linux-libc-dev7.0.0-38.38 kernel: selinux: always fill AVC decision in avc_has_perm_noaudit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98414linux-libc-dev7.0.0-38.38 kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98415linux-libc-dev7.0.0-38.38 kernel: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98416linux-libc-dev7.0.0-38.38 kernel: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98417linux-libc-dev7.0.0-38.38 kernel: net: xfrm: reject unrepresentable espintcp transport headers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98362linux-libc-dev7.0.0-38.38 kernel: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98363linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98366linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: validate access flags before swapping the MR's PD — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98367linux-libc-dev7.0.0-38.38 kernel: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98368linux-libc-dev7.0.0-38.38 kernel: esp: downgrade zerocopy managed frags before mutating skb frags — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98369linux-libc-dev7.0.0-38.38 kernel: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98370linux-libc-dev7.0.0-38.38 kernel: xfrm: fix compat ALLOCSPI request use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98371linux-libc-dev7.0.0-38.38 kernel: xfrm: iptfs: fix runt reassembly panic from short inner tot_len — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98372linux-libc-dev7.0.0-38.38 kernel: xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98373linux-libc-dev7.0.0-38.38 kernel: mm/hugetlb: preserve mremap address delta when skipping page tables — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98374linux-libc-dev7.0.0-38.38 kernel: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98377linux-libc-dev7.0.0-38.38 kernel: vlan: require the MAC header to be present in __vlan_insert_inner_tag() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98378linux-libc-dev7.0.0-38.38 kernel: bpf: Skip unsettled links in link iterator — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98379linux-libc-dev7.0.0-38.38 kernel: netfilter: ip6t_rpfilter: reject routes without inet6_dev — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98380linux-libc-dev7.0.0-38.38 kernel: net/sched: reject IDR error pointers when deleting actions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98381linux-libc-dev7.0.0-38.38 kernel: veth: manage XDP program pointers during channel resize — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98382linux-libc-dev7.0.0-38.38 kernel: bpf: Reject dev-bound-only programs on other devices — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98383linux-libc-dev7.0.0-38.38 kernel: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98384linux-libc-dev7.0.0-38.38 kernel: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98386linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98388linux-libc-dev7.0.0-38.38 kernel: exec: do_close_on_exec() before taking exec_update_lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98230linux-libc-dev7.0.0-38.38 kernel: xfrm: use hlist_del_init_rcu for state_cache and state_cache_input — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98231linux-libc-dev7.0.0-38.38 kernel: xfrm: serialize state GC with device state flush — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98232linux-libc-dev7.0.0-38.38 kernel: kernel: arbitrary code execution via out-of-bounds stack access in scsi_cdl_enable() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98233linux-libc-dev7.0.0-38.38 kernel: net/packet: clear RX owner on VNET header error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98234linux-libc-dev7.0.0-38.38 kernel: net/sched: hhf: cap hh_flows_limit at change time — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98235linux-libc-dev7.0.0-38.38 kernel: net/sched: act_api: release tail references on DELACTION failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98236linux-libc-dev7.0.0-38.38 kernel: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98237linux-libc-dev7.0.0-38.38 kernel: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98238linux-libc-dev7.0.0-38.38 kernel: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98239linux-libc-dev7.0.0-38.38 kernel: net: lan743x: fix RX checksum use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98240linux-libc-dev7.0.0-38.38 kernel: net: ip_tunnel: initialize `options_len` before referencing options — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98241linux-libc-dev7.0.0-38.38 kernel: ipv6: xfrm: use full sockets in local error paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98242linux-libc-dev7.0.0-38.38 kernel: dma-buf: Fix silent overflow for phys vec to sgt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98244linux-libc-dev7.0.0-38.38 kernel: btrfs: clear free space tree creation state on rebuild failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98246linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: Serialize local codec list cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98247linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_codec: validate vendor codec count length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98249linux-libc-dev7.0.0-38.38 kernel: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98251linux-libc-dev7.0.0-38.38 kernel: openvswitch: avoid reallocating confirmed conntrack labels — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98252linux-libc-dev7.0.0-38.38 kernel: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98253linux-libc-dev7.0.0-38.38 kernel: RDMA/ucma: Serialize join and leave on copy_to_user failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98200linux-libc-dev7.0.0-38.38 kernel: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98201linux-libc-dev7.0.0-38.38 kernel: Input: zero ff_effect before compat copy in input_ff_effect_from_user — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98202linux-libc-dev7.0.0-38.38 kernel: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98203linux-libc-dev7.0.0-38.38 kernel: Input: soc_button_array - check btns_desc->package.count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98204linux-libc-dev7.0.0-38.38 kernel: Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98205linux-libc-dev7.0.0-38.38 kernel: Input: evdev - zero absinfo before partial copy in EVIOCSABS — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98206linux-libc-dev7.0.0-38.38 kernel: Input: cyttsp5 - clamp the HID report size before memcpy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98207linux-libc-dev7.0.0-38.38 kernel: mmc: spi: reset bytes_xfered before retrying CRC failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98208linux-libc-dev7.0.0-38.38 kernel: mmc: sdio_uart: fix xmit_fifo leak when the port table is full — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98209linux-libc-dev7.0.0-38.38 kernel: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98210linux-libc-dev7.0.0-38.38 kernel: mmc: mxcmmc: cancel data work and watchdog on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98214linux-libc-dev7.0.0-38.38 kernel: selinux: recheck intermediate backing files on mprotect() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98215linux-libc-dev7.0.0-38.38 kernel: selinux: preserve user SID across nested backing files — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98216linux-libc-dev7.0.0-38.38 kernel: IB/hfi1: Fix the PIO_CRED credit-return mmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98217linux-libc-dev7.0.0-38.38 kernel: IB/mlx4: Fix use-after-free on pkey sysfs registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98218linux-libc-dev7.0.0-38.38 kernel: i2c: atr: fix dangling adapter pointer on add failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98221linux-libc-dev7.0.0-38.38 kernel: KEYS: trusted: Fix tpm2_load_cmd() boundary check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98223linux-libc-dev7.0.0-38.38 kernel: mm: filemap: retain mapped dropbehind folios — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98224linux-libc-dev7.0.0-38.38 kernel: mm/vma: correctly unaccount on mmap_prepare() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98226linux-libc-dev7.0.0-38.38 kernel: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98227linux-libc-dev7.0.0-38.38 kernel: memstick: ms_block: destroy io_queue workqueue on removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98279linux-libc-dev7.0.0-38.38 kernel: btrfs: handle lack of space when cleaning up verity items — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98280linux-libc-dev7.0.0-38.38 kernel: drm/xe/i2c: Disable IRQ on unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98281linux-libc-dev7.0.0-38.38 kernel: futex: Also allocate private hash on vfork() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98282linux-libc-dev7.0.0-38.38 kernel: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98284linux-libc-dev7.0.0-38.38 kernel: netlink: do not free nlk->groups while lockless readers can use it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98287linux-libc-dev7.0.0-38.38 kernel: pppoatm: ensure a writable skb header and linear data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98288linux-libc-dev7.0.0-38.38 kernel: net: stmmac: fix TSO header length truncation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98289linux-libc-dev7.0.0-38.38 kernel: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98290linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98291linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98292linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98293linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98295linux-libc-dev7.0.0-38.38 kernel: Bluetooth: coredump: Quiesce dump work on unregister — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98296linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel_pcie: validate TX skb length in send_sync — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98297linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98298linux-libc-dev7.0.0-38.38 kernel: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98299linux-libc-dev7.0.0-38.38 kernel: tcp: do not let tcp_rmem be set below 4096 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98300linux-libc-dev7.0.0-38.38 kernel: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98301linux-libc-dev7.0.0-38.38 kernel: net: bridge: mst: move switchdev call outside rcu — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98302linux-libc-dev7.0.0-38.38 kernel: net: fddi: skfp: fix NULL deref when setting the MAC address while down — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98303linux-libc-dev7.0.0-38.38 kernel: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98254linux-libc-dev7.0.0-38.38 kernel: swiotlb: use the adjusted address for the highmem page lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98255linux-libc-dev7.0.0-38.38 kernel: tcp: exclude old ACKs from tcp fast path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98256linux-libc-dev7.0.0-38.38 kernel: signal: Prevent exec() race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98257linux-libc-dev7.0.0-38.38 kernel: rds: ib: use rds_conn_drop() on protocol version mismatch — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98258linux-libc-dev7.0.0-38.38 kernel: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98259linux-libc-dev7.0.0-38.38 kernel: fs/dax: check zero or empty entry before converting xarray entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98261linux-libc-dev7.0.0-38.38 kernel: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98262linux-libc-dev7.0.0-38.38 kernel: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98263linux-libc-dev7.0.0-38.38 kernel: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98265linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98266linux-libc-dev7.0.0-38.38 kernel: ALSA: core: Fix potential UAF after asynchronous card release — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98267linux-libc-dev7.0.0-38.38 kernel: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98268linux-libc-dev7.0.0-38.38 kernel: perf: Fix null pointer access in is_include_guest_event() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98269linux-libc-dev7.0.0-38.38 kernel: btrfs: abort transaction on failure to update inode for hole punching and reflinking — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98270linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: check ras and obj before dereference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98272linux-libc-dev7.0.0-38.38 kernel: net: mvpp2: prevent buffer overflow in page_pool allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98274linux-libc-dev7.0.0-38.38 kernel: net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98275linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98276linux-libc-dev7.0.0-38.38 kernel: net: lock the socket in sock_gettstamp() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98277linux-libc-dev7.0.0-38.38 kernel: eth: fbnic: ring the doorbell if a burst ends in a drop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98278linux-libc-dev7.0.0-38.38 kernel: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98716linux-libc-dev7.0.0-38.38 kernel: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98717linux-libc-dev7.0.0-38.38 kernel: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98723linux-libc-dev7.0.0-38.38 kernel: nvmet: copy the hostid into the ctrl before creating PR pc_refs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98724linux-libc-dev7.0.0-38.38 kernel: nvmet: pci-epf: reject too-short SGL segments — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98726linux-libc-dev7.0.0-38.38 kernel: nvme-multipath: fix underflow in ANA log bounds checks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98727linux-libc-dev7.0.0-38.38 kernel: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98729linux-libc-dev7.0.0-38.38 kernel: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98731linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98736linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98743linux-libc-dev7.0.0-38.38 kernel: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98744linux-libc-dev7.0.0-38.38 kernel: ASoC: codecs: max98363: fix uninitialized stream_config->type — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98745linux-libc-dev7.0.0-38.38 kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98750linux-libc-dev7.0.0-38.38 kernel: kernel: use-after-free via race condition in TTY device registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98753linux-libc-dev7.0.0-38.38 kernel: tty: tty_port: restore TTY_IO_ERROR on activation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98759linux-libc-dev7.0.0-38.38 kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98760linux-libc-dev7.0.0-38.38 kernel: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98761linux-libc-dev7.0.0-38.38 kernel: usb: typec: tcpm: recover after failure to start the frs ams — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98769linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98772linux-libc-dev7.0.0-38.38 kernel: USB: serial: fix port tear down use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98773linux-libc-dev7.0.0-38.38 kernel: USB: cdc-acm: skip URB restart in port_shutdown if disconnected — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98774linux-libc-dev7.0.0-38.38 kernel: rust_binder: cancel deferred work items in thread exit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98471linux-libc-dev7.0.0-38.38 kernel: KVM: SEV: Do cache maintenance on the source VM during intra-host migration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98637linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98640linux-libc-dev7.0.0-38.38 kernel: HID: amd_sfh: Validate PCI BAR size before mapping — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98643linux-libc-dev7.0.0-38.38 kernel: bpf: Fix out-of-bounds read of rtt_min in sock_ops — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98644linux-libc-dev7.0.0-38.38 kernel: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98646linux-libc-dev7.0.0-38.38 kernel: tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98648linux-libc-dev7.0.0-38.38 kernel: s390/uv: Prevent potential out-of-bounds read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98650linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Fix potential races in dat skey functions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98653linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Fix _gaccess_shadow_fault() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98655linux-libc-dev7.0.0-38.38 kernel: perf: Require kernel access for text poke events — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98672linux-libc-dev7.0.0-38.38 kernel: iio: adc: stm32-adc: fix possible division by zero in processed channel — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98681linux-libc-dev7.0.0-38.38 kernel: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98685linux-libc-dev7.0.0-38.38 kernel: smb: client: discard post-EOF pagecache when extending a file via clone range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98686linux-libc-dev7.0.0-38.38 kernel: smb: client: discard post-EOF pagecache when extending a file via zero range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98690linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Fix domain reference leak when DPRX read is canceled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98691linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stopped — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98693linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Hold a router reference for each allocated HopID — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98694linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Fix KASAN reported use-after-free when request is canceled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98698linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: handle empty FILS association request payload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98700linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: set info->band for 802.3 encap offload frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98705linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: account proxy paths against the mesh path limit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98852linux-libc-dev7.0.0-38.38 kernel: net: extend IPv6 exthdr detection of tunneled packets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98853linux-libc-dev7.0.0-38.38 kernel: net: gso: limit recursive IP-in-IP segmentation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98857linux-libc-dev7.0.0-38.38 kernel: ipvs: bound LBLCR and LBLC cache growth — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98859linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of service via use-after-free in HID multitouch driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98869linux-libc-dev7.0.0-38.38 kernel: bpf: Infer zext_dst based on static register liveness analysis — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98871linux-libc-dev7.0.0-38.38 kernel: crypto: ccp - Fix possible deadlock in SEV init failure path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98872linux-libc-dev7.0.0-38.38 kernel: freevxfs: don't BUG() on unknown typed-extent type — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98873linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_conntrack_expect: zero at allocation time — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98874linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98875linux-libc-dev7.0.0-38.38 kernel: drm/nouveau/gsp: add SEC2 to GA100 chip table — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98876linux-libc-dev7.0.0-38.38 kernel: host1x: bus: Fix missing ops null check in error teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98877linux-libc-dev7.0.0-38.38 kernel: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98878linux-libc-dev7.0.0-38.38 kernel: irqchip/gic-v5: Immediately exec priority drop following activate — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98879linux-libc-dev7.0.0-38.38 kernel: isofs: handle set_blocksize failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98880linux-libc-dev7.0.0-38.38 kernel: ntfs3: handle set_blocksize failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98881linux-libc-dev7.0.0-38.38 kernel: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98882linux-libc-dev7.0.0-38.38 kernel: media: chips-media: wave5: Add range checks for dec_output_info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98883linux-libc-dev7.0.0-38.38 kernel: serial: 8250_port: recognize UPIO_AU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98884linux-libc-dev7.0.0-38.38 kernel: mmc: core: Add validation for host-provided max_segs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98885linux-libc-dev7.0.0-38.38 kernel: ima: return error early if file xattr cannot be changed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98886linux-libc-dev7.0.0-38.38 kernel: drm/gma500: return errors from Oaktrail HDMI I2C reads — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98777linux-libc-dev7.0.0-38.38 kernel: binder: fix leaked fd fixups on TF_UPDATE_TXN supersede — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98778linux-libc-dev7.0.0-38.38 kernel: binder: fix is_failure flag for superseded transaction cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98785linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98789linux-libc-dev7.0.0-38.38 kernel: bpf: Fix objects stuck in free_by_rcu_ttrace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98801linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via improper socket memory reservation handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98802linux-libc-dev7.0.0-38.38 kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98806linux-libc-dev7.0.0-38.38 kernel: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98808linux-libc-dev7.0.0-38.38 kernel: net: systemport: Fix buffer overflow in bcm_sysport_get_stats() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98810linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98811linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_api: reclaim an empty proto on the error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98812linux-libc-dev7.0.0-38.38 kernel: net/mctp: publish the mctp_dev only after it is initialised — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98816linux-libc-dev7.0.0-38.38 kernel: bpf: Fix overflow of jump offset in constant blinding — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98821linux-libc-dev7.0.0-38.38 kernel: block: reject polled dio with user integrity metadata — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98822linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: prevent AP VLAN tx from other interfaces — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98828linux-libc-dev7.0.0-38.38 kernel: wifi: ath9k: reject short WMI command responses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98838linux-libc-dev7.0.0-38.38 kernel: vt: skip screen update for DEC alignment test on backgroup consoles — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98840linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free in virtual console screen driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98843linux-libc-dev7.0.0-38.38 kernel: netfs: zero gaps in read-gaps folio to avoid writing back stale data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98844linux-libc-dev7.0.0-38.38 kernel: netfs: clear post-EOF pagecache when extending a file via write — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98849linux-libc-dev7.0.0-38.38 kernel: pfcp: fix socket lifetime on netdevice registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98850linux-libc-dev7.0.0-38.38 kernel: net/packet: prevent TX_RING byte count overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98472linux-libc-dev7.0.0-38.38 kernel: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98477linux-libc-dev7.0.0-38.38 kernel: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98481linux-libc-dev7.0.0-38.38 kernel: nfc: port100: reject frames whose declared length exceeds the received data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98482linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98485linux-libc-dev7.0.0-38.38 kernel: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98494linux-libc-dev7.0.0-38.38 kernel: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98495linux-libc-dev7.0.0-38.38 kernel: net: arp: terminate device name before lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98497linux-libc-dev7.0.0-38.38 kernel: net/mlx5e: fix swapped IPv6 IPsec policy masks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98498linux-libc-dev7.0.0-38.38 kernel: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98499linux-libc-dev7.0.0-38.38 kernel: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98501linux-libc-dev7.0.0-38.38 kernel: HID: alps: fix use-after-free on input2 registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98507linux-libc-dev7.0.0-38.38 kernel: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98508linux-libc-dev7.0.0-38.38 kernel: drm/virtio: fix NULL pointer dereference on fence allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98509linux-libc-dev7.0.0-38.38 kernel: drm/virtio: fix memory leak of fence event on execbuffer failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98510linux-libc-dev7.0.0-38.38 kernel: drm/xe/vm: nuke PTs only after unlinking contested VMAs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98511linux-libc-dev7.0.0-38.38 kernel: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98512linux-libc-dev7.0.0-38.38 kernel: drm/nouveau: RCU-free the scheduler-containing nouveau_sched — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98514linux-libc-dev7.0.0-38.38 kernel: drm/nouveau: Fix gem reference leak in validate_init() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98517linux-libc-dev7.0.0-38.38 kernel: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98518linux-libc-dev7.0.0-38.38 kernel: drm/nouveau/dmem: pin VRAM for the whole registered range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98419linux-libc-dev7.0.0-38.38 kernel: drop_monitor: fix out-of-bounds write in reset_per_cpu_data() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98421linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: require a peer station for TDLS setup confirm — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98422linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98426linux-libc-dev7.0.0-38.38 kernel: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98427linux-libc-dev7.0.0-38.38 kernel: net/sched: codel: bound the dropping loop per dequeue call — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98428linux-libc-dev7.0.0-38.38 kernel: ALSA: usb: 6fire: Avoid embedded URBs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98429linux-libc-dev7.0.0-38.38 kernel: RDMA/efa: Keep EQ resources alive while IRQ is registered — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98433linux-libc-dev7.0.0-38.38 kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98434linux-libc-dev7.0.0-38.38 kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmax — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98436linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: a ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98443linux-libc-dev7.0.0-38.38 kernel: xfs: fix cursor and pointer handling when recovering iunlink buckets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98451linux-libc-dev7.0.0-38.38 kernel: smb: client: use finish_no_open() for non-regular inodes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98452linux-libc-dev7.0.0-38.38 kernel: smb: client: clean up failed cached directory opens — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98453linux-libc-dev7.0.0-38.38 kernel: smb: client: close handle after create-context parsing failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98455linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98458linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: release unused CIS holds after channel attach — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98460linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sock: reject out-of-range OCF values — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98461linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sock: validate event length before filtering — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98467linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98469linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Fix AArch32 DBGBXVR<n> handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98470linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98581linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98582linux-libc-dev7.0.0-38.38 kernel: nfc: st21nfca: validate received frame size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98584linux-libc-dev7.0.0-38.38 kernel: net/sched: fix potential stack infoleak in em_text_dump() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98585linux-libc-dev7.0.0-38.38 kernel: eth: fbnic: Avoid rounding zero ring sizes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98592linux-libc-dev7.0.0-38.38 kernel: net: spacemit: clear TX descriptor on fragment mapping failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98595linux-libc-dev7.0.0-38.38 kernel: udp: remove a disconnected socket from the 4-tuple hash table — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98596linux-libc-dev7.0.0-38.38 kernel: ipv6: Fix dst leak for uncached routes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98597linux-libc-dev7.0.0-38.38 kernel: net: usb: sr9700: include receive overhead in the length check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98598linux-libc-dev7.0.0-38.38 kernel: ipv6: Prevent rt6_insert_exception() for dying fib6_info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98607linux-libc-dev7.0.0-38.38 kernel: drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98608linux-libc-dev7.0.0-38.38 kernel: drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98609linux-libc-dev7.0.0-38.38 kernel: drm/virtio: fix object leak when drm_gem_handle_create() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98610linux-libc-dev7.0.0-38.38 kernel: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98612linux-libc-dev7.0.0-38.38 kernel: net: usb: catc: bound the RX packet length in catc_rx_done() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98613linux-libc-dev7.0.0-38.38 kernel: bpf: Bound ownership depth through local kptrs and graph roots — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98614linux-libc-dev7.0.0-38.38 kernel: sctp: avoid livelock while updating retransmit path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98622linux-libc-dev7.0.0-38.38 kernel: net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98628linux-libc-dev7.0.0-38.38 kernel: bpf: Make post-verification instruction rewrites killable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98629linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_u32: fix manual hash table handle IDR aliasing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98630linux-libc-dev7.0.0-38.38 kernel: eth: fbnic: Fix payload page pool error cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98631linux-libc-dev7.0.0-38.38 kernel: xsk: Use a 32-bit compare in xsk_map_gen_lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98521linux-libc-dev7.0.0-38.38 kernel: drm/i915: fix incorrect RCU teardown order — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98522linux-libc-dev7.0.0-38.38 kernel: drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98525linux-libc-dev7.0.0-38.38 kernel: mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98531linux-libc-dev7.0.0-38.38 kernel: ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98536linux-libc-dev7.0.0-38.38 kernel: writeback: report a Tasks-RCU quiescent state per cgwb drain pass — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98537linux-libc-dev7.0.0-38.38 kernel: workqueue: Fix NULL current_pwq deref in flush dependency check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98538linux-libc-dev7.0.0-38.38 kernel: writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98541linux-libc-dev7.0.0-38.38 kernel: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98545linux-libc-dev7.0.0-38.38 kernel: ata: libata-scsi: bound the ATA passthru sense descriptor writes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98546linux-libc-dev7.0.0-38.38 kernel: arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98547linux-libc-dev7.0.0-38.38 kernel: af_packet: fix integer overflow in prb_calc_retire_blk_tmo() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98549linux-libc-dev7.0.0-38.38 kernel: tcp: prevent collapsing skbs across boundary in rtx queue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98550linux-libc-dev7.0.0-38.38 kernel: tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98551linux-libc-dev7.0.0-38.38 kernel: perf/core: Fill branch entries with a single assignment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98552linux-libc-dev7.0.0-38.38 kernel: perf/core: Fix a refcount leak in attach_perf_ctx_data() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98554linux-libc-dev7.0.0-38.38 kernel: vlan: ensure sufficient headroom in vlan_dev_hard_header() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98556linux-libc-dev7.0.0-38.38 kernel: gve: DQO: reject TSO packets with an out of range MSS — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98560linux-libc-dev7.0.0-38.38 kernel: net/rds: size a connection's path set by the transport it ends up with — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98569linux-libc-dev7.0.0-38.38 kernel: ip_gre: Reject enabling collect metadata through changelink — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98575linux-libc-dev7.0.0-38.38 kernel: nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-98577linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80758linux-libc-dev7.0.0-38.38 kernel: futex: Avoid private hash use-after-free on final put — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80759linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: B ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80760linux-libc-dev7.0.0-38.38 kernel: Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80761linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: B ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80762linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: Fix accept list UAF during suspend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80763linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: B ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80765linux-libc-dev7.0.0-38.38 kernel: HID: hyperv: validate initial device info bounds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80766linux-libc-dev7.0.0-38.38 kernel: HID: uclogic: fix use-after-free of inrange_timer on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80767linux-libc-dev7.0.0-38.38 kernel: HID: sensor: custom: Fix use-after-free in enable_sensor — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80768linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: H ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80769linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: H ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80770linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: H ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80771linux-libc-dev7.0.0-38.38 kernel: HID: nintendo: register input device after capabilities are set — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80772linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: H ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80774linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: H ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80775linux-libc-dev7.0.0-38.38 kernel: futex: Fix race on the initial mm->futex.phash.ref allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80776linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80777linux-libc-dev7.0.0-38.38 kernel: futex/pi: Plug private futex exec() race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80778linux-libc-dev7.0.0-38.38 kernel: futex/pi: Reject cross-mm private futex owners — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80779linux-libc-dev7.0.0-38.38 kernel: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80538linux-libc-dev7.0.0-38.38 kernel: xfs: propagate errors from xfs_rtginode_load — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80733linux-libc-dev7.0.0-38.38 kernel: net: remove WARN_ON_ONCE() from sk_mc_loop() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80734linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80735linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: o ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80736linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: t ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80737linux-libc-dev7.0.0-38.38 kernel: serial: amba-pl011: synchronize DMA teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80739linux-libc-dev7.0.0-38.38 kernel: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80740linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80741linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80742linux-libc-dev7.0.0-38.38 kernel: af_packet: Don't send zero-byte data in tpacket_snd() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80743linux-libc-dev7.0.0-38.38 kernel: ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80744linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80745linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: r ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80748linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80749linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80750linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80751linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80752linux-libc-dev7.0.0-38.38 kernel: Input: psxpad-spi - set driver data before use — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80753linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: o ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80754linux-libc-dev7.0.0-38.38 kernel: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80756linux-libc-dev7.0.0-38.38 kernel: selinux: do not cancel a policy conversion that never started — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80803linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80804linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: x ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80805linux-libc-dev7.0.0-38.38 kernel: xfs: validate attr entry pointer before field access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80806linux-libc-dev7.0.0-38.38 kernel: ext4: don't enable DAX on new encrypted files — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80807linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80808linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: e ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80809linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: o ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80810linux-libc-dev7.0.0-38.38 kernel: io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80811linux-libc-dev7.0.0-38.38 kernel: io_uring/cmd: fix iovec leak when the async cmd is not recycled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80812linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80813linux-libc-dev7.0.0-38.38 kernel: nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80814linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: r ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80815linux-libc-dev7.0.0-38.38 kernel: ALSA: scarlett2: Use a private URB for the notification endpoint — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80816linux-libc-dev7.0.0-38.38 kernel: ALSA: FCP: Use a private URB for the notification endpoint — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80817linux-libc-dev7.0.0-38.38 kernel: iommu/iommufd: Fix NULL pointer deref in iommufd_ioas_change_process when racing with iopt_map_file_pages — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80818linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-free on teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80819linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80821linux-libc-dev7.0.0-38.38 kernel: nvmet: pci-epf: put CQ ref on create_cq mapping failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80823linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80824linux-libc-dev7.0.0-38.38 kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80825linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80780linux-libc-dev7.0.0-38.38 kernel: HID: pidff: fix OOB write when hid->inputs is empty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80781linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: H ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80782linux-libc-dev7.0.0-38.38 kernel: HID: magicmouse: do not keep a stale msc->input if no input is claimed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80783linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: H ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80784linux-libc-dev7.0.0-38.38 kernel: mptcp: pm: fix memory leak from alloc-during-teardown race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80787linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80788linux-libc-dev7.0.0-38.38 kernel: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80789linux-libc-dev7.0.0-38.38 kernel: nvmet-tcp: bound SGL data length before allocating command buffers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80790linux-libc-dev7.0.0-38.38 kernel: nvmet-fc: fix invalid free in LS IOD error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80791linux-libc-dev7.0.0-38.38 kernel: nvmet-auth: zero the AUTH_RECEIVE response buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80792linux-libc-dev7.0.0-38.38 kernel: ipv6: fix use-after-free in ip6_finish_output2() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80793linux-libc-dev7.0.0-38.38 kernel: ipv4: reject undersized MTUs in ip_do_fragment() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80794linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80795linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80796linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80797linux-libc-dev7.0.0-38.38 kernel: nfc: pn533: purge fragmented skbs during cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80798linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80799linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80800linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80801linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80802linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80539linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: disallow multiple FENCE chunks in one submit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80540linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: Fix UVD decode image min size calculation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80541linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: validate GEM_CREATE domain combinations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80542linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80547linux-libc-dev7.0.0-38.38 kernel: s390/vfio_ccw: Implement a crw lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80548linux-libc-dev7.0.0-38.38 kernel: s390/vfio_ccw: Selectively expand io_mutex — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80549linux-libc-dev7.0.0-38.38 kernel: s390/vfio_ccw: Move cp cleanup out of not operational — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80550linux-libc-dev7.0.0-38.38 kernel: s390/vfio_ccw: Fix out of bounds check on CCW array — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80552linux-libc-dev7.0.0-38.38 kernel: s390/vfio_ccw: Ensure index for read/write regions are within range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80553linux-libc-dev7.0.0-38.38 kernel: s390/vfio_ccw: Cancel existing workqueues — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80555linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80557linux-libc-dev7.0.0-38.38 kernel: libceph: fix OOB read in decode_watchers() via missing bounds check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80558linux-libc-dev7.0.0-38.38 kernel: libceph: Avoid using invalid osd indices from primary_temp — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80559linux-libc-dev7.0.0-38.38 kernel: Input: sur40 - fix input device registration ordering — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80560linux-libc-dev7.0.0-38.38 kernel: openrisc: signal: do not restore privileged SR bits on sigreturn — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80561linux-libc-dev7.0.0-38.38 kernel: libceph: fix multiple unsafe decodes in decode_locker() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80562linux-libc-dev7.0.0-38.38 kernel: gpio: ml-ioh: use raw_spinlock_t for the register lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80563linux-libc-dev7.0.0-38.38 kernel: gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80564linux-libc-dev7.0.0-38.38 kernel: gve: fix NULL dereference due to missing ptp adjfine — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80565linux-libc-dev7.0.0-38.38 kernel: crypto: qce - fix error path in devm_qce_register_algs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74750linux-libc-dev7.0.0-38.38 kernel: ovpn: defer key slot crypto freeing to workqueue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74753linux-libc-dev7.0.0-38.38 kernel: perf: Reject exited events as group leaders — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80519linux-libc-dev7.0.0-38.38 kernel: ovpn: finish crypto callback cleanup before peer release — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80520linux-libc-dev7.0.0-38.38 kernel: ovpn: fix NULL dereference when killing missing key — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80521linux-libc-dev7.0.0-38.38 kernel: af_unix: Unlink scc_entry in unix_del_edge() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80522linux-libc-dev7.0.0-38.38 kernel: crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80523linux-libc-dev7.0.0-38.38 kernel: clk: spacemit: k3: set hdma clock as critical — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80524linux-libc-dev7.0.0-38.38 kernel: optee: ffa: Add NULL check in optee_ffa_lend_protmem — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80525linux-libc-dev7.0.0-38.38 kernel: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80526linux-libc-dev7.0.0-38.38 kernel: ASoC: tas2562: Validate values for volume writes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80527linux-libc-dev7.0.0-38.38 kernel: ceph: fix hanging __ceph_get_caps() with stale mds_wanted — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80528linux-libc-dev7.0.0-38.38 kernel: ceph: avoid fs reclaim while using current->journal_info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80529linux-libc-dev7.0.0-38.38 kernel: xfs: don't swallow dquot recovery verification errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80530linux-libc-dev7.0.0-38.38 kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80531linux-libc-dev7.0.0-38.38 kernel: xfs: avoid UAF on sc->tempip in xrep_tempfile_create — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80532linux-libc-dev7.0.0-38.38 kernel: xfs: fix another iunlink infinite loop bug in online fsck — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80533linux-libc-dev7.0.0-38.38 kernel: xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80534linux-libc-dev7.0.0-38.38 kernel: xfs: fix ilock leak on error in xfs_dq_get_next_id — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80535linux-libc-dev7.0.0-38.38 kernel: xfs: don't double-lock when deleting a self-referential directory — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80536linux-libc-dev7.0.0-38.38 kernel: xfs: bounds-check buffer log item's dirty bitmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80537linux-libc-dev7.0.0-38.38 kernel: xfs: fix off-by-one in rtrefcount btree root level validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80590linux-libc-dev7.0.0-38.38 kernel: inet: frags: strip GSO state from fragments before reassembly — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80684linux-libc-dev7.0.0-38.38 kernel: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80686linux-libc-dev7.0.0-38.38 kernel: mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80694linux-libc-dev7.0.0-38.38 kernel: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80695linux-libc-dev7.0.0-38.38 kernel: hwmon: (sht3x) Fix unaligned accesses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80697linux-libc-dev7.0.0-38.38 kernel: erofs: ensure valid f_path for page cache sharing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80699linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: vgic: Avoid double-deactivate of IRQs in the nested context — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80701linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: enforce cursor size limits for MOB cursors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80703linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80705linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: check if dml21_add_phantom_plane() is successful — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80707linux-libc-dev7.0.0-38.38 kernel: can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80713linux-libc-dev7.0.0-38.38 kernel: io_uring: preserve task restrictions across exec — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80715linux-libc-dev7.0.0-38.38 kernel: igc: remove napi_synchronize() in igc_down() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80717linux-libc-dev7.0.0-38.38 kernel: sctp: validate Adaptation Indication parameter length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80720linux-libc-dev7.0.0-38.38 kernel: iomap: add a separate bio_set for iomap_split_ioend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80722linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: validate individual TWT params before driver setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80727linux-libc-dev7.0.0-38.38 kernel: x86/mce: Set up the polling timer before CMCI discovery — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80729linux-libc-dev7.0.0-38.38 kernel: mm/huge_memory: initialise workingset state before folio split — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80730linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Fix crash passing ERR_PTR to kthread_stop() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80731linux-libc-dev7.0.0-38.38 kernel: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80732linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: a ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80566linux-libc-dev7.0.0-38.38 kernel: Input: hynitron_cstxxx - validate touch count and finger IDs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80567linux-libc-dev7.0.0-38.38 kernel: Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80568linux-libc-dev7.0.0-38.38 kernel: Input: synaptics-rmi4 - block s_input when F54 queue is busy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80569linux-libc-dev7.0.0-38.38 kernel: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80570linux-libc-dev7.0.0-38.38 kernel: Input: synaptics-rmi4 - zero report size on F54 work error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80571linux-libc-dev7.0.0-38.38 kernel: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80573linux-libc-dev7.0.0-38.38 kernel: Input: iforce - validate input packet lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80574linux-libc-dev7.0.0-38.38 kernel: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80575linux-libc-dev7.0.0-38.38 kernel: Input: cs40l50-vibra - validate custom data from user space — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80576linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: reject oversized IBs with per-ring packet limits — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80577linux-libc-dev7.0.0-38.38 kernel: drm/panthor: skip zero-sized firmware sections — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80578linux-libc-dev7.0.0-38.38 kernel: fbdev: core: Fix pointer desynchronization in fb_io_read() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80581linux-libc-dev7.0.0-38.38 kernel: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80582linux-libc-dev7.0.0-38.38 kernel: drm/shmem_helper: Check VMA boundaries for PMD mappings — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80583linux-libc-dev7.0.0-38.38 kernel: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80584linux-libc-dev7.0.0-38.38 kernel: s390/qeth: validate user buffer length in SNMP and ARP query ioctls — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80585linux-libc-dev7.0.0-38.38 kernel: mptcp: fastopen: only mark MPTFO subflows with SYN data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80586linux-libc-dev7.0.0-38.38 kernel: mptcp: options: reset DSS fields in case of unexpected size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80587linux-libc-dev7.0.0-38.38 kernel: mptcp: avoid combining some incoming suboptions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80588linux-libc-dev7.0.0-38.38 kernel: mptcp: reclaim forward-allocated memory on RX path errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80589linux-libc-dev7.0.0-38.38 kernel: block: stop the timeout timer when releasing a never added disk — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80964linux-libc-dev7.0.0-38.38 kernel: ALSA: virmidi: Check card index validity at probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80965linux-libc-dev7.0.0-38.38 kernel: ALSA: serial-u16550: Check card index validity at probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80966linux-libc-dev7.0.0-38.38 kernel: ALSA: portman2x4: Check card index validity at probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80967linux-libc-dev7.0.0-38.38 kernel: ALSA: pcxhr: initialize mutexes before requesting threaded IRQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80968linux-libc-dev7.0.0-38.38 kernel: ALSA: mts64: Check card index validity at probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80969linux-libc-dev7.0.0-38.38 kernel: ALSA: mpu401: Check card index validity at probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80970linux-libc-dev7.0.0-38.38 kernel: ALSA: FCP: do not copy out an uninitialised init response — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80971linux-libc-dev7.0.0-38.38 kernel: ALSA: bcd2000: clear the URB pointers on disconnect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80972linux-libc-dev7.0.0-38.38 kernel: ALSA: aloop: Check card index validity at probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80973linux-libc-dev7.0.0-38.38 kernel: ALSA: 6fire: bound the MIDI event length from the device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80975linux-libc-dev7.0.0-38.38 kernel: mfd: qnap-mcu: keep the reply buffer alive past a command timeout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80976linux-libc-dev7.0.0-38.38 kernel: seg6: reset IP6CB after IPv6 decapsulation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80977linux-libc-dev7.0.0-38.38 kernel: net: skbuff: don't touch shared zerocopy state in skb_tx_error() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80978linux-libc-dev7.0.0-38.38 kernel: net: cap advertised IP tunnel headroom — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80979linux-libc-dev7.0.0-38.38 kernel: net/smc: unregister the connection before draining the rx tasklet — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80981linux-libc-dev7.0.0-38.38 kernel: net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80983linux-libc-dev7.0.0-38.38 kernel: net/smc: fix socket refcount leak in smc_switch_conns() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80984linux-libc-dev7.0.0-38.38 kernel: net/smc: do not dereference an unset send buffer on the SMC-D teardown path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80985linux-libc-dev7.0.0-38.38 kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80986linux-libc-dev7.0.0-38.38 kernel: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80987linux-libc-dev7.0.0-38.38 kernel: NTB: ntb_transport: Reject oversized TX buffers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80849linux-libc-dev7.0.0-38.38 kernel: net/tcp-ao: fix use-after-free of current_key on reconnect to another peer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80943linux-libc-dev7.0.0-38.38 kernel: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80944linux-libc-dev7.0.0-38.38 kernel: wifi: mwifiex: Detach sync cmd buffer on interrupted wait — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80945linux-libc-dev7.0.0-38.38 kernel: crypto: iaa - unmap dst before software fallback on decompress — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80946linux-libc-dev7.0.0-38.38 kernel: fuse: copy request headers via a stack buffer for io-uring — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80947linux-libc-dev7.0.0-38.38 kernel: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80949linux-libc-dev7.0.0-38.38 kernel: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80950linux-libc-dev7.0.0-38.38 kernel: i3c: renesas: Check that the transfer is valid before accessing it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80951linux-libc-dev7.0.0-38.38 kernel: i3c: master: svc: bound IBI payload to the requested max_payload_len — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80952linux-libc-dev7.0.0-38.38 kernel: i3c: master: Fix info leak and UAF in device unregister path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80953linux-libc-dev7.0.0-38.38 kernel: i3c: master: adi: initialize the lock before enabling interrupts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80954linux-libc-dev7.0.0-38.38 kernel: i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80955linux-libc-dev7.0.0-38.38 kernel: dm-pcache: fix use-after-free and invalid seg operations in kset_replay() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80956linux-libc-dev7.0.0-38.38 kernel: dm-pcache: only hand out initialized cache segments — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80957linux-libc-dev7.0.0-38.38 kernel: dm-pcache: detect a cycle in the last-kset chain during replay — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80958linux-libc-dev7.0.0-38.38 kernel: dm-pcache: clamp the tail kset read to the segment data region — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80959linux-libc-dev7.0.0-38.38 kernel: dm-pcache: bound the persisted tail-position offset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80960linux-libc-dev7.0.0-38.38 kernel: dm-pcache: validate on-media seg_num against the cache device size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80961linux-libc-dev7.0.0-38.38 kernel: dm-pcache: validate kset key_num and intra-segment bounds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80962linux-libc-dev7.0.0-38.38 kernel: dm-pcache: validate geometry fields from on-disk cache_info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80963linux-libc-dev7.0.0-38.38 kernel: dm-stats: fix a crash if allocation of per-cpu data fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81015linux-libc-dev7.0.0-38.38 kernel: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81016linux-libc-dev7.0.0-38.38 kernel: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81017linux-libc-dev7.0.0-38.38 kernel: platform/chrome: sensorhub: Bound the EC-reported sensor number — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81018linux-libc-dev7.0.0-38.38 kernel: platform/x86: think-lmi: Free system certificate signatures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89438linux-libc-dev7.0.0-38.38 kernel: platform/x86: ISST: Validate logical CPU id and clos id — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89439linux-libc-dev7.0.0-38.38 kernel: platform/x86: ISST: Add a NULL check for sst_inst[] — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89440linux-libc-dev7.0.0-38.38 kernel: mmc: via-sdmmc: stop card-detect handling on probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89442linux-libc-dev7.0.0-38.38 kernel: platform/x86: ISST: Validate socket ID in clos_assoc ioctl — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89443linux-libc-dev7.0.0-38.38 kernel: platform/x86: ISST: Validate level in perf mask ioctls — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89444linux-libc-dev7.0.0-38.38 kernel: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89445linux-libc-dev7.0.0-38.38 kernel: iommufd: Fix UAF in selftest IOPF reporting — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89446linux-libc-dev7.0.0-38.38 kernel: iommufd: Release current IOAS on xa_store() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89447linux-libc-dev7.0.0-38.38 kernel: iommufd: Avoid locking internal accesses during unmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89449linux-libc-dev7.0.0-38.38 kernel: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89450linux-libc-dev7.0.0-38.38 kernel: iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89451linux-libc-dev7.0.0-38.38 kernel: iommu/sva: Set handle->dev before the SVA handle is visible — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89453linux-libc-dev7.0.0-38.38 kernel: iommu/amd: Put PCI device after handling PPR faults — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89454linux-libc-dev7.0.0-38.38 kernel: PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89455linux-libc-dev7.0.0-38.38 kernel: PCI: plda: Fix use-after-free of event IRQs during teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89456linux-libc-dev7.0.0-38.38 kernel: s390/dasd: Propagate partial completion length across ERP recovery — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89457linux-libc-dev7.0.0-38.38 kernel: s390/dasd: Guard sysfs discipline callbacks against unallocated private data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80988linux-libc-dev7.0.0-38.38 kernel: NTB: ntb_transport: Fail TX enqueue when the QP link is down — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80989linux-libc-dev7.0.0-38.38 kernel: net: thunderbolt: Mark the connection down when bringing it up fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80992linux-libc-dev7.0.0-38.38 kernel: net: ravb: avoid dereferencing an invalid PTP clock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80993linux-libc-dev7.0.0-38.38 kernel: net: phylink: correctly validate returned PCS in phylink_inband_caps — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80994linux-libc-dev7.0.0-38.38 kernel: net: openvswitch: fix flow mask use-after-free on flow deletion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80996linux-libc-dev7.0.0-38.38 kernel: net: l2tp: do not propagate multicast notification errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80997linux-libc-dev7.0.0-38.38 kernel: net: ipa: fix stalled modem TX queue after runtime resume — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81000linux-libc-dev7.0.0-38.38 kernel: net: tun: bound receive headroom — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81001linux-libc-dev7.0.0-38.38 kernel: slip: fix use-after-free in sl_sync() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81002linux-libc-dev7.0.0-38.38 kernel: xdp: fix zero-copy frame layout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81003linux-libc-dev7.0.0-38.38 kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81004linux-libc-dev7.0.0-38.38 kernel: ipmi:msghandler: Cancel work cleanly on an error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81005linux-libc-dev7.0.0-38.38 kernel: ipmi: si: Fix NULL pointer dereference after failed registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81006linux-libc-dev7.0.0-38.38 kernel: ipmi: Remove all sysfs files on registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81007linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81008linux-libc-dev7.0.0-38.38 kernel: interconnect: Fix use after free in icc_get() and of_icc_get_by_index() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81009linux-libc-dev7.0.0-38.38 kernel: io_uring/query: cap user size passed to copy_struct_to_user — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81010linux-libc-dev7.0.0-38.38 kernel: io_uring/waitid: honor task_work cancellation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81012linux-libc-dev7.0.0-38.38 kernel: platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81013linux-libc-dev7.0.0-38.38 kernel: platform/x86: hp-bioscfg: fix heap OOB read on empty password write — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-81014linux-libc-dev7.0.0-38.38 kernel: platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80850linux-libc-dev7.0.0-38.38 kernel: tcp: fix AO info use-after-free in tcp_ao_connect_init() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80854linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_tcm: keep port count until LUN teardown completes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80855linux-libc-dev7.0.0-38.38 kernel: fuse: fix invalidate lock leak on open O_TRUNC DAX failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80856linux-libc-dev7.0.0-38.38 kernel: fuse: fix invalidate lock leak on setattr writeback failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80857linux-libc-dev7.0.0-38.38 kernel: fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80858linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80859linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80860linux-libc-dev7.0.0-38.38 kernel: fuse: fix race between interrupt and resend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80861linux-libc-dev7.0.0-38.38 kernel: usb: xhci: bail out of setup if the controller is inaccessible — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80862linux-libc-dev7.0.0-38.38 kernel: nvme-tcp: fix usage of page_frag_cache — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80863linux-libc-dev7.0.0-38.38 kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80887linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80888linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: drop dma_buf reference on foreign-fd prime import — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80889linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80890linux-libc-dev7.0.0-38.38 kernel: sctp: reject stale cookies with mismatched verification tags — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80892linux-libc-dev7.0.0-38.38 kernel: erofs: cap LZMA stream pool size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80893linux-libc-dev7.0.0-38.38 kernel: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80894linux-libc-dev7.0.0-38.38 kernel: iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80895linux-libc-dev7.0.0-38.38 kernel: mshv: Order pt_vp_array publish against irqfd assertion path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80896linux-libc-dev7.0.0-38.38 kernel: mshv: Fix race in mshv_irqfd_deassign — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80826linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: U ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80827linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: U ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80828linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: Complete cleanup after system-resume errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80829linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80830linux-libc-dev7.0.0-38.38 kernel: usb: core: Add lock to usb_wakeup_notification() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80831linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80832linux-libc-dev7.0.0-38.38 kernel: crypto: qce - fix CCM AAD buffer underallocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80833linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80834linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80835linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80836linux-libc-dev7.0.0-38.38 kernel: crypto: virtio - bound the akcipher result length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80838linux-libc-dev7.0.0-38.38 kernel: vxlan: keep the last remote linked during FDB flush — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80839linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80840linux-libc-dev7.0.0-38.38 kernel: ipv6: seg6: clear IPv4 control block on IPIP decapsulation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80842linux-libc-dev7.0.0-38.38 kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80843linux-libc-dev7.0.0-38.38 kernel: xfrm: fix xfrm_state_construct() auth-trunc leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80844linux-libc-dev7.0.0-38.38 kernel: xfrm: ah6: validate routing header segments_left — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80845linux-libc-dev7.0.0-38.38 kernel: xfrm: avoid lock inversion in nat keepalive work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80846linux-libc-dev7.0.0-38.38 kernel: xfrm: drop ESP-in-TCP packets with no ingress device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80847linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: t ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80848linux-libc-dev7.0.0-38.38 kernel: xfrm: espintcp: fix UAF during close — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80921linux-libc-dev7.0.0-38.38 kernel: KVM: s390: vsie: zero stale crypto bits — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80922linux-libc-dev7.0.0-38.38 kernel: crypto: qcom-rng - Allow zero as a random number — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80923linux-libc-dev7.0.0-38.38 kernel: xhci: dbgtty: Fix unregister on tty_register_driver() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80924linux-libc-dev7.0.0-38.38 kernel: crypto: krb5 - use kfree_sensitive() for derived key buffers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80925linux-libc-dev7.0.0-38.38 kernel: vlan: fix skb_under_panic and races when toggling HW VLAN offload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80926linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: k ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80927linux-libc-dev7.0.0-38.38 kernel: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80928linux-libc-dev7.0.0-38.38 kernel: smack: fix cred UAF in smack_file_send_sigiotask() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80929linux-libc-dev7.0.0-38.38 kernel: sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80930linux-libc-dev7.0.0-38.38 kernel: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80931linux-libc-dev7.0.0-38.38 kernel: w1: ds28e17: reject an oversize length on an I2C block read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80932linux-libc-dev7.0.0-38.38 kernel: vsock/virtio: flush works in dependency order — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80933linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: validate default EEPROM firmware size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80934linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80935linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80936linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7925: cancel mlo_pm_work on stop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80938linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80939linux-libc-dev7.0.0-38.38 kernel: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80940linux-libc-dev7.0.0-38.38 kernel: wifi: rtw88: pci: fix resource leak on failed NAPI setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80941linux-libc-dev7.0.0-38.38 kernel: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80942linux-libc-dev7.0.0-38.38 kernel: wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80897linux-libc-dev7.0.0-38.38 kernel: netfs: release readahead folios on iterator preparation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80898linux-libc-dev7.0.0-38.38 kernel: netfs: clear PG_private_2 on copy-to-cache append failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80900linux-libc-dev7.0.0-38.38 kernel: ASoC: SDCA: Make UMP message size check more robust — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80901linux-libc-dev7.0.0-38.38 kernel: ipvs: fix the checksum validations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80902linux-libc-dev7.0.0-38.38 kernel: dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80903linux-libc-dev7.0.0-38.38 kernel: drm/xe/oa: Fix sync entry leak on OA config emit failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80904linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80906linux-libc-dev7.0.0-38.38 kernel: net: packet: fix wrong transport_header when sending VLAN-tagged frame — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80907linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: Fix UVD dpb min size calculation for H264 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80908linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: Reject UVD message with dimensions above 4096 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80909linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: Reject UVD message with invalid number of h265 refs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80910linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80911linux-libc-dev7.0.0-38.38 kernel: ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80912linux-libc-dev7.0.0-38.38 kernel: selinux: reject an unclaimed class value in security_get_classes() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80913linux-libc-dev7.0.0-38.38 kernel: selinux: require every boolean value to be defined — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80914linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80915linux-libc-dev7.0.0-38.38 kernel: drm/xe: Fix DPT allocation paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80916linux-libc-dev7.0.0-38.38 kernel: kcov: fix data corruption and race conditions on PREEMPT_RT — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80917linux-libc-dev7.0.0-38.38 kernel: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80918linux-libc-dev7.0.0-38.38 kernel: HID: core: fix number/pointer type confusion on long items — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-80920linux-libc-dev7.0.0-38.38 kernel: io_uring: defer eventfd signaling when queued from a wakeup handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74464linux-libc-dev7.0.0-38.38 kernel: net: openvswitch: fix skb leak on flow key update failure during ct — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74467linux-libc-dev7.0.0-38.38 kernel: s390/qeth: Check CAP_NET_ADMIN for private ioctls — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74468linux-libc-dev7.0.0-38.38 kernel: gpio: pch: use raw_spinlock_t for the register lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74469linux-libc-dev7.0.0-38.38 kernel: sctp: prevent peer transport count overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74471linux-libc-dev7.0.0-38.38 kernel: tracing: Check return value of __register_event() in trace_module_add_events() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74472linux-libc-dev7.0.0-38.38 kernel: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74473linux-libc-dev7.0.0-38.38 kernel: vxlan: use pskb_network_may_pull() in route_shortcircuit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74474linux-libc-dev7.0.0-38.38 kernel: vxlan: use pskb_network_may_pull() for transmit path header pulls — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74475linux-libc-dev7.0.0-38.38 kernel: vxlan: use neigh_ha_snapshot() in route_shortcircuit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74476linux-libc-dev7.0.0-38.38 kernel: veth: convert frag_list skbs before running XDP — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74477linux-libc-dev7.0.0-38.38 kernel: uprobes: Fix NULL pointer dereference in hprobe_expire() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74478linux-libc-dev7.0.0-38.38 kernel: um: vector: fix use-after-free in vector_mmsg_rx() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74479linux-libc-dev7.0.0-38.38 kernel: net: pktgen: fix proc entry use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74480linux-libc-dev7.0.0-38.38 kernel: net: bridge: stop fast-leave after deleting a port group — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74482linux-libc-dev7.0.0-38.38 kernel: mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74483linux-libc-dev7.0.0-38.38 kernel: binfmt_misc: don't leak the user namespace when the mount fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74484linux-libc-dev7.0.0-38.38 kernel: binfmt_misc: don't let an 'F' entry pin its own instance — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74485linux-libc-dev7.0.0-38.38 kernel: binfmt_misc: reject a flag character as the field delimiter — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74486linux-libc-dev7.0.0-38.38 kernel: binfmt_misc: use exe_file_deny_write_access() for the interpreter clone — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74487linux-libc-dev7.0.0-38.38 kernel: binfmt_misc: restore write access when removing an entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74488linux-libc-dev7.0.0-38.38 kernel: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-88647libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: Information disclosure via hostname verification bypass — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74342linux-libc-dev7.0.0-38.38 kernel: kernfs: link kn to its parent before the LSM init hook — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74440linux-libc-dev7.0.0-38.38 kernel: drm/xe: Wait on external BO kernel fences in exec IOCTL — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74442linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74443linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: bound DMA command body size against suffix pointer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74444linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74445linux-libc-dev7.0.0-38.38 kernel: drm/vmwgfx: reject DX_BIND_QUERY without a DX context — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74447linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74449linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74451linux-libc-dev7.0.0-38.38 kernel: drm/panthor: validate firmware interface structure sizes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74452linux-libc-dev7.0.0-38.38 kernel: drm/panthor: reject firmware sections with oversized data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74453linux-libc-dev7.0.0-38.38 kernel: drm/vc4: Zero the tile state data array before each BIN job — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74455linux-libc-dev7.0.0-38.38 kernel: can: peak_usb: validate uCAN receive record lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74456linux-libc-dev7.0.0-38.38 kernel: can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74457linux-libc-dev7.0.0-38.38 kernel: can: peak_usb: add bounds check for USB channel index — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74458linux-libc-dev7.0.0-38.38 kernel: can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74459linux-libc-dev7.0.0-38.38 kernel: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74460linux-libc-dev7.0.0-38.38 kernel: can: ems_usb: validate CPC message lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74461linux-libc-dev7.0.0-38.38 kernel: i2c: imx: Cancel hrtimer before clearing slave pointer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74462linux-libc-dev7.0.0-38.38 kernel: i2c: imx: mark I2C adapter when hardware is powered down — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74463linux-libc-dev7.0.0-38.38 kernel: i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74520linux-libc-dev7.0.0-38.38 kernel: iommu/iommufd: Fix IOPF group ownership UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74523linux-libc-dev7.0.0-38.38 kernel: qede: sync udp_tunnel ports outside qede_lock in the recovery path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74524linux-libc-dev7.0.0-38.38 kernel: riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74525linux-libc-dev7.0.0-38.38 kernel: net: sxgbe: free TX rings on RX allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74526linux-libc-dev7.0.0-38.38 kernel: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74528linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: hold conn in hci_past_sync() callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74531linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_conn: hold conn reference in abort_conn_sync() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74532linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel: Validate length before parsing diagnostics TLV — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74536linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: fix leaking sk after socket release — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74538linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: lock sk in iso_connect_ind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74539linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: lock sk in iso_sock_getname — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74540linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74541linux-libc-dev7.0.0-38.38 kernel: Bluetooth: ISO: clear iso_data always when detaching conn from hcon — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74542linux-libc-dev7.0.0-38.38 kernel: netfs: Fix folio_queue ENOMEM in writeback by adding a mempool — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74545linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: r ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74546linux-libc-dev7.0.0-38.38 kernel: hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74547linux-libc-dev7.0.0-38.38 kernel: hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74548linux-libc-dev7.0.0-38.38 kernel: forcedeth: fix UAF of txrx_stats in nv_remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74549linux-libc-dev7.0.0-38.38 kernel: hwmon: (nct6775-core) Prevent access to unsupported weight registers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74550linux-libc-dev7.0.0-38.38 kernel: net: do not send ICMP/NDISC Redirects when peer allocation fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74551linux-libc-dev7.0.0-38.38 kernel: hwmon: (nzxt-smart2) DMA-align output buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74491linux-libc-dev7.0.0-38.38 kernel: of/address: Fix NULL bus dereference in of_pci_range_parser_one() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74492linux-libc-dev7.0.0-38.38 kernel: netfilter: ipset: do not update comments from kernel-side hash adds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74493linux-libc-dev7.0.0-38.38 kernel: net/smc: fix socket use-after-free during link group termination — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74494linux-libc-dev7.0.0-38.38 kernel: ksmbd: reject repeated SMB2 NEGOTIATE requests — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74495linux-libc-dev7.0.0-38.38 kernel: igbvf: Fix leak in TX DMA error cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74496linux-libc-dev7.0.0-38.38 kernel: fou: Fix use-after-free in fou_create() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74497linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: Clamp frame size in implicit-feedback mode — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74498linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74499linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74500linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: fix stack info leak in RME Digiface status — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74501linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: fix use-after-free in ump_to_endpoint() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74502linux-libc-dev7.0.0-38.38 kernel: ALSA: ump: fix double free of out_cvts on rawmidi error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74503linux-libc-dev7.0.0-38.38 kernel: ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74504linux-libc-dev7.0.0-38.38 kernel: ALSA: seq: Fix division by zero in initialize_timer() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74505linux-libc-dev7.0.0-38.38 kernel: ALSA: 6fire: Fix UAF at error handling during probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74507linux-libc-dev7.0.0-38.38 kernel: Bluetooth: HIDP: validate numbered report payloads — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74508linux-libc-dev7.0.0-38.38 kernel: Bluetooth: HIDP: reject frames without a transaction header — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74513linux-libc-dev7.0.0-38.38 kernel: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74516linux-libc-dev7.0.0-38.38 kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74517linux-libc-dev7.0.0-38.38 kernel: KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74518linux-libc-dev7.0.0-38.38 kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-88648libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: Cross-domain certificate restriction bypass via incomplete X.509 validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-95184libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: legitimate user certificates incorrectly rejected causing denial of service — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-95209libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: legitimate CA certificates incorrectly rejected causing denial of service — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-95210libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: certificates with invalid extensions incorrectly accepted — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-78663stdlibv1.26.7 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/bin/pebble
MEDIUM CVE-2026-13757libp11-kit00.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-103111libpcre2-8-010.46-1build1 pcre2: pcre2: Out-of-bounds write via crafted regular expression — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-86145libpcre2-8-010.46-1build1 pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89156libpcre2-8-010.46-1build1 PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89157libpcre2-8-010.46-1build1 pcre2: PCRE2: Out-of-bounds write via large pattern input — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89158libpcre2-8-010.46-1build1 PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89160libpcre2-8-010.46-1build1 pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89161libpcre2-8-010.46-1build1 pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89162libpcre2-8-010.46-1build1 pcre2: PCRE2: Information disclosure via pcre2_serialize_encode — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2025-10990libruby3.33.3.8-2ubuntu3.1 rexml: REXML: Denial of Service via inefficient regex parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-78660stdlibv1.26.7 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/bin/pebble
MEDIUM CVE-2026-78659stdlibv1.26.7 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/bin/pebble
MEDIUM CVE-2026-107161libsasl2-22.1.28+dfsg1-9ubuntu3 cyrus-sasl: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-107161libsasl2-modules-db2.1.28+dfsg1-9ubuntu3 cyrus-sasl: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-56866stdlibv1.26.7 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — usr/bin/pebble
MEDIUM CVE-2026-97032stdlibv1.26.7 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/bin/pebble
MEDIUM CVE-2026-97030stdlibv1.26.7 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — usr/bin/pebble
MEDIUM CVE-2026-102473dash0.5.12-12ubuntu3 dash: dash: Super-polynomial backtracking in pmatch when libc fnmatch is disabled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-102474dash0.5.12-12ubuntu3 dash: dash: Heap out-of-bounds write in conv_escape via undersized Unicode escape reservation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2024-52005git1:2.53.0-1ubuntu1 git: The sideband payload is passed unfiltered to the terminal in git — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2024-52005git-man1:2.53.0-1ubuntu1 git: The sideband payload is passed unfiltered to the terminal in git — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-94448stdlibv1.26.7 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — usr/bin/pebble
MEDIUM CVE-2026-18374libc-bin2.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc-bin2.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc-dev-bin2.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc-dev-bin2.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc-gconv-modules-extra2.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc-gconv-modules-extra2.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc62.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc62.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-18374libc6-dev2.43-2ubuntu2.4 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89092libc6-dev2.43-2ubuntu2.4 glibc: nscd stack overflow leads to degraded DNS resolution — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-94440stdlibv1.26.7 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — usr/bin/pebble
MEDIUM CVE-2026-94439stdlibv1.26.7 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — usr/bin/pebble
MEDIUM CVE-2025-66382libexpat12.7.4-1ubuntu0.2 libexpat: libexpat: Denial of service via crafted file processing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-67693libgnutls30t643.8.12-2ubuntu1.1 gnutls: gnutls: Information disclosure via contradictory Key Usage and Extended Key Usage extensions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2023-26242linux-libc-dev7.0.0-38.38 kernel: kernel: fpga: dfl-afu: integer overflow in afu_mmio_region_get_by_offset() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2023-31082linux-libc-dev7.0.0-38.38 kernel: sleeping function called from an invalid context in gsmld_write — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2023-53642linux-libc-dev7.0.0-38.38 kernel: x86: fix clear_user_rep_good() exception handling annotation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2023-54187linux-libc-dev7.0.0-38.38 kernel: Linux kernel (F2FS): Data corruption and denial of service when moving a directory — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2024-35895linux-libc-dev7.0.0-38.38 kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2024-53216linux-libc-dev7.0.0-38.38 kernel: nfsd: release svc_expkey/svc_export with rcu_work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-100070linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-100071linux-libc-dev7.0.0-38.38 kernel: net: hsr: free learned nodes on device setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-100073linux-libc-dev7.0.0-38.38 kernel: ext4: fix transaction overflow during writeback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-100075linux-libc-dev7.0.0-38.38 kernel: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-100076linux-libc-dev7.0.0-38.38 kernel: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-100077linux-libc-dev7.0.0-38.38 kernel: drm/msm: Recover HW before retire hung submit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-100078linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: w ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-100079linux-libc-dev7.0.0-38.38 kernel: usb: typec: ucsi: unregister debugfs entries on teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-64190linux-libc-dev7.0.0-38.38 kernel: net: team: fix NULL pointer dereference in team_xmit during mode change — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-68452linux-libc-dev7.0.0-38.38 kernel: s390/zcrypt: Validate length for CCA AES cipher key requests — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-68453linux-libc-dev7.0.0-38.38 kernel: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-72094linux-libc-dev7.0.0-38.38 kernel: dma-buf: dma-fence: Fix potential NULL pointer dereference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-72200linux-libc-dev7.0.0-38.38 kernel: ntfs: detect mapping-pairs LCN accumulator overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-72203linux-libc-dev7.0.0-38.38 kernel: ntfs: skip extent mft records in writeback to prevent deadlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-72404linux-libc-dev7.0.0-38.38 kernel: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2013-7445linux-libc-dev7.0.0-38.38 kernel: memory exhaustion via crafted Graphics Execution Manager (GEM) objects — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2015-7837linux-libc-dev7.0.0-38.38 kernel: securelevel disabled after kexec — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2016-8660linux-libc-dev7.0.0-38.38 kernel: xfs: local DoS due to a page lock order bug in the XFS seek hole/data implementation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2018-17977linux-libc-dev7.0.0-38.38 kernel: Mishandled interactions among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets resulting in a denial of service — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2019-15794linux-libc-dev7.0.0-38.38 kernel: Overlayfs in the Linux kernel and shiftfs not restoring original value on error leading to a refcount underflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2021-3714linux-libc-dev7.0.0-38.38 kernel: Remote Page Deduplication Attacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2021-3864linux-libc-dev7.0.0-38.38 kernel: descendant's dumpable setting with certain SUID binaries — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-0400linux-libc-dev7.0.0-38.38 kernel: Out of bounds read in the smc protocol stack — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-0480linux-libc-dev7.0.0-38.38 kernel: memcg does not limit the number of POSIX file locks allowing memory exhaustion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-1247linux-libc-dev7.0.0-38.38 kernel: A race condition bug in rose_connect() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-25836linux-libc-dev7.0.0-38.38 Bluetooth® Low Energy Pairing in Bluetooth Core Specification v4. ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-2961linux-libc-dev7.0.0-38.38 kernel: race condition in rose_bind() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-3238linux-libc-dev7.0.0-38.38 kernel: ntfs3 local privledge escalation if NTFS character set and remount and umount called simultaneously — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-4543linux-libc-dev7.0.0-38.38 kernel: KASLR Prefetch Bypass Breaks KPTI — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-49940linux-libc-dev7.0.0-38.38 kernel: tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-50090linux-libc-dev7.0.0-38.38 kernel: btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-50380linux-libc-dev7.0.0-38.38 kernel: mm: /proc/pid/smaps_rollup: fix no vma's null-deref — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2022-50551linux-libc-dev7.0.0-38.38 kernel: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2023-0030linux-libc-dev7.0.0-38.38 kernel: Use after Free in nvkm_vmm_pfn_map — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2023-0160linux-libc-dev7.0.0-38.38 kernel: possibility of deadlock in libbpf function sock_hash_delete_elem — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2023-1193linux-libc-dev7.0.0-38.38 kernel: use-after-free in setup_async_work() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74667linux-libc-dev7.0.0-38.38 kernel: net/packet: reset the MAC header on the packet-socket transmit path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74668linux-libc-dev7.0.0-38.38 kernel: packet: use consistent hard_header_len in TX_RING send path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74669linux-libc-dev7.0.0-38.38 kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74670linux-libc-dev7.0.0-38.38 kernel: ipvs: stop estimator after disabled calc phase — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74671linux-libc-dev7.0.0-38.38 kernel: ima: fix out-of-bounds read in xattr_verify() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74673linux-libc-dev7.0.0-38.38 kernel: Input: evdev - fix information leak in evdev_pass_values() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74674linux-libc-dev7.0.0-38.38 kernel: mm: fix incorrect flush address in direct page table reclaim — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74675linux-libc-dev7.0.0-38.38 kernel: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74676linux-libc-dev7.0.0-38.38 kernel: vt: add permission check for KDSKBMETA ioctl — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74678linux-libc-dev7.0.0-38.38 kernel: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74679linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_ncm: Use unsigned int for ndp_index — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74680linux-libc-dev7.0.0-38.38 kernel: usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74681linux-libc-dev7.0.0-38.38 kernel: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74682linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: fix OOB write on Type II inbound URBs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74683linux-libc-dev7.0.0-38.38 kernel: Input: evdev - sanitize event type index when fetching event masks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74685linux-libc-dev7.0.0-38.38 kernel: hwmon: (ltc4282) Clamp negative current limits — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74686linux-libc-dev7.0.0-38.38 kernel: rqspinlock: Reset tail when preserving queue on deadlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74688linux-libc-dev7.0.0-38.38 kernel: sctp: clear control chunk transport if it is being removed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74691linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74692linux-libc-dev7.0.0-38.38 kernel: net/smc: fix TOCTOU race between smc_listen_out() and listener close — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74693linux-libc-dev7.0.0-38.38 kernel: net: prestera: validate firmware header length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74580linux-libc-dev7.0.0-38.38 kernel: vhost: reset the vring metadata cache on vring reconfiguration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74646linux-libc-dev7.0.0-38.38 kernel: misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74647linux-libc-dev7.0.0-38.38 kernel: misc: fastrpc: Remove buffer from list prior to unmap operation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74648linux-libc-dev7.0.0-38.38 kernel: staging: rtl8723bs: validate monitor transmit frame lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74649linux-libc-dev7.0.0-38.38 kernel: staging: rtl8723bs: fix missing shared-key auth challenge length check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74650linux-libc-dev7.0.0-38.38 kernel: staging: rtl8723bs: fix OOB read in WMM_param_handler() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74651linux-libc-dev7.0.0-38.38 kernel: staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74652linux-libc-dev7.0.0-38.38 kernel: serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74654linux-libc-dev7.0.0-38.38 kernel: serial: 8250_dma: Clear stale RX state on shutdown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74655linux-libc-dev7.0.0-38.38 kernel: serial: qcom-geni: fix TX DMA buffer flush — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74656linux-libc-dev7.0.0-38.38 kernel: ipv4: fix use-after-free in fib_nhc_update_mtu() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74657linux-libc-dev7.0.0-38.38 kernel: ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74658linux-libc-dev7.0.0-38.38 kernel: futex: Prevent robust futex exit race some more — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74659linux-libc-dev7.0.0-38.38 kernel: net: bridge: mrp: fix uninitialised bytes on the wire — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74660linux-libc-dev7.0.0-38.38 kernel: netfilter: ebt_nflog: pin the NFLOG backend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74661linux-libc-dev7.0.0-38.38 kernel: mac802154: fix netdev use-after-free in beacon worker — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74662linux-libc-dev7.0.0-38.38 kernel: inet: frags: publish queues before arming timer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74663linux-libc-dev7.0.0-38.38 kernel: net/sched: reject overly deep qdisc hierarchies — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74664linux-libc-dev7.0.0-38.38 kernel: net: openvswitch: reallocate update replies for mismatched IDs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74665linux-libc-dev7.0.0-38.38 kernel: net: fix skb length accounting after generic XDP frag adjustment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74666linux-libc-dev7.0.0-38.38 kernel: packet: synchronize pressure clearing with ring reconfiguration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74720linux-libc-dev7.0.0-38.38 kernel: bpf: Preserve pointer state for commuted arithmetic — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74721linux-libc-dev7.0.0-38.38 kernel: accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74722linux-libc-dev7.0.0-38.38 kernel: btrfs: fix memory leak in btrfs_do_encoded_write() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74726linux-libc-dev7.0.0-38.38 kernel: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74727linux-libc-dev7.0.0-38.38 kernel: ovpn: skip rehash for peers already removed from by_id — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74728linux-libc-dev7.0.0-38.38 kernel: xfs: handle NULL b_addr in xfs_buf_free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74730linux-libc-dev7.0.0-38.38 kernel: NFS: Pin the 'struct nfs_server' during a FREE_STATEID call — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74734linux-libc-dev7.0.0-38.38 kernel: firewire: ohci: fix NULL pointer dereference in ar_context_release — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74735linux-libc-dev7.0.0-38.38 kernel: l2tp: fix tunnel and session refcount leak on seq_file release — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74736linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_bpf: reject dev-bound programs bound to a different device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74737linux-libc-dev7.0.0-38.38 kernel: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74738linux-libc-dev7.0.0-38.38 kernel: regmap: sdw-mbq: don't call an unset readable_reg callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74739linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_u32: skip hash tables in u32_bind_class() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74740linux-libc-dev7.0.0-38.38 kernel: net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74741linux-libc-dev7.0.0-38.38 kernel: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74742linux-libc-dev7.0.0-38.38 kernel: veth: fix queue index used to wake the peer txq in veth_poll — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74743linux-libc-dev7.0.0-38.38 kernel: macvlan: inherit needed_headroom and needed_tailroom from lowerdev — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74745linux-libc-dev7.0.0-38.38 kernel: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74746linux-libc-dev7.0.0-38.38 kernel: netfilter: flowtable: publish GC-visible tuple last — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74747linux-libc-dev7.0.0-38.38 kernel: ipvs: revalidate ihl to prevent out-of-bounds access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74748linux-libc-dev7.0.0-38.38 kernel: netfilter: ipset: fix refcount race between list:set GC and swap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74694linux-libc-dev7.0.0-38.38 kernel: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74695linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74696linux-libc-dev7.0.0-38.38 kernel: tcp: fix TFO max_qlen accounting across reuseport migration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74697linux-libc-dev7.0.0-38.38 kernel: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74698linux-libc-dev7.0.0-38.38 kernel: net/mlx5e: fix BQL reset on SQ re-activation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74699linux-libc-dev7.0.0-38.38 kernel: drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74701linux-libc-dev7.0.0-38.38 kernel: net/openvswitch: check Ethernet header length in key_extract() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74702linux-libc-dev7.0.0-38.38 kernel: vhost-scsi: reject feature changes after endpoint — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74703linux-libc-dev7.0.0-38.38 kernel: vhost-scsi: Validate T10 PI scatterlist counts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74704linux-libc-dev7.0.0-38.38 kernel: net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74705linux-libc-dev7.0.0-38.38 kernel: udp: fix potential use-after-free in tunnel segmentation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74706linux-libc-dev7.0.0-38.38 kernel: bnge: Fix NULL pointer dereference in aux device release — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74707linux-libc-dev7.0.0-38.38 kernel: xsk: validate metadata when processing requests — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74708linux-libc-dev7.0.0-38.38 kernel: xsk: validate launch-time metadata size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74709linux-libc-dev7.0.0-38.38 kernel: xsk: clear metadata pointer when no timestamp is requested — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74710linux-libc-dev7.0.0-38.38 kernel: xsk: require at least 16 bytes of TX metadata — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74712linux-libc-dev7.0.0-38.38 kernel: vdpa/mlx5: Fix buffer length in create_direct_keys() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74716linux-libc-dev7.0.0-38.38 kernel: accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74717linux-libc-dev7.0.0-38.38 kernel: net/mlx5: fw_tracer, return NULL on create error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74718linux-libc-dev7.0.0-38.38 kernel: devlink: fix net namespace reference leak in reload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74719linux-libc-dev7.0.0-38.38 kernel: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74581linux-libc-dev7.0.0-38.38 kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74582linux-libc-dev7.0.0-38.38 kernel: packet: use consistent hard_header_len in non-ring send paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74583linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_route: fix fastmap use-after-free on filter — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74585linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Bound the DROM dual link port number before indexing sw->ports — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74586linux-libc-dev7.0.0-38.38 kernel: sctp: clear new_transport when removing a peer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74587linux-libc-dev7.0.0-38.38 kernel: sctp: fix use-after-free of cached ASCONF chunk — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74588linux-libc-dev7.0.0-38.38 kernel: sctp: keep chunk->transport in step with the list it is queued on — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74589linux-libc-dev7.0.0-38.38 kernel: bpf, sockmap: Fix sk_redir use-after-free in send verdict — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74590linux-libc-dev7.0.0-38.38 kernel: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74591linux-libc-dev7.0.0-38.38 kernel: mm/filemap: __filemap_add_folio() restore index before retrying — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74592linux-libc-dev7.0.0-38.38 kernel: ima: Instantiate file_truncate and path_truncate hooks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74593linux-libc-dev7.0.0-38.38 kernel: sched_ext: Take cgroup_lock() first in scx_cgroup_lock() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74594linux-libc-dev7.0.0-38.38 kernel: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74595linux-libc-dev7.0.0-38.38 kernel: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74596linux-libc-dev7.0.0-38.38 kernel: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74597linux-libc-dev7.0.0-38.38 kernel: ip6_tunnel: clear skb2->cb[] in ip6ip6_err() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74598linux-libc-dev7.0.0-38.38 kernel: ipv6: fix Route Information option length validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74599linux-libc-dev7.0.0-38.38 kernel: mm/ptdump: always stabilise against page table freeing using init_mm — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74600linux-libc-dev7.0.0-38.38 kernel: mm/page_table_check: skip special zero mappings — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74601linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Use current_context for safe per-CPU buffer swap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74552linux-libc-dev7.0.0-38.38 kernel: hwmon: (lm90) Only report alarms if driver is ready — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74555linux-libc-dev7.0.0-38.38 kernel: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74556linux-libc-dev7.0.0-38.38 kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74557linux-libc-dev7.0.0-38.38 kernel: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74558linux-libc-dev7.0.0-38.38 kernel: xsk: reclaim invalid Tx descriptors in ZC batch path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74559linux-libc-dev7.0.0-38.38 kernel: xsk: drain continuation descs after overflow in xsk_build_skb() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74560linux-libc-dev7.0.0-38.38 kernel: xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74561linux-libc-dev7.0.0-38.38 kernel: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74562linux-libc-dev7.0.0-38.38 kernel: nexthop: take nh->lock for f6i_list walks in replace check and notify — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74563linux-libc-dev7.0.0-38.38 kernel: rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74564linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74566linux-libc-dev7.0.0-38.38 kernel: keys: make keyring key-chunk byte order agree with keyring_diff_objects() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74567linux-libc-dev7.0.0-38.38 kernel: keys: fix out-of-bounds read in keyring_get_key_chunk() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74569linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74572linux-libc-dev7.0.0-38.38 kernel: btrfs: zoned: fix deadlock between metadata writeback and transaction commit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74573linux-libc-dev7.0.0-38.38 kernel: iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74574linux-libc-dev7.0.0-38.38 kernel: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74575linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Prevent XDomain delayed work use-after-free on disconnect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74576linux-libc-dev7.0.0-38.38 kernel: mm/slab: prevent unbounded recursion in free path with new kmalloc type — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74577linux-libc-dev7.0.0-38.38 kernel: net: mpls: initialize rtm_tos in mpls_getroute() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74579linux-libc-dev7.0.0-38.38 kernel: netfilter: nft_payload: fix mask build for partial field offload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74624linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_conntrack: defer invalid log until after unlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74625linux-libc-dev7.0.0-38.38 kernel: netfilter: bridge: release template ct on non-IP path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74626linux-libc-dev7.0.0-38.38 kernel: NTB: ntb_netdev: Preserve RX queue depth on allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74627linux-libc-dev7.0.0-38.38 kernel: net: devmem: prevent net-iov / page mixing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74628linux-libc-dev7.0.0-38.38 kernel: net/x25: fix use-after-free of the socket by its timers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74629linux-libc-dev7.0.0-38.38 kernel: net/dibs: Correct freeing of dmb_clientid_arr — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74630linux-libc-dev7.0.0-38.38 kernel: ipv6: prevent in6_dev_get() from resurrecting inet6_dev — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74631linux-libc-dev7.0.0-38.38 kernel: net: smc: fix splice entry lifetime imbalance in smc_rx_splice — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74632linux-libc-dev7.0.0-38.38 kernel: mm/huge_memory: fix huge_zero_pfn race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74633linux-libc-dev7.0.0-38.38 kernel: tracing: Fix NULL pointer dereference in module event cache removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74634linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Prevent subbuf order change when resizing is disabled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74635linux-libc-dev7.0.0-38.38 kernel: fbdev: bitblit: bound-check glyph index in bit_cursor() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74636linux-libc-dev7.0.0-38.38 kernel: tracing: Fix race between update_event_fields and, event_define_fields — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74637linux-libc-dev7.0.0-38.38 kernel: perf/core: Fix group leader use-after-free after sibling detach — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74638linux-libc-dev7.0.0-38.38 kernel: drm/v3d: Serialize the scheduler timeout handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74639linux-libc-dev7.0.0-38.38 kernel: ALSA: us144mkii: re-anchor capture URBs on resubmission — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74640linux-libc-dev7.0.0-38.38 kernel: ALSA: FCP: fix OOB write in fcp_meter_ctl_get() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74641linux-libc-dev7.0.0-38.38 kernel: ALSA: usx2y: bound the hwdep mmap fault offset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74643linux-libc-dev7.0.0-38.38 kernel: samples/damon/mtier: error out for zero quota goal target values — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74644linux-libc-dev7.0.0-38.38 kernel: mm/damon/ops-common: putback folios on invalid migrate nid — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74645linux-libc-dev7.0.0-38.38 kernel: mm/damon/lru_sort: error out for >10000 active_mem_bp — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74602linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74603linux-libc-dev7.0.0-38.38 kernel: ptp: ocp: Fix board ID over-read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74604linux-libc-dev7.0.0-38.38 kernel: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74606linux-libc-dev7.0.0-38.38 kernel: eventfs: Fix use-after-free in eventfs_remove_rec() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74607linux-libc-dev7.0.0-38.38 kernel: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74608linux-libc-dev7.0.0-38.38 kernel: smb: client: Fix use-after-free in cifs_try_adding_channels() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74609linux-libc-dev7.0.0-38.38 kernel: tipc: read le->link under the node lock in tipc_node_link_down() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74610linux-libc-dev7.0.0-38.38 kernel: tls: don't leave a full plaintext sk_msg ring unpushed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74611linux-libc-dev7.0.0-38.38 kernel: tls: rx: restore msg_iter before TLS 1.3 optimistic retry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74612linux-libc-dev7.0.0-38.38 kernel: veth: fix skb length accounting after XDP frag adjustment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74613linux-libc-dev7.0.0-38.38 kernel: vsock/virtio: avoid refilling the RX queue after teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74614linux-libc-dev7.0.0-38.38 kernel: vsock/virtio: read virtqueues under worker locks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74615linux-libc-dev7.0.0-38.38 kernel: vxlan: do not arm the ageing timer on a device that is down — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74616linux-libc-dev7.0.0-38.38 kernel: xdp: reject clones that overrun skb_shared_info tailroom — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74617linux-libc-dev7.0.0-38.38 kernel: dibs: initialise dibs->lock in dibs_dev_alloc() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74618linux-libc-dev7.0.0-38.38 kernel: binfmt_misc: don't warn when the mount is completed from another user namespace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74619linux-libc-dev7.0.0-38.38 kernel: ovl: don't warn when the mount is completed from another user namespace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74620linux-libc-dev7.0.0-38.38 kernel: net/sched: act_gact, act_police: range check the fallback control action — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74621linux-libc-dev7.0.0-38.38 kernel: net/sched: act_ct: fix sk_buff leak when the header checks reject a packet — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74622linux-libc-dev7.0.0-38.38 kernel: net: atlantic: free RX pages of consumed but not refilled buffers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-74623linux-libc-dev7.0.0-38.38 kernel: net: atlantic: free stranded TX buffers on ring deinit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90016linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90017linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90018linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90019linux-libc-dev7.0.0-38.38 kernel: usb: gadget: fix null pointer dereference in usb_put_function_instance() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90020linux-libc-dev7.0.0-38.38 kernel: USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90024linux-libc-dev7.0.0-38.38 kernel: usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90025linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90026linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90028linux-libc-dev7.0.0-38.38 kernel: usb: typec: hd3ss3220: track VBUS enable state per consumer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90029linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90030linux-libc-dev7.0.0-38.38 kernel: usb: dwc3: clear forceRM when issuing EndTransfer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90031linux-libc-dev7.0.0-38.38 kernel: usb-storage: ene_ub6250: fix race between scan work and probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90032linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90033linux-libc-dev7.0.0-38.38 kernel: ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90034linux-libc-dev7.0.0-38.38 kernel: usb: image: mdc800: change kmalloc() to kzalloc() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90035linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: fix division by zero in get_estimated_bw() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90039linux-libc-dev7.0.0-38.38 kernel: NFSD: Guard admin state-revocation walks with NFSD_NET_UP — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90040linux-libc-dev7.0.0-38.38 kernel: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90041linux-libc-dev7.0.0-38.38 kernel: HID: sony: clean up device list on probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90042linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90043linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: z ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89909linux-libc-dev7.0.0-38.38 kernel: LoongArch: KVM: Free init resources if kvm_init() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89987linux-libc-dev7.0.0-38.38 kernel: mm/huge_memory: transfer the pmd dirty bit to the folio on zap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89989linux-libc-dev7.0.0-38.38 kernel: ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89990linux-libc-dev7.0.0-38.38 kernel: ceph: lock mutex in ceph_mds_check_access() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89991linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89992linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89993linux-libc-dev7.0.0-38.38 kernel: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89994linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89995linux-libc-dev7.0.0-38.38 kernel: dma-direct: return struct page from dma_direct_alloc_from_pool() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89997linux-libc-dev7.0.0-38.38 kernel: dm: fix resume-vs-remove race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89999linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: H ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90000linux-libc-dev7.0.0-38.38 kernel: HID: rmi: fix OOB access with undersized RMI reports — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90001linux-libc-dev7.0.0-38.38 kernel: HID: bpf: serialize device reference release in struct_ops destroy path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90005linux-libc-dev7.0.0-38.38 kernel: samples/damon/wsse: handle damon_start() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90006linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90007linux-libc-dev7.0.0-38.38 kernel: scsi: pm8001: Use rollback index when freeing MSI-X vectors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90008linux-libc-dev7.0.0-38.38 kernel: scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90011linux-libc-dev7.0.0-38.38 kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90012linux-libc-dev7.0.0-38.38 kernel: spi: Fix DMA mapping ownership on partial map failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90014linux-libc-dev7.0.0-38.38 kernel: tracing: Have show_event_filters/triggers files take trace array ref — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90015linux-libc-dev7.0.0-38.38 kernel: xhci: fix lost bounce buffers on TDs spanning several ring segments — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90073linux-libc-dev7.0.0-38.38 kernel: net/sched: hhf: clamp quantum before hhf_change() to avoid overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90074linux-libc-dev7.0.0-38.38 kernel: net/sched: fq_pie: clamp default quantum to avoid signed overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90075linux-libc-dev7.0.0-38.38 kernel: net/sched: fq_codel: clamp default quantum and mtu — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90076linux-libc-dev7.0.0-38.38 kernel: net/sched: fq: add overflow bounds to quantum and initial quantum — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90077linux-libc-dev7.0.0-38.38 kernel: net: fix a resource leak in copy_net_ns() error handling path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90078linux-libc-dev7.0.0-38.38 kernel: net/sched: act_skbmod: fix length calculations and avoid invalid header warnings — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90079linux-libc-dev7.0.0-38.38 kernel: octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90080linux-libc-dev7.0.0-38.38 kernel: octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90081linux-libc-dev7.0.0-38.38 kernel: net/rds: use wq_has_sleeper() in rds_cong_map_updated() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90082linux-libc-dev7.0.0-38.38 kernel: net: mana: Cap MSI-X vectors to the device MSI-X table size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90083linux-libc-dev7.0.0-38.38 kernel: net/sched: act_ife: Only operate on Ethernet frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90085linux-libc-dev7.0.0-38.38 kernel: octeontx2-af: fix NULL deref in NIX TM tree debugfs read path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90086linux-libc-dev7.0.0-38.38 kernel: xsk: honor XDP_TX_METADATA in zero-copy path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90087linux-libc-dev7.0.0-38.38 kernel: Bluetooth: do not leak an hci_conn when a second LE connect is rejected — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90088linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90089linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btnxpuart: Validate the FW dump header length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90090linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90091linux-libc-dev7.0.0-38.38 kernel: Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90094linux-libc-dev7.0.0-38.38 kernel: arm64: process: Fix context switching MTE store-only tag check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90095linux-libc-dev7.0.0-38.38 kernel: fuse: Fix the condition to enable over-io-uring — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90098linux-libc-dev7.0.0-38.38 kernel: net: sparx5: fix sleep in atomic context in MAC table access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90046linux-libc-dev7.0.0-38.38 kernel: mm/page_alloc: don't spin_trylock() in NMI on UP — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90047linux-libc-dev7.0.0-38.38 kernel: drm/xe: Don't hand out the flat CCS storage as usable VRAM — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90049linux-libc-dev7.0.0-38.38 kernel: net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90051linux-libc-dev7.0.0-38.38 kernel: tcp: reject non zerocopy devmem tx — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90053linux-libc-dev7.0.0-38.38 kernel: net/sched: sch_htb: limit htb_classify inner-class filter hops — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90054linux-libc-dev7.0.0-38.38 kernel: tcp: fix corruption of urgent data on multi-segment retransmit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90055linux-libc-dev7.0.0-38.38 kernel: usb: atm: usbatm: fix invalid ci_range initialization — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90056linux-libc-dev7.0.0-38.38 kernel: net: fec: only stop PTP if it was initialized — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90058linux-libc-dev7.0.0-38.38 kernel: net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90059linux-libc-dev7.0.0-38.38 kernel: net: stmmac: restore NET_IP_ALIGN in the RX DMA offset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90061linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_tables: skip double clone set expressions on element insert — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90062linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_tables: move hardware offload step after building the chain blob — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90063linux-libc-dev7.0.0-38.38 kernel: virtio-net: Ensure that TCP packets don't overflow gso_segs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90065linux-libc-dev7.0.0-38.38 kernel: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90066linux-libc-dev7.0.0-38.38 kernel: samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90067linux-libc-dev7.0.0-38.38 kernel: libceph: validate banner payload length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90068linux-libc-dev7.0.0-38.38 kernel: ASoC: dapm: Fix off-by-one check on the second enum channel — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90069linux-libc-dev7.0.0-38.38 kernel: crypto: acomp - allocate async request context when cloning — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90070linux-libc-dev7.0.0-38.38 kernel: tpm: st33zp24: Return zero on status read failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90071linux-libc-dev7.0.0-38.38 kernel: net/sched: sch_teql: restore skb->dev on the slave failure path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90072linux-libc-dev7.0.0-38.38 kernel: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89911linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Correctly cap TLBI Range to the architural limit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89914linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: K ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89915linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Remove VM-wide VNCR mapping counter — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89916linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89917linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89918linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: K ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89919linux-libc-dev7.0.0-38.38 kernel: KVM: s390: keyop: use mmu_lock to read gmap->asce — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89923linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Free guest debug data on vcpu destroy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89924linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Fix old_data leak in guest debug error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89925linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Fix memory leak in guest debug handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89926linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Fix length check __import_wp_info() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89927linux-libc-dev7.0.0-38.38 kernel: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89928linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: K ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89930linux-libc-dev7.0.0-38.38 kernel: KVM: nVMX: Service local TLB flushes on failed nested VM-Enter — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89931linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: K ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89932linux-libc-dev7.0.0-38.38 kernel: KVM: nVMX: Always flush vpid02 on first use — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89933linux-libc-dev7.0.0-38.38 kernel: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89934linux-libc-dev7.0.0-38.38 kernel: iio: light: ltrf216a: fix runtime PM reference leak in error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89935linux-libc-dev7.0.0-38.38 kernel: iio: light: apds9306: fix PM reference leak in apds9306_read_data() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89936linux-libc-dev7.0.0-38.38 kernel: iio: dac: m62332: Fix regulator reference count imbalance — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89885linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89886linux-libc-dev7.0.0-38.38 kernel: media: intel/ipu6: fix async notifier cleanup leak on parse error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89887linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89888linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89889linux-libc-dev7.0.0-38.38 kernel: media: i2c: imx415: Release runtime PM reference on VBLANK error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89890linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89891linux-libc-dev7.0.0-38.38 kernel: media: em28xx: fix use-after-free of dev_next->devlist on disconnect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89892linux-libc-dev7.0.0-38.38 kernel: media: em28xx: defer audio-only extension registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89893linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89894linux-libc-dev7.0.0-38.38 kernel: media: cx231xx: reject geometry changes while the VBI queue is busy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89895linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89896linux-libc-dev7.0.0-38.38 kernel: media: cedrus: fix memory leak in cedrus_init_ctrls() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89897linux-libc-dev7.0.0-38.38 kernel: media: cec: Serialize exclusive follower delivery — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89898linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89901linux-libc-dev7.0.0-38.38 kernel: media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89902linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: L ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89903linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: L ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89904linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: L ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89905linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: L ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89906linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: L ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89908linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: L ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89963linux-libc-dev7.0.0-38.38 kernel: powerpc/kexec_file: Fix null-ptr-def in extra size calculation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89964linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89965linux-libc-dev7.0.0-38.38 kernel: nvdimm/btt: reject an arena whose nfree is below the lane count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89966linux-libc-dev7.0.0-38.38 kernel: mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89967linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89968linux-libc-dev7.0.0-38.38 kernel: nvmet-tcp: reject unsolicited H2CData PDUs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89969linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89970linux-libc-dev7.0.0-38.38 kernel: nvmet-auth: Synchronize timeout work during SQ teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89971linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: n ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89973linux-libc-dev7.0.0-38.38 kernel: nvme-tcp: check the data direction of a C2HData PDU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89974linux-libc-dev7.0.0-38.38 kernel: nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89975linux-libc-dev7.0.0-38.38 kernel: nvme-fabrics: fix DHCHAP secret leak on parse failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89976linux-libc-dev7.0.0-38.38 kernel: accel/ethosu: fix job completion fence cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89977linux-libc-dev7.0.0-38.38 kernel: accel/ethosu: check MMIO mapping errors in probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89978linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: a ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89979linux-libc-dev7.0.0-38.38 kernel: ALSA: pcm: Fix race between non-atomic ops and trigger-start — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89981linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: a ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89982linux-libc-dev7.0.0-38.38 kernel: i2c: mux: Fix channel node leak on adapter add failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89983linux-libc-dev7.0.0-38.38 kernel: i2c: core: fix debugfs UAF on adapter removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89984linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89986linux-libc-dev7.0.0-38.38 kernel: mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89937linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89939linux-libc-dev7.0.0-38.38 kernel: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89940linux-libc-dev7.0.0-38.38 kernel: iio: buffer: Tie IIO dma fence lock lifetime to the fence — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89941linux-libc-dev7.0.0-38.38 kernel: iio: buffer: Make IIO DMA fence release RCU-safe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89942linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89945linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89946linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89947linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: c ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89948linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89949linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89950linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89951linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89952linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89953linux-libc-dev7.0.0-38.38 kernel: mtd: mtdoops: free page bitmap when the backing MTD is removed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89954linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89955linux-libc-dev7.0.0-38.38 kernel: s390/vfio-ap: Fix NULL deref in status_show() during queue probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89956linux-libc-dev7.0.0-38.38 kernel: s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89957linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89958linux-libc-dev7.0.0-38.38 kernel: s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89959linux-libc-dev7.0.0-38.38 kernel: s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89961linux-libc-dev7.0.0-38.38 kernel: powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90260linux-libc-dev7.0.0-38.38 kernel: btrfs: zoned: don't clobber the extent buffer when zeroing it out — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90261linux-libc-dev7.0.0-38.38 kernel: btrfs: zoned: flush active metadata block group at btree_writepages() start — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90262linux-libc-dev7.0.0-38.38 kernel: btrfs: retry verity reads for not-uptodate Merkle folios — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90263linux-libc-dev7.0.0-38.38 kernel: btrfs: check if root is readonly when setting posix acl — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90264linux-libc-dev7.0.0-38.38 kernel: btrfs: always wait for ordered extents to avoid OE races — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90265linux-libc-dev7.0.0-38.38 kernel: btrfs: defrag: fix deadlock between defrag and delalloc space reservation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90269linux-libc-dev7.0.0-38.38 kernel: bpf: Reject load-acquire from pointers requiring fault protection — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90270linux-libc-dev7.0.0-38.38 kernel: arm_mpam: Disable driver unbind to avoid UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90271linux-libc-dev7.0.0-38.38 kernel: arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90272linux-libc-dev7.0.0-38.38 kernel: perf: arm_pmuv3: Zero initialize hw_id branch stack field — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90273linux-libc-dev7.0.0-38.38 kernel: coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90274linux-libc-dev7.0.0-38.38 kernel: coresight: etm4x: fix underflow for usage of (nrseqstate - 1) — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90275linux-libc-dev7.0.0-38.38 kernel: md/raid1: don't set array_frozen in raid1_takeover() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90276linux-libc-dev7.0.0-38.38 kernel: md/md-llbitmap: stop daemon timer rearm on destroy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90277linux-libc-dev7.0.0-38.38 kernel: md/md-llbitmap: prevent create failure bitmap UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90278linux-libc-dev7.0.0-38.38 kernel: md: wait for behind writes before destroying bitmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90279linux-libc-dev7.0.0-38.38 kernel: md/raid5: round bitmap stripes with sector division — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90280linux-libc-dev7.0.0-38.38 kernel: phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90281linux-libc-dev7.0.0-38.38 kernel: phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90282linux-libc-dev7.0.0-38.38 kernel: phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90283linux-libc-dev7.0.0-38.38 kernel: hugetlbfs: release subpool on fill_super failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90130linux-libc-dev7.0.0-38.38 kernel: vdpa_sim: fix cleanup after worker creation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90232linux-libc-dev7.0.0-38.38 kernel: amt: Don't support cross-netns setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90233linux-libc-dev7.0.0-38.38 kernel: nvme-pci: release descriptor pools on probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90234linux-libc-dev7.0.0-38.38 kernel: NFS: Return a delegation the client fails to record — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90240linux-libc-dev7.0.0-38.38 kernel: iommu/vt-d: Flush context cache with correct SID when tearing down aliases — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90241linux-libc-dev7.0.0-38.38 kernel: iommu/vt-d: Tear down scalable-mode context on probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90242linux-libc-dev7.0.0-38.38 kernel: iommu/vt-d: Fix iopf_refcount leak on RID domain replacement — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90243linux-libc-dev7.0.0-38.38 kernel: iommu/vt-d: Clear Present bit before tearing down copied context entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90244linux-libc-dev7.0.0-38.38 kernel: iommu/dma: Restore locking around msi_page_list — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90245linux-libc-dev7.0.0-38.38 kernel: fbdev: kyro: Validate overlay viewport coordinates — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90246linux-libc-dev7.0.0-38.38 kernel: apparmor: fix integer overflow in verify_tags() bounds check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90248linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_api: fix teardown of an adopted proto on insert-race loss — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90249linux-libc-dev7.0.0-38.38 kernel: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90250linux-libc-dev7.0.0-38.38 kernel: bpf, cgroup: Fix storage null-ptr-deref after replacing prog — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90251linux-libc-dev7.0.0-38.38 kernel: Bluetooth: MSFT: validate evt_prefix_len against the response length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90252linux-libc-dev7.0.0-38.38 kernel: Bluetooth: MGMT: free the HCI command when it is cancelled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90253linux-libc-dev7.0.0-38.38 kernel: Bluetooth: MGMT: free the mesh send cancel command when it is cancelled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90254linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90255linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_conn: fix the SCO setup context lifetime — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90257linux-libc-dev7.0.0-38.38 kernel: Bluetooth: virtio_bt: avoid OOB read of build info string — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90258linux-libc-dev7.0.0-38.38 kernel: pinctrl: airoha: add missed IRQ resource helpers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90309linux-libc-dev7.0.0-38.38 kernel: RDMA/erdma: Hold CQ references when processing EQ events — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90312linux-libc-dev7.0.0-38.38 kernel: bpf: Check load-acquire src ptr type before the load — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90314linux-libc-dev7.0.0-38.38 kernel: remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90316linux-libc-dev7.0.0-38.38 kernel: drm/omap: dsi: Do not copy isr table — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90318linux-libc-dev7.0.0-38.38 kernel: fat: release buffer head after rebuilding parent — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90319linux-libc-dev7.0.0-38.38 kernel: rapidio: clear mport->net when rio_add_net() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90323linux-libc-dev7.0.0-38.38 kernel: ublk: validate auto buf reg before taking uring_cmd — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90325linux-libc-dev7.0.0-38.38 kernel: blk-cgroup: skip dying blkg in blkcg_activate_policy() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90327linux-libc-dev7.0.0-38.38 kernel: phonet: pep: do not write beyond optlen in getsockopt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90329linux-libc-dev7.0.0-38.38 kernel: HID: synchronize input before cleaning up a failed probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90330linux-libc-dev7.0.0-38.38 kernel: HID: logitech-hidpp: Fix FF device cleanup on init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90331linux-libc-dev7.0.0-38.38 kernel: HID: asus: refactor the two workqueues and init sequence — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90332linux-libc-dev7.0.0-38.38 kernel: PCI: dwc: ep: Flush cached MSI write before unmapping the iATU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90333linux-libc-dev7.0.0-38.38 kernel: dm-integrity: replace forgeable discard filler with a keyed sector marker — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90334linux-libc-dev7.0.0-38.38 kernel: tty: clear cdev pointer after cdev_add() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90338linux-libc-dev7.0.0-38.38 kernel: serial: amba-pl011: keep console clock enabled for atomic writes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90341linux-libc-dev7.0.0-38.38 kernel: firmware: coreboot: Validate table bounds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90342linux-libc-dev7.0.0-38.38 kernel: bpf: Fix mmap_lock deadlock on arena lock failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90344linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: disconnect on CSA to channel 0 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90345linux-libc-dev7.0.0-38.38 kernel: wifi: brcmfmac: fix P2P action frame handling without device vif — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90346linux-libc-dev7.0.0-38.38 kernel: wifi: nl80211: clean up color-change beacon data on errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90284linux-libc-dev7.0.0-38.38 kernel: firmware_loader: do not queue completed sysfs fallback requests — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90285linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90286linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu/gfx6: Use PFP on the compute queues too — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90287linux-libc-dev7.0.0-38.38 kernel: phy: sunplus: fix error handling in sp_uphy_init() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90288linux-libc-dev7.0.0-38.38 kernel: phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90289linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: Resize MST HDCP per-connector arrays to 32 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90290linux-libc-dev7.0.0-38.38 kernel: arm64: hibernate: Restore DAIF state on error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90291linux-libc-dev7.0.0-38.38 kernel: module/dups: Fix use-after-free in kmod_dup_req lifetime handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90292linux-libc-dev7.0.0-38.38 kernel: RDMA/siw: Fix use-after-free in siw_accept() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90293linux-libc-dev7.0.0-38.38 kernel: IB/isert: post the full-feature receive buffers after session registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90294linux-libc-dev7.0.0-38.38 kernel: IB/isert: delay the final Login Response until the session is registered — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90295linux-libc-dev7.0.0-38.38 kernel: cpufreq: imx6q: fix out-of-bounds write when probed more than once — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90296linux-libc-dev7.0.0-38.38 kernel: cpufreq: imx6q: fix devres accumulation across driver rebind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90297linux-libc-dev7.0.0-38.38 kernel: drm/sun4i: crtc: Propagate layer initialization error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90298linux-libc-dev7.0.0-38.38 kernel: drm/sun4i: tcon: Drop TCON TOP device reference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90300linux-libc-dev7.0.0-38.38 kernel: bpf: Clear buf on error in __bpf_get_task_stack — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90302linux-libc-dev7.0.0-38.38 kernel: ocfs2: synchronize heartbeat callbacks with o2net teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90303linux-libc-dev7.0.0-38.38 kernel: ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90306linux-libc-dev7.0.0-38.38 kernel: ARM: 9481/2: breakpoint: CFI breakpoints only on demand — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90307linux-libc-dev7.0.0-38.38 kernel: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90308linux-libc-dev7.0.0-38.38 kernel: RDMA/erdma: Hold QP references for AE and CM processing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90135linux-libc-dev7.0.0-38.38 kernel: net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90136linux-libc-dev7.0.0-38.38 kernel: platform/x86/amd/hsmp: Reject negative power cap writes in hwmon — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90137linux-libc-dev7.0.0-38.38 kernel: platform/x86: hp-bioscfg: fix password encoding bounds check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90138linux-libc-dev7.0.0-38.38 kernel: vsock: don't check the listener's sk_err in vsock_accept() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90139linux-libc-dev7.0.0-38.38 kernel: fuse: check for NULL root inode in fuse_fill_super_submount — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90140linux-libc-dev7.0.0-38.38 kernel: cuse: wait for pending RCU callbacks on module exit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90141linux-libc-dev7.0.0-38.38 kernel: ipvs: fix integer overflow in ftp helper port/address parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90142linux-libc-dev7.0.0-38.38 kernel: virtio_net: Fix resize of the RX ring — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90143linux-libc-dev7.0.0-38.38 kernel: net: kcm: Hold RCU read lock while running BPF parser — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90145linux-libc-dev7.0.0-38.38 kernel: hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90146linux-libc-dev7.0.0-38.38 kernel: bpf, xdp: move offload check into dev_xdp_install() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90147linux-libc-dev7.0.0-38.38 kernel: clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90151linux-libc-dev7.0.0-38.38 kernel: NFSv4: remove callback IDR entry on client allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90153linux-libc-dev7.0.0-38.38 kernel: ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90154linux-libc-dev7.0.0-38.38 kernel: ksmbd: scope session state changes to bound connections — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90156linux-libc-dev7.0.0-38.38 kernel: ksmbd: safely discard unregistered deferred locks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90157linux-libc-dev7.0.0-38.38 kernel: bpf: Reject negative optlen in cgroup getsockopt hook — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90158linux-libc-dev7.0.0-38.38 kernel: m68k: nfcon: Do not call console_is_registered() in nfcon_device() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90159linux-libc-dev7.0.0-38.38 kernel: bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90160linux-libc-dev7.0.0-38.38 kernel: lwt_bpf: Restore reserved headroom after xmit program — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90099linux-libc-dev7.0.0-38.38 kernel: net/sched: account classifier filter allocations to memcg — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90100linux-libc-dev7.0.0-38.38 kernel: ptp: netc: fix period truncation and potential divide-by-zero in PEROUT — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90101linux-libc-dev7.0.0-38.38 kernel: bnxt_en: Fix call to hardware monitoring event handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90102linux-libc-dev7.0.0-38.38 kernel: NFSv4/pnfs: key the data server cache on the NFS version — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90103linux-libc-dev7.0.0-38.38 kernel: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90107linux-libc-dev7.0.0-38.38 kernel: net/smc: free pending qentry in smc_llc_flow_stop() before memset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90109linux-libc-dev7.0.0-38.38 kernel: net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90110linux-libc-dev7.0.0-38.38 kernel: inetpeer: randomize RB-tree node comparison using SipHash — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90113linux-libc-dev7.0.0-38.38 kernel: netdevsim: update queue NAPI association on queue reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90114linux-libc-dev7.0.0-38.38 kernel: net: bridge: Reject descending VLAN tunnel ranges — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90115linux-libc-dev7.0.0-38.38 kernel: xsk: fix NULL pointer dereference in __xsk_rcv() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90119linux-libc-dev7.0.0-38.38 kernel: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90120linux-libc-dev7.0.0-38.38 kernel: irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90121linux-libc-dev7.0.0-38.38 kernel: irqchip/gic-v5: Clear per-CPU IRS data on teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90122linux-libc-dev7.0.0-38.38 kernel: clk: visconti: Make sure clk_init_data is fully initialized — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90124linux-libc-dev7.0.0-38.38 kernel: irqchip/renesas-rzg2l: Fix loss of interrupt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90125linux-libc-dev7.0.0-38.38 kernel: smb: client: fix request buffer leak in smb2_new_read_req() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90126linux-libc-dev7.0.0-38.38 kernel: rtc: pcf8563: fix clock provider leak on unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90127linux-libc-dev7.0.0-38.38 kernel: virtio: rtc: time out alarm requests — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90128linux-libc-dev7.0.0-38.38 kernel: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90129linux-libc-dev7.0.0-38.38 kernel: virtio_balloon: quiesce balloon work before device shutdown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90207linux-libc-dev7.0.0-38.38 kernel: ALSA: seq: midi: Serialize input teardown with event_input — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90209linux-libc-dev7.0.0-38.38 kernel: s390/debug: Fix deadlock during unregister — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90211linux-libc-dev7.0.0-38.38 kernel: bpf, s390: Clear fetch destination on faulting arena atomic — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90212linux-libc-dev7.0.0-38.38 kernel: arm64/efi: Avoid voluntary preemption with efi_mm installed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90213linux-libc-dev7.0.0-38.38 kernel: firewire: core: fix memory leak in error path of build_tree() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90214linux-libc-dev7.0.0-38.38 kernel: ASoC: xilinx: formatter_pcm: fix stream_data leak on open error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90215linux-libc-dev7.0.0-38.38 kernel: mtd: ubi: Release device reference on busy detach — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90216linux-libc-dev7.0.0-38.38 kernel: ubi: Fix rollback for explicit UBI device numbers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90218linux-libc-dev7.0.0-38.38 kernel: RDMA/cma: Fix WARNING in res_to_rt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90219linux-libc-dev7.0.0-38.38 kernel: RDMA/cxgb4: Free debugfs on registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90220linux-libc-dev7.0.0-38.38 kernel: ALSA: seq: Don't leak the extension cell pointer in the bounce payload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90221linux-libc-dev7.0.0-38.38 kernel: nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90222linux-libc-dev7.0.0-38.38 kernel: nfc: pn533: hold a reference to the request skb during send_frame — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90223linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: bound SNL TLV parsing to the skb and add length checks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90224linux-libc-dev7.0.0-38.38 kernel: nfc: nci: fix double completion race in nci_data_exchange_complete — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90225linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: read llcp_sock->local under the socket lock in getsockopt — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90226linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: avoid userspace overflow on invalid optlen — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90228linux-libc-dev7.0.0-38.38 kernel: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90229linux-libc-dev7.0.0-38.38 kernel: nvme-apple: Destroy the admin queue on removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90230linux-libc-dev7.0.0-38.38 kernel: nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90231linux-libc-dev7.0.0-38.38 kernel: apparmor: fix unconfined user namespace restriction forced stack — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90163linux-libc-dev7.0.0-38.38 kernel: smb/server: call ksmbd_proc_cleanup() on module init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90164linux-libc-dev7.0.0-38.38 kernel: smb/server: abort initialization when proc setup fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90165linux-libc-dev7.0.0-38.38 kernel: smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90166linux-libc-dev7.0.0-38.38 kernel: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90170linux-libc-dev7.0.0-38.38 kernel: ksmbd: validate ipc response length before dereferencing its fields — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90175linux-libc-dev7.0.0-38.38 kernel: smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90176linux-libc-dev7.0.0-38.38 kernel: ksmbd: Do not skip lock checks for single-byte ranges — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90177linux-libc-dev7.0.0-38.38 kernel: bpf: Check pointer type for all atomic RMW paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90178linux-libc-dev7.0.0-38.38 kernel: hwmon: (coretemp) Fix core_data leak on CPUs without PTS — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90179linux-libc-dev7.0.0-38.38 kernel: apparmor: fix deadlock in complain-mode change_hat — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90183linux-libc-dev7.0.0-38.38 kernel: blk-iolatency: clear delay state when freeing policy data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90190linux-libc-dev7.0.0-38.38 kernel: null_blk: use DEFINE_MUTEX for the file-scope mutex — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90191linux-libc-dev7.0.0-38.38 kernel: mailbox: riscv-sbi-mpxy: validate RPMI notification lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90192linux-libc-dev7.0.0-38.38 kernel: mailbox: qcom-cpucp: handle NULL data in send_data callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90193linux-libc-dev7.0.0-38.38 kernel: mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90195linux-libc-dev7.0.0-38.38 kernel: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90197linux-libc-dev7.0.0-38.38 kernel: HID: haptic: don't write an uninitialized value to unhandled usages — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90198linux-libc-dev7.0.0-38.38 kernel: ALSA: core: Fix use-after-free in snd_card_do_free() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90201linux-libc-dev7.0.0-38.38 kernel: net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90202linux-libc-dev7.0.0-38.38 kernel: scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-90203linux-libc-dev7.0.0-38.38 kernel: Squashfs: check block offset is not negative — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89589linux-libc-dev7.0.0-38.38 kernel: acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89590linux-libc-dev7.0.0-38.38 kernel: accel/rocket: Fix error path handling in rocket_job_run() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89591linux-libc-dev7.0.0-38.38 kernel: accel/rocket: initialize job domain before cleanup paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89592linux-libc-dev7.0.0-38.38 kernel: accel/rocket: fix NULL dereference and integer overflow in rocket_job_push() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89593linux-libc-dev7.0.0-38.38 kernel: hugetlb: only adjust reservation during unmapping if mapcount is 0 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89594linux-libc-dev7.0.0-38.38 kernel: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89595linux-libc-dev7.0.0-38.38 kernel: fsnotify: Fix stale object mask after concurrent mark updates — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89596linux-libc-dev7.0.0-38.38 kernel: forcedeth: fix off-by-one when saving/restoring non-PCI config space — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89597linux-libc-dev7.0.0-38.38 kernel: fbdev: uvesafb: unregister connector callback on init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89598linux-libc-dev7.0.0-38.38 kernel: fbdev: ssd1307fb: defer I2C transfers from damage callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89599linux-libc-dev7.0.0-38.38 kernel: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89600linux-libc-dev7.0.0-38.38 kernel: fanotify: fix use-after-free of file range info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89601linux-libc-dev7.0.0-38.38 kernel: ext2: Fix lost inode updates for IS_SYNC inodes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89602linux-libc-dev7.0.0-38.38 kernel: erofs: skip sufficiently large global buffers when resizing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89604linux-libc-dev7.0.0-38.38 kernel: efivarfs: Rate limit statfs() handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89605linux-libc-dev7.0.0-38.38 kernel: ecryptfs: release message context on send failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89606linux-libc-dev7.0.0-38.38 kernel: ecryptfs: reject too-small tag 70 packets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89607linux-libc-dev7.0.0-38.38 kernel: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89608linux-libc-dev7.0.0-38.38 kernel: ecryptfs: pass packet set buffer size to parser — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89609linux-libc-dev7.0.0-38.38 kernel: ecryptfs: hold msg ctx list lock when cleaning daemon queue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89615linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: bound page_lcns[] index by the log record — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89485linux-libc-dev7.0.0-38.38 kernel: lockd: pin next file across nlm_inspect_file lock-drop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89566linux-libc-dev7.0.0-38.38 kernel: jbd2: check need_resched() when skipping busy checkpoint buffers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89567linux-libc-dev7.0.0-38.38 kernel: jbd2: bound shrinker scans by examined checkpoint buffers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89569linux-libc-dev7.0.0-38.38 kernel: Bluetooth: RFCOMM: serialize security confirmation handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89570linux-libc-dev7.0.0-38.38 kernel: cxl/mce: Make the MCE notifier per-region — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89571linux-libc-dev7.0.0-38.38 kernel: cxl/features: bound fwctl command payload to the input buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89572linux-libc-dev7.0.0-38.38 kernel: cpufreq: apple-soc: Fix OPP table cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89573linux-libc-dev7.0.0-38.38 kernel: dm array: reject an array block whose value size is not the caller's — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89575linux-libc-dev7.0.0-38.38 kernel: dm raid1: reserve space for NUL-terminator in build_constructor_string() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89576linux-libc-dev7.0.0-38.38 kernel: dm-era: fix shadowed superblock leak on take-snap failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89577linux-libc-dev7.0.0-38.38 kernel: dm-io: report non-retryable errors separatedly — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89578linux-libc-dev7.0.0-38.38 kernel: dm-io: clone the source bio instead of copying its biovec — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89579linux-libc-dev7.0.0-38.38 kernel: bpf: Harden bloom filter sizing and indexing on 32-bit kernels — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89581linux-libc-dev7.0.0-38.38 kernel: bpf, x86: Fix per-CPU address resolution into an extended register — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89582linux-libc-dev7.0.0-38.38 kernel: bnx2x: fix double free in bnx2x_init_firmware() error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89583linux-libc-dev7.0.0-38.38 kernel: Bluetooth: eir: Fix OOB read in eir_get_service_data() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89584linux-libc-dev7.0.0-38.38 kernel: block: validate user space vectors during extraction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89585linux-libc-dev7.0.0-38.38 kernel: auxdisplay: charlcd: cancel backlight work on registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89586linux-libc-dev7.0.0-38.38 kernel: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89587linux-libc-dev7.0.0-38.38 kernel: ACPI: pfr_update: fix stack buffer overflow in query_capability() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89588linux-libc-dev7.0.0-38.38 kernel: ACPI: APEI: GHES: fix ARM section length accounting after header — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89646linux-libc-dev7.0.0-38.38 kernel: ceph: fix leaked inode reference on writeback abort at umount — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89647linux-libc-dev7.0.0-38.38 kernel: ceph: do not repeat ceph_trim_dentries() if no progress possible — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89649linux-libc-dev7.0.0-38.38 kernel: ceph: bound xattr value length in __build_xattrs() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89650linux-libc-dev7.0.0-38.38 kernel: ceph: bound num_export_targets array for mds info v2/v3 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89651linux-libc-dev7.0.0-38.38 kernel: ceph: bound MDSCapAuth path and fs_name decode in handle_session() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89653linux-libc-dev7.0.0-38.38 kernel: kernel: Memory corruption via out-of-bounds write in Ceph client — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89655linux-libc-dev7.0.0-38.38 kernel: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89656linux-libc-dev7.0.0-38.38 kernel: libceph: reject buckets with mismatched CRUSH ids — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89657linux-libc-dev7.0.0-38.38 kernel: libceph: validate OSD extent maps before cursor advance — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89658linux-libc-dev7.0.0-38.38 kernel: NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89660linux-libc-dev7.0.0-38.38 kernel: NFSD: Prevent client use-after-free during admin state revocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89661linux-libc-dev7.0.0-38.38 kernel: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89662linux-libc-dev7.0.0-38.38 kernel: NFSD: Prevent lock owner use-after-free during client teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89663linux-libc-dev7.0.0-38.38 kernel: nfsd: revoke copy-notify stateids before dropping their reference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89664linux-libc-dev7.0.0-38.38 kernel: nfsd: release OPEN-decoded posix ACLs via op_release — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89665linux-libc-dev7.0.0-38.38 kernel: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89666linux-libc-dev7.0.0-38.38 kernel: nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89667linux-libc-dev7.0.0-38.38 kernel: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89668linux-libc-dev7.0.0-38.38 kernel: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89669linux-libc-dev7.0.0-38.38 kernel: nfsd: initialize copy-notify stateid before publishing it — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89670linux-libc-dev7.0.0-38.38 kernel: nfsd: hold rcu across localio cmpxchg retry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89616linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89617linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: validate dirty page table on log replay — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89618linux-libc-dev7.0.0-38.38 kernel: eventfs: Initialize ei->children and ei->list in init_ei() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89619linux-libc-dev7.0.0-38.38 kernel: HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89620linux-libc-dev7.0.0-38.38 kernel: HID: intel-thc-hid: intel-quickspi: validate report size before copy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89621linux-libc-dev7.0.0-38.38 kernel: HID: mcp2221: validate report size in mcp2221_raw_event() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89623linux-libc-dev7.0.0-38.38 kernel: HID: mcp2221: stop device IO before hid_hw_stop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89624linux-libc-dev7.0.0-38.38 kernel: HID: universal-pidff: stop the device when force-feedback init fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89625linux-libc-dev7.0.0-38.38 kernel: HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89626linux-libc-dev7.0.0-38.38 kernel: HID: sensor: custom: Fix field sysfs group cleanup on failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89627linux-libc-dev7.0.0-38.38 kernel: HID: roccat: free buffered reports when destroying device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89628linux-libc-dev7.0.0-38.38 kernel: HID: picolcd: clamp eeprom debugfs read to bytes actually received — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89629linux-libc-dev7.0.0-38.38 kernel: HID: corsair-void: Check size of status and firmware events before reading them — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89630linux-libc-dev7.0.0-38.38 kernel: smb: client: restore the data_offset bound in is_valid_oplock_break() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89634linux-libc-dev7.0.0-38.38 kernel: smb: client: fix ALIGN() overflow in symlink_data() error context loop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89640linux-libc-dev7.0.0-38.38 kernel: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89641linux-libc-dev7.0.0-38.38 kernel: cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89642linux-libc-dev7.0.0-38.38 kernel: cifs: call pagecache_isize_extended() in cifs_setsize() when extending — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89643linux-libc-dev7.0.0-38.38 kernel: audit: avoid dropping live tree ref on fsnotify rule autoremove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89644linux-libc-dev7.0.0-38.38 kernel: btrfs: fix extent map leak in NOCOW direct I/O write — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89645linux-libc-dev7.0.0-38.38 kernel: btrfs: drop recovered reloc root refs on recovery failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89486linux-libc-dev7.0.0-38.38 kernel: ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89487linux-libc-dev7.0.0-38.38 kernel: openvswitch: only skb_tx_error() a packet we are about to drop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89488linux-libc-dev7.0.0-38.38 kernel: openvswitch: Fix CT limit teardown use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89489linux-libc-dev7.0.0-38.38 kernel: openrisc: fix arbitrary kernel memory access via or1k_atomic syscall — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89490linux-libc-dev7.0.0-38.38 kernel: ocfs2: ocfs2: Denial of Service via readdir position truncation on 32-bit kernels — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89491linux-libc-dev7.0.0-38.38 kernel: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89493linux-libc-dev7.0.0-38.38 kernel: ocfs2: validate rl_used against rl_count in refcount block validator — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89494linux-libc-dev7.0.0-38.38 kernel: ocfs2: validate lengths in dlm_mig_lockres_handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89495linux-libc-dev7.0.0-38.38 kernel: ocfs2: bound namelen in dlm_migrate_request_handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89496linux-libc-dev7.0.0-38.38 kernel: ocfs2: always run deallocs on copy-on-write completion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89497linux-libc-dev7.0.0-38.38 kernel: orangefs: skip leading spaces before parsing client debug masks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89498linux-libc-dev7.0.0-38.38 kernel: orangefs: fix double-free of trailer_buf on readdir copy failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89500linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89501linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89502linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Free cpu_buffer::free_page with subbuf_order — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89503linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89504linux-libc-dev7.0.0-38.38 kernel: regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89506linux-libc-dev7.0.0-38.38 kernel: RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89507linux-libc-dev7.0.0-38.38 kernel: RDMA/ucma: Lock the handler in ucma_write_cm_event() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89508linux-libc-dev7.0.0-38.38 kernel: RDMA/ucma: Lock the handler in ucma_set_ib_path() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89458linux-libc-dev7.0.0-38.38 kernel: s390/dasd: Do not complete a failed ESE read as successful — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89460linux-libc-dev7.0.0-38.38 kernel: s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89461linux-libc-dev7.0.0-38.38 kernel: power: supply: max17040: synchronize work cancellation on suspend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89463linux-libc-dev7.0.0-38.38 kernel: power: supply: ucs1002: fix use-after-free on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89464linux-libc-dev7.0.0-38.38 kernel: power: supply: twl4030_charger: cancel workers via devm — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89466linux-libc-dev7.0.0-38.38 kernel: power: supply: qcom_battmgr: terminate the strings from firmware — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89467linux-libc-dev7.0.0-38.38 kernel: power: supply: qcom_battmgr: fix use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89469linux-libc-dev7.0.0-38.38 kernel: power: supply: lp8727: fix use-after-free in lp8727_release_irq() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89470linux-libc-dev7.0.0-38.38 kernel: power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89471linux-libc-dev7.0.0-38.38 kernel: power: supply: cros_usbpd-charger: bound the EC-reported port count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89473linux-libc-dev7.0.0-38.38 kernel: power: supply: bq25890: Fix power_supply reference leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89474linux-libc-dev7.0.0-38.38 kernel: power: supply: bq256xx: drain usb_work before freeing the charger — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89475linux-libc-dev7.0.0-38.38 kernel: power: supply: bq24257: fix use-after-free on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89476linux-libc-dev7.0.0-38.38 kernel: sctp: fix stream->outcnt underflow on duplicate RECONF responses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89477linux-libc-dev7.0.0-38.38 kernel: sctp: fix NULL deref on untransmitted RECONF completion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89478linux-libc-dev7.0.0-38.38 kernel: sctp: drop a chunk if its transport was removed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89479linux-libc-dev7.0.0-38.38 kernel: sctp: stop processing a packet once its association is deleted — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89480linux-libc-dev7.0.0-38.38 kernel: nvme-tcp: reject a read that transferred too few bytes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89482linux-libc-dev7.0.0-38.38 kernel: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89483linux-libc-dev7.0.0-38.38 kernel: nvme: zero the discard fallback page — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89484linux-libc-dev7.0.0-38.38 kernel: lockd: fix NULL dereference on lockowner allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89536linux-libc-dev7.0.0-38.38 kernel: SUNRPC: wait for in-flight client TLS handshake callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89538linux-libc-dev7.0.0-38.38 kernel: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89540linux-libc-dev7.0.0-38.38 kernel: sunrpc: init gssp_lock before publishing proc entry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89541linux-libc-dev7.0.0-38.38 kernel: SUNRPC: harden gss_unwrap_resp_priv length checks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89542linux-libc-dev7.0.0-38.38 kernel: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89545linux-libc-dev7.0.0-38.38 kernel: sunrpc: defer rq_argp and rq_resp free until after RCU grace period — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89546linux-libc-dev7.0.0-38.38 kernel: SUNRPC: close backchannel before destroying callback service — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89547linux-libc-dev7.0.0-38.38 kernel: SUNRPC: Check svc pool percpu counter allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89548linux-libc-dev7.0.0-38.38 kernel: SUNRPC: always drain cache_cleaner before destroying a cache_detail — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89549linux-libc-dev7.0.0-38.38 kernel: sunrpc: route to a populated pool in svc_pool_for_cpu() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89551linux-libc-dev7.0.0-38.38 kernel: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89553linux-libc-dev7.0.0-38.38 kernel: nouveau/gem: reserve the bo in the info ioctl around the vma lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89554linux-libc-dev7.0.0-38.38 kernel: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89555linux-libc-dev7.0.0-38.38 kernel: mpls: reload header after pskb_may_pull() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89557linux-libc-dev7.0.0-38.38 kernel: md: do overflow check for sb->bblog_shift in super_1_load() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89558linux-libc-dev7.0.0-38.38 kernel: md/raid10: fix still_degraded being inverted in raid10_sync_request() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89559linux-libc-dev7.0.0-38.38 kernel: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89560linux-libc-dev7.0.0-38.38 kernel: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89561linux-libc-dev7.0.0-38.38 kernel: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89562linux-libc-dev7.0.0-38.38 kernel: ip6_gre: fix hardware header length for NBMA tunnels — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89563linux-libc-dev7.0.0-38.38 kernel: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89509linux-libc-dev7.0.0-38.38 kernel: RDMA/ionic: Embed counter driver data in rdma_counter allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89510linux-libc-dev7.0.0-38.38 kernel: RDMA/cxgb4: Cancel reg_work before freeing device on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89511linux-libc-dev7.0.0-38.38 kernel: qede: Fix NULL pointer dereference in TPA fragment processing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89512linux-libc-dev7.0.0-38.38 kernel: remoteproc: scp: Fix device reference leak on failed lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89513linux-libc-dev7.0.0-38.38 kernel: RISC-V: KVM: Fix PMU event info array size overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89514linux-libc-dev7.0.0-38.38 kernel: scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89515linux-libc-dev7.0.0-38.38 kernel: scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89517linux-libc-dev7.0.0-38.38 kernel: sched_ext: Fix rq->core_pick corruption under core scheduling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89518linux-libc-dev7.0.0-38.38 kernel: sched_ext: Fix this_rq() assumptions in dispatch kfuncs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89519linux-libc-dev7.0.0-38.38 kernel: sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89521linux-libc-dev7.0.0-38.38 kernel: sched/core: Handle pick_task() releasing the rq lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89522linux-libc-dev7.0.0-38.38 kernel: media: staging/ipu7: fix async notifier UAF on probe error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89523linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7925: cancel pending mlo_pm_work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89524linux-libc-dev7.0.0-38.38 kernel: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89525linux-libc-dev7.0.0-38.38 kernel: udf: reject VAT indexes equal to the entry count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89527linux-libc-dev7.0.0-38.38 kernel: svcrdma: Use svc_xprt_put to free listener on create failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89529linux-libc-dev7.0.0-38.38 kernel: svcrdma: Reject oversized Read segments at decode time — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89532linux-libc-dev7.0.0-38.38 kernel: svcrdma: Fix pcl_for_each_segment for empty chunks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89533linux-libc-dev7.0.0-38.38 kernel: svcrdma: Fix offset arithmetic in read_chunk_range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89534linux-libc-dev7.0.0-38.38 kernel: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89535linux-libc-dev7.0.0-38.38 kernel: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89808linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89811linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89812linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: force complete the MES ring fences on reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89813linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: force complete the KIQ ring fences on reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89814linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89815linux-libc-dev7.0.0-38.38 kernel: drm/ttm: Drop tt->restore after successful restore — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89816linux-libc-dev7.0.0-38.38 kernel: drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89817linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89818linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89819linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89820linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: fix dc_lock leak on GPU reset error paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89821linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89823linux-libc-dev7.0.0-38.38 kernel: drm: fix race between partial drm_dev_register() failure and ioctl — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89825linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89826linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89827linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89828linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89829linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89830linux-libc-dev7.0.0-38.38 kernel: f2fs: fix valid block count leak on data block allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89831linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89832linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89698linux-libc-dev7.0.0-38.38 kernel: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89782linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89783linux-libc-dev7.0.0-38.38 kernel: xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89784linux-libc-dev7.0.0-38.38 kernel: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89785linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89786linux-libc-dev7.0.0-38.38 kernel: ext4: fix out-of-bounds read in ext4_read_inline_dir() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89787linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: e ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89789linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: g ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89790linux-libc-dev7.0.0-38.38 kernel: ipv6: avoid divide by zero in rt6_multipath_rebalance — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89791linux-libc-dev7.0.0-38.38 kernel: perf: Fix use-after-free when perf mmap() revival races with the last munmap() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89792linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: k ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89793linux-libc-dev7.0.0-38.38 kernel: ublk: clear VM_MAYWRITE on read-only ublk char device mmap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89794linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: k ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89796linux-libc-dev7.0.0-38.38 kernel: mm/damon/core: avoid infinite kdamond_merge_regions() internal loop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89798linux-libc-dev7.0.0-38.38 kernel: rpcrdma: arm rn_done before publishing the notification — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89800linux-libc-dev7.0.0-38.38 kernel: drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89801linux-libc-dev7.0.0-38.38 kernel: drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89802linux-libc-dev7.0.0-38.38 kernel: drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89804linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89806linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89807linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89861linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89863linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89864linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Bound i2c->length in I2C bsg handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89865linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89866linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89867linux-libc-dev7.0.0-38.38 kernel: media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89868linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89869linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89871linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89872linux-libc-dev7.0.0-38.38 kernel: media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89873linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89874linux-libc-dev7.0.0-38.38 kernel: media: v4l2-async: avoid deleting unlinked ASC entry on link error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89875linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89876linux-libc-dev7.0.0-38.38 kernel: media: tda18250: fix possible integer overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89878linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89879linux-libc-dev7.0.0-38.38 kernel: media: s2255: bound JPEG frame size before copying into the buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89880linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89881linux-libc-dev7.0.0-38.38 kernel: media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89882linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89883linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89884linux-libc-dev7.0.0-38.38 kernel: media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89833linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89836linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89839linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89840linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89841linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89842linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89843linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89844linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89845linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89846linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89847linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Avoid double completion in async IOCB timeout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89849linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89850linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89851linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Fix FCE trace enable parsing in debugfs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89852linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89853linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89854linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Fix cs84xx use-after-free on host teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89855linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Serialize flash version read in reset handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89856linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89857linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89858linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89699linux-libc-dev7.0.0-38.38 kernel: nfsd: validate symlink target length in NFSv4 CREATE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89700linux-libc-dev7.0.0-38.38 kernel: nfsd: validate sockaddr length per family in listener_set — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89701linux-libc-dev7.0.0-38.38 kernel: nfsd: validate nseconds in TIME_DELEG decode paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89703linux-libc-dev7.0.0-38.38 kernel: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89704linux-libc-dev7.0.0-38.38 kernel: nfsd: sample writeback error cursor before async COPY loop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89705linux-libc-dev7.0.0-38.38 kernel: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89706linux-libc-dev7.0.0-38.38 kernel: nfsd: Reset write verifier when async COPY writeback fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89710linux-libc-dev7.0.0-38.38 kernel: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89711linux-libc-dev7.0.0-38.38 kernel: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89712linux-libc-dev7.0.0-38.38 kernel: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89714linux-libc-dev7.0.0-38.38 kernel: NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89715linux-libc-dev7.0.0-38.38 kernel: NFS/localio: fix ref leak on nfs_uuid_add_file failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89716linux-libc-dev7.0.0-38.38 kernel: zram: validate deflate params — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89717linux-libc-dev7.0.0-38.38 kernel: zram: set default primary compressor in zram_destroy_comps() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89720linux-libc-dev7.0.0-38.38 kernel: ubifs: fix out-of-bounds read in signature length check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89721linux-libc-dev7.0.0-38.38 kernel: phy: rockchip-samsung-dcphy: fix out-of-range max_register — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89723linux-libc-dev7.0.0-38.38 kernel: nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89724linux-libc-dev7.0.0-38.38 kernel: media: vicodec: fix out-of-bounds write in FWHT encoder — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89725linux-libc-dev7.0.0-38.38 kernel: media: cec: stm32: prevent out-of-bounds write on RX overflow — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89726linux-libc-dev7.0.0-38.38 kernel: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89671linux-libc-dev7.0.0-38.38 kernel: nfsd: gate nfs3 setacl by argp->mask — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89672linux-libc-dev7.0.0-38.38 kernel: nfsd: gate nfs2 setacl by argp->mask — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89673linux-libc-dev7.0.0-38.38 kernel: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89674linux-libc-dev7.0.0-38.38 kernel: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89677linux-libc-dev7.0.0-38.38 kernel: nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89678linux-libc-dev7.0.0-38.38 kernel: nfsd: fix partial-write detection in nfsd_direct_write — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89679linux-libc-dev7.0.0-38.38 kernel: nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89683linux-libc-dev7.0.0-38.38 kernel: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89684linux-libc-dev7.0.0-38.38 kernel: nfsd: fix cpntf publish race in nfs4_init_cp_state — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89686linux-libc-dev7.0.0-38.38 kernel: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89687linux-libc-dev7.0.0-38.38 kernel: nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89688linux-libc-dev7.0.0-38.38 kernel: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89689linux-libc-dev7.0.0-38.38 kernel: nfsd: don't free session slots that are still in use — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89690linux-libc-dev7.0.0-38.38 kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89691linux-libc-dev7.0.0-38.38 kernel: nfsd: clear opcnt on compound arg release to prevent OOB read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89692linux-libc-dev7.0.0-38.38 kernel: nfsd: clear CALLBACK_RUNNING on failed delegation recall queue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89693linux-libc-dev7.0.0-38.38 kernel: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89694linux-libc-dev7.0.0-38.38 kernel: nfsd: check client ownership when cancelling a copy-notify stateid — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89695linux-libc-dev7.0.0-38.38 kernel: nfsd: cap decoded POSIX ACL count to bound sort cost — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89696linux-libc-dev7.0.0-38.38 kernel: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89697linux-libc-dev7.0.0-38.38 kernel: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89752linux-libc-dev7.0.0-38.38 kernel: mm: memcg: stop reclaim when a limit update is superseded — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89753linux-libc-dev7.0.0-38.38 kernel: mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89754linux-libc-dev7.0.0-38.38 kernel: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89755linux-libc-dev7.0.0-38.38 kernel: mm/migrate_device: clear stale mapping after freeing swapcache — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89757linux-libc-dev7.0.0-38.38 kernel: mm/mglru: fix and remove redundant unevictable folio handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89758linux-libc-dev7.0.0-38.38 kernel: mm/mempolicy: skip non-present PMDs when queueing folios — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89759linux-libc-dev7.0.0-38.38 kernel: mm/kmemleak: avoid soft lockup when scanning task stacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89761linux-libc-dev7.0.0-38.38 kernel: apparmor: fix out-of-bounds write when null terminating a label vec — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89765linux-libc-dev7.0.0-38.38 kernel: timers/itimer: Zero-init old itimerval before copy to userspace — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89766linux-libc-dev7.0.0-38.38 kernel: pidfd: hold exec_update_lock around namespace ioctl — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89767linux-libc-dev7.0.0-38.38 kernel: ovl: fix double end_creating() on the casefold-mismatch path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89768linux-libc-dev7.0.0-38.38 kernel: fs: fix user path of nested backing files — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89769linux-libc-dev7.0.0-38.38 kernel: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89771linux-libc-dev7.0.0-38.38 kernel: ring-buffer: Fix subbuf resize race with ring buffer readers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89775linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89776linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: v ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89777linux-libc-dev7.0.0-38.38 kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89778linux-libc-dev7.0.0-38.38 kernel: isofs: fix out-of-bounds page array access on empty zisofs block — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89779linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: validate ef->size covers the record's name and value — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89780linux-libc-dev7.0.0-38.38 kernel: net: qualcomm: rmnet: restore skb->dev on deaggregated frames — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89781linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89727linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89728linux-libc-dev7.0.0-38.38 kernel: i3c: renesas: Fix out-of-bounds access for newdevs mask — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89729linux-libc-dev7.0.0-38.38 kernel: HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89730linux-libc-dev7.0.0-38.38 kernel: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89731linux-libc-dev7.0.0-38.38 kernel: cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89732linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_fs: Prevent deadlock during ep0 read loop — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89733linux-libc-dev7.0.0-38.38 kernel: usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89734linux-libc-dev7.0.0-38.38 kernel: usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89735linux-libc-dev7.0.0-38.38 kernel: usb: gadget: midi2: remove default configfs groups on teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89736linux-libc-dev7.0.0-38.38 kernel: usb: gadget: u_audio: Fix use-after-free on sound card disconnect — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89737linux-libc-dev7.0.0-38.38 kernel: usb: typec: thunderbolt: Disable work before freeing tbt on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89739linux-libc-dev7.0.0-38.38 kernel: usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89741linux-libc-dev7.0.0-38.38 kernel: Revert "media: v4l2-dev: fix error handling in __video_register_device()" — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89742linux-libc-dev7.0.0-38.38 kernel: rapidio: mport_cdev: fix use-after-free in dma_req_free() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89743linux-libc-dev7.0.0-38.38 kernel: misc: nsm: bound the device-reported response length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89745linux-libc-dev7.0.0-38.38 kernel: debugfs: Fix lockdown check for mmap_prepare — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89746linux-libc-dev7.0.0-38.38 kernel: tracing: Fix use-after-free with same-name named triggers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89747linux-libc-dev7.0.0-38.38 kernel: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89749linux-libc-dev7.0.0-38.38 kernel: tracing: Fix crash passing ERR_PTR to kthread_stop() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89750linux-libc-dev7.0.0-38.38 kernel: tracing/user_events: Clear copied tracing state before fork duplication — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
MEDIUM CVE-2026-89751linux-libc-dev7.0.0-38.38 kernel: x86/tdx: Fix off-by-one in port I/O handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98463linux-libc-dev7.0.0-38.38 kernel: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98450linux-libc-dev7.0.0-38.38 kernel: smb: client: close completed creates on compound wait errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98449linux-libc-dev7.0.0-38.38 kernel: smb: client: delete compound mids on send failure before unlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98465linux-libc-dev7.0.0-38.38 kernel: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98448linux-libc-dev7.0.0-38.38 kernel: xfs: release orphanage dir inode if chown fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98447linux-libc-dev7.0.0-38.38 kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98445linux-libc-dev7.0.0-38.38 kernel: xfs: don't let memory failures leak blocks and kill repairs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98444linux-libc-dev7.0.0-38.38 kernel: xfs: drop dquot flush lock when we can't find a buffer to flush — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80712linux-libc-dev7.0.0-38.38 kernel: spi: spi-qpic-snand: write the feature value before executing SET_FEATURE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98466linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98468linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Fix spurious warning for benign stage 2 teardown race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98473linux-libc-dev7.0.0-38.38 kernel: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98474linux-libc-dev7.0.0-38.38 kernel: s390/pci: Fix missing device lock in zpci_report_status() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98475linux-libc-dev7.0.0-38.38 kernel: s390/cmf: Fix virtual vs physical address confusion — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98476linux-libc-dev7.0.0-38.38 kernel: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98478linux-libc-dev7.0.0-38.38 kernel: scsi: ufs: core: Keep internal commands dispatchable during error handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98480linux-libc-dev7.0.0-38.38 kernel: nfc: trf7970a: power down on startup RX gain failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98483linux-libc-dev7.0.0-38.38 kernel: nfc: fix use-after-free in nfc_get_local_general_bytes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98325linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: set up the TX info early to fix failure paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98326linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: mesh: release the channel if start fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98338linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: ibss: ref BSS entry for joined event — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98355linux-libc-dev7.0.0-38.38 kernel: RDMA/rtrs: guard against null kobj name — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98375linux-libc-dev7.0.0-38.38 kernel: xen/netfront: drop RX packets with a short Ethernet header — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98387linux-libc-dev7.0.0-38.38 kernel: s390/crypto: Fix skcipher_walk return code handling in aes_s390 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98399linux-libc-dev7.0.0-38.38 kernel: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98400linux-libc-dev7.0.0-38.38 kernel: s390/ipl: Fix NULL deref in kdump without re-IPL parm block — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98403linux-libc-dev7.0.0-38.38 kernel: s390/boot: Avoid IPL parameter append past command line — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98409linux-libc-dev7.0.0-38.38 kernel: watchdog: rtd119x: Avoid division by zero — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98423linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98424linux-libc-dev7.0.0-38.38 kernel: wifi: cfg80211: undo netns switch if renaming the wiphy fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98425linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: don't warn when an IBSS has no channel to scan — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98430linux-libc-dev7.0.0-38.38 kernel: RDMA/efa: Keep admin queues alive while IRQ is registered — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98431linux-libc-dev7.0.0-38.38 kernel: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98435linux-libc-dev7.0.0-38.38 kernel: EDAC/altera: Use parent device for devres in altr_portb_setup() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98437linux-libc-dev7.0.0-38.38 kernel: media: qcom: iris: fix runtime PM reference leaks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98484linux-libc-dev7.0.0-38.38 kernel: netfilter: nf_tables: skip expired catchall elements on insert and delete — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98530linux-libc-dev7.0.0-38.38 kernel: kprobes: Fix permanent hang when flushing the kprobe optimizer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98533linux-libc-dev7.0.0-38.38 kernel: ipe: protect the dm-verity root hash with RCU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98534linux-libc-dev7.0.0-38.38 kernel: ipe: fix use-after-free when auditing a newly loaded policy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98535linux-libc-dev7.0.0-38.38 kernel: fsl/fman: Fix clk reference leak in read_dts_node() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98539linux-libc-dev7.0.0-38.38 kernel: fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98542linux-libc-dev7.0.0-38.38 kernel: cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98543linux-libc-dev7.0.0-38.38 kernel: bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98544linux-libc-dev7.0.0-38.38 kernel: bna: prevent IOC timer rearm during teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98553linux-libc-dev7.0.0-38.38 kernel: autofs: fix sbi->pipe file reference leak in autofs_kill_sb() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98555linux-libc-dev7.0.0-38.38 kernel: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98558linux-libc-dev7.0.0-38.38 kernel: net: flush skb_defer_nodes in dev_cpu_dead() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98559linux-libc-dev7.0.0-38.38 kernel: net/smc: fix UAF on lgr list traversal in smcr_port_err() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98562linux-libc-dev7.0.0-38.38 kernel: net: libwx: fix races in Tx timestamp handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98563linux-libc-dev7.0.0-38.38 kernel: net: phylink: record the PHY only once bringup cannot fail — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98564linux-libc-dev7.0.0-38.38 kernel: net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98565linux-libc-dev7.0.0-38.38 kernel: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98566linux-libc-dev7.0.0-38.38 kernel: drm/imagination: clamp freelist reconstruction requests — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98486linux-libc-dev7.0.0-38.38 kernel: net: ena: fix MMIO read buffer leak on probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98488linux-libc-dev7.0.0-38.38 kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98489linux-libc-dev7.0.0-38.38 kernel: net: atl1c: fix soft lockup on out-of-range tpd_cons read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98492linux-libc-dev7.0.0-38.38 kernel: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98493linux-libc-dev7.0.0-38.38 kernel: net: ipconfig: bound DHCP option construction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98496linux-libc-dev7.0.0-38.38 kernel: net: airoha: npu: cancel wdt_work after releasing the WDT IRQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98502linux-libc-dev7.0.0-38.38 kernel: HID: alps: unregister DualPoint Stick input device on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98504linux-libc-dev7.0.0-38.38 kernel: PCI: of_property: Omit bus properties without a subordinate bus — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98505linux-libc-dev7.0.0-38.38 kernel: mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98506linux-libc-dev7.0.0-38.38 kernel: mm/hugetlb: do not dissolve gigantic pages without runtime support — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98513linux-libc-dev7.0.0-38.38 kernel: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98516linux-libc-dev7.0.0-38.38 kernel: drm/nouveau: Fix bridge reference leak in nv1a_ram_new() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98519linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98523linux-libc-dev7.0.0-38.38 kernel: drm/client: fix restore of partially initialized client — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98527linux-libc-dev7.0.0-38.38 kernel: gpio: zynq: fix runtime PM leak on request error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98528linux-libc-dev7.0.0-38.38 kernel: gpio: cdev: fix kernel stack leak to user-space in error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98529linux-libc-dev7.0.0-38.38 kernel: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97918linux-libc-dev7.0.0-38.38 kernel: tracing: Undo the registration when enabling the histogram trigger fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97922linux-libc-dev7.0.0-38.38 kernel: tracing: Free histogram var refs regardless of how often they are referenced — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97925linux-libc-dev7.0.0-38.38 kernel: tick/broadcast: Plug clockevents replacement race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97929linux-libc-dev7.0.0-38.38 kernel: ALSA: usbusx2y: validate URB actual_length in interrupt callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97933linux-libc-dev7.0.0-38.38 kernel: tracing: Take trace_array reference when opening a tracer options file — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97935linux-libc-dev7.0.0-38.38 kernel: tracing: Set the trace clock before registering the histogram trigger — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97938linux-libc-dev7.0.0-38.38 kernel: reboot: fix cad_pid use-after-free race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97949linux-libc-dev7.0.0-38.38 kernel: configfs: unhash the dentry before dropping the item in rmdir — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97950linux-libc-dev7.0.0-38.38 kernel: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97962linux-libc-dev7.0.0-38.38 kernel: net/mlx5e: Move representor vnic reporter to eswitch devlink port — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97973linux-libc-dev7.0.0-38.38 kernel: net: macb: destroy the phylink instance on the probe error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97978linux-libc-dev7.0.0-38.38 kernel: eth: ice: don't dereference pointers from TP_printk() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97986linux-libc-dev7.0.0-38.38 kernel: virtio_input: stop callbacks before unregistering input device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97987linux-libc-dev7.0.0-38.38 kernel: virtio_input: reset device if input_register_device() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97989linux-libc-dev7.0.0-38.38 kernel: vduse: validate virtqueue alignment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97992linux-libc-dev7.0.0-38.38 kernel: vhost-vdpa: protect config_ctx from being freed under the config callback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97994linux-libc-dev7.0.0-38.38 kernel: vhost/vdpa: reject VRING_NUM larger than device max — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97534linux-libc-dev7.0.0-38.38 kernel: f2fs: accurately adjust free_sections during free_segment_range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97535linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97536linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97537linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97539linux-libc-dev7.0.0-38.38 kernel: usb: xusbatm: don't rely on id table pointer arithmetic — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97540linux-libc-dev7.0.0-38.38 kernel: net: usb: pegasus: don't rely on id table pointer arithmetic — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97541linux-libc-dev7.0.0-38.38 kernel: wifi: ath9k_htc: don't store usb_device_id — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97554linux-libc-dev7.0.0-38.38 kernel: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97556linux-libc-dev7.0.0-38.38 kernel: smb: client: avoid leaking refcount when cifs_sb_tlink() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97559linux-libc-dev7.0.0-38.38 kernel: smb: client: fail DACL rewrite when the new DACL exceeds 64K — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97599linux-libc-dev7.0.0-38.38 kernel: ieee802154: hwsim: serialize pib updates to fix double-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97600linux-libc-dev7.0.0-38.38 kernel: ieee802154: cc2520: fix FIFOP work use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97609linux-libc-dev7.0.0-38.38 kernel: netfilter: cttimeout: prevent UAF during module unload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97616linux-libc-dev7.0.0-38.38 kernel: net/sched: act_api: release all action references on NEWACTION failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97619linux-libc-dev7.0.0-38.38 kernel: io_uring/rw: end write accounting from ->ki_complete — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97901linux-libc-dev7.0.0-38.38 kernel: genetlink: pin family module during policy dump — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97908linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98003linux-libc-dev7.0.0-38.38 kernel: iommu/amd: Do not reallocate GA log buffers on resume — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98182linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: refuse to make a monitor active when it has no queue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98192linux-libc-dev7.0.0-38.38 kernel: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98198linux-libc-dev7.0.0-38.38 kernel: hwmon: (pwm-fan) Stop RPM timer before freeing tach data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98211linux-libc-dev7.0.0-38.38 kernel: mmc: mmci: Fix use-after-free in busy-timeout work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98212linux-libc-dev7.0.0-38.38 kernel: mmc: hsq: Fix use-after-free in retry work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98213linux-libc-dev7.0.0-38.38 kernel: mmc: core: Cancel SDIO IRQ work before freeing host — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98245linux-libc-dev7.0.0-38.38 kernel: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98248linux-libc-dev7.0.0-38.38 kernel: arm64: percpu: Fix LSE operations on {8,16}-bit types — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98264linux-libc-dev7.0.0-38.38 kernel: ALSA: virtio: reset device before deleting virtqueues — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98271linux-libc-dev7.0.0-38.38 kernel: net: skbuff: do not leave stale header offsets after pskb_carve() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98273linux-libc-dev7.0.0-38.38 kernel: x86/kprobes: Fix crash when probing CS CALL instructions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98285linux-libc-dev7.0.0-38.38 kernel: net: bridge: vlan: fix bugs caused by switchdev deletion errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98286linux-libc-dev7.0.0-38.38 kernel: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98294linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_qca: Do not write to the serial port after it is closed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98307linux-libc-dev7.0.0-38.38 kernel: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98309linux-libc-dev7.0.0-38.38 kernel: drm/vc4: Use managed KMS polling to fix UAF on unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98317linux-libc-dev7.0.0-38.38 kernel: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98008linux-libc-dev7.0.0-38.38 kernel: net: macb: fix NULL pointer dereference on unbind with fixed-link — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98032linux-libc-dev7.0.0-38.38 kernel: tracing: Fix subbuf resize races with trace_pipe_raw readers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98046linux-libc-dev7.0.0-38.38 kernel: bpf: Mark bpf_btf_find_by_name_kind() as sleepable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98067linux-libc-dev7.0.0-38.38 kernel: erofs: disable LZ4 rolling decompression for now — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98073linux-libc-dev7.0.0-38.38 kernel: net: Remove conflicting altnames for dying netns in __dev_change_net_namespace() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98101linux-libc-dev7.0.0-38.38 kernel: ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98102linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98124linux-libc-dev7.0.0-38.38 kernel: smb/client: invalidate fscache for fallocate range operations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98131linux-libc-dev7.0.0-38.38 kernel: net: stmmac: fix dma mapping leak in stmmac_tso_xmit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98142linux-libc-dev7.0.0-38.38 kernel: drm/cirrus-qemu: Validate BAR0 size during probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98148linux-libc-dev7.0.0-38.38 kernel: drm/gud: validate GUD_ROTATION_0 is present in supported rotations — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98156linux-libc-dev7.0.0-38.38 kernel: drm/virtio: use the DMA API for resource backing on Xen — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98161linux-libc-dev7.0.0-38.38 kernel: nvdimm: pmem: keep PREFLUSH before data writes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98169linux-libc-dev7.0.0-38.38 kernel: smb: client: fix potential OOB read in smb3_enum_snapshots() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98172linux-libc-dev7.0.0-38.38 kernel: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98174linux-libc-dev7.0.0-38.38 kernel: smb: client: fix rlist race and missing initialization — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98175linux-libc-dev7.0.0-38.38 kernel: smb: client: cancel reconnect work in clean_demultiplex_info() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98574linux-libc-dev7.0.0-38.38 kernel: net: bcmgenet: stop Tx NAPI before disabling the queues — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98780linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: fix IP instance memory leak on kobject add failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98781linux-libc-dev7.0.0-38.38 kernel: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98782linux-libc-dev7.0.0-38.38 kernel: drm/mediatek: Fix ovl adaptor platform device leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98783linux-libc-dev7.0.0-38.38 kernel: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98784linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu/gfx6: fix firmware leak on teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98786linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: guard dc_sink dereferences in MST mode validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98790linux-libc-dev7.0.0-38.38 kernel: perf: Fix race between perf_event_exit_task() and perf_pending_task() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98791linux-libc-dev7.0.0-38.38 kernel: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98793linux-libc-dev7.0.0-38.38 kernel: netfilter: bpf: reject invalid NAT manipulation types — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98795linux-libc-dev7.0.0-38.38 kernel: net: sparx5: skip ptp deinit if init was skipped — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98796linux-libc-dev7.0.0-38.38 kernel: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98798linux-libc-dev7.0.0-38.38 kernel: net: bcmgenet: fix NULL dereference in set_coalesce before first open — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98807linux-libc-dev7.0.0-38.38 kernel: net/mlx5: Fix slab-out-of-bounds when handling team device events — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98809linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98814linux-libc-dev7.0.0-38.38 kernel: nvme: fix command effects log lifetime for multipath heads — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98815linux-libc-dev7.0.0-38.38 kernel: nvme: fix cdev lifetime — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98817linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98748linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free in Broadcom serial driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98749linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free in MAX3100 serial driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98751linux-libc-dev7.0.0-38.38 kernel: tty: abort break signalling on hangup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98755linux-libc-dev7.0.0-38.38 kernel: tty: vcc: zero-initialize control packet in vcc_send_ctl() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98756linux-libc-dev7.0.0-38.38 kernel: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98757linux-libc-dev7.0.0-38.38 kernel: usb: cdns3: fix use-after-free in cdns3_gadget_exit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98758linux-libc-dev7.0.0-38.38 kernel: usb: typec: ucsi: glink: fix use-after-free of ucsi on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98762linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free in USB DWC2 driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98764linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98765linux-libc-dev7.0.0-38.38 kernel: USB: gadget: dummy-hcd: Fix wait for outstanding request completions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98766linux-libc-dev7.0.0-38.38 kernel: usb: gadget: aspeed-vhub: cancel wake work on device removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98767linux-libc-dev7.0.0-38.38 kernel: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98768linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via race condition during ANX7411 driver removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98770linux-libc-dev7.0.0-38.38 kernel: usb: gadget: midi2: Fix the jack descriptor array sizes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98771linux-libc-dev7.0.0-38.38 kernel: usb: storage: sierra_ms: reject short SWoC info transfers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98775linux-libc-dev7.0.0-38.38 kernel: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98779linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: fix ACP MFD device leak on init failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98818linux-libc-dev7.0.0-38.38 kernel: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98855linux-libc-dev7.0.0-38.38 kernel: of/overlay: put property on deadprops only after changeset add succeeds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98856linux-libc-dev7.0.0-38.38 kernel: kprobes: Skip disarmed probes when checking optkprobe overlap — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98860linux-libc-dev7.0.0-38.38 kernel: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98867linux-libc-dev7.0.0-38.38 kernel: dm-pcache: bound the logical key offset from persistent memory — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98868linux-libc-dev7.0.0-38.38 kernel: dm-pcache: reject a kset that overruns its segment — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2024-56433login.defs1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2024-56433passwd1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2018-6952patch2.8-2build1 patch: Double free of memory in pch.c:another_hunk() causes a crash — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2019-20633patch2.8-2build1 patch: double free in another_hunk function in pch.c — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2021-45261patch2.8-2build1 patch: Invalid Pointer via another_hunk function — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-56288patch2.8-2build1 patch: GNU patch: Denial of Service via specially crafted patch file — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-56289patch2.8-2build1 patch: GNU patch: Denial of Service via crafted unified-diff input — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2025-58767ruby3.33.3.8-2ubuntu3.1 rexml: REXML denial of service — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2025-61594ruby3.33.3.8-2ubuntu3.1 uri: URI module: Credential exposure via URI + operator — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2025-58767ruby3.3-dev3.3.8-2ubuntu3.1 rexml: REXML denial of service — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2025-61594ruby3.3-dev3.3.8-2ubuntu3.1 uri: URI module: Credential exposure via URI + operator — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-56857stdlibv1.26.7 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — usr/bin/pebble
LOW CVE-2026-98819linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel: validate DDC record lengths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98820linux-libc-dev7.0.0-38.38 kernel: blk-mq: set RQF_USE_SCHED when the operation is known — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98825linux-libc-dev7.0.0-38.38 kernel: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98826linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of service via use-after-free in the AC100 RTC driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98830linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via buffer overflow in WFx Wi-Fi driver — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98831linux-libc-dev7.0.0-38.38 kernel: of/overlay: don't leak fragment references when changeset init fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98833linux-libc-dev7.0.0-38.38 kernel: mtd: core: call _get_device() with the master MTD — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98834linux-libc-dev7.0.0-38.38 kernel: mtd: core: avoid double-free of OTP NVMEM device — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98835linux-libc-dev7.0.0-38.38 kernel: iio: accel: kionix-kx022a: Fix array boundary check — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98839linux-libc-dev7.0.0-38.38 kernel: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98841linux-libc-dev7.0.0-38.38 kernel: virt: vmgenid: set driver_data before registering notification handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98842linux-libc-dev7.0.0-38.38 kernel: module: fix lost error code from codetag_load_module() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98845linux-libc-dev7.0.0-38.38 kernel: tpm: Disable TPM on null key name mismatch — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98847linux-libc-dev7.0.0-38.38 kernel: rtc: spear: initialize IRQ state before requesting alarm IRQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98848linux-libc-dev7.0.0-38.38 kernel: rtc: ac100: Assign .num before accessing .hws — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98851linux-libc-dev7.0.0-38.38 kernel: netfilter: nft_flow_offload: drop flowtable reference on init error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98854linux-libc-dev7.0.0-38.38 kernel: of/overlay: only treat a positive changeset id as registered — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98633linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98636linux-libc-dev7.0.0-38.38 kernel: squashfs: Add dictionary size range check to prevent shift-out-of-bounds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98638linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98639linux-libc-dev7.0.0-38.38 kernel: KVM: riscv: Fix NACL hfence entry update order — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98647linux-libc-dev7.0.0-38.38 kernel: bpf: Fix divide-by-zero in btf_struct_walk() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98656linux-libc-dev7.0.0-38.38 kernel: iio: trigger: cancel reenable_work before freeing trigger — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98657linux-libc-dev7.0.0-38.38 kernel: iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98658linux-libc-dev7.0.0-38.38 kernel: iio: proximity: aw96103: validate firmware data length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98659linux-libc-dev7.0.0-38.38 kernel: iio: pressure: rohm-bm1390: Return error when read fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98660linux-libc-dev7.0.0-38.38 kernel: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98661linux-libc-dev7.0.0-38.38 kernel: iio: light: rohm-bu27034: Fix infinite delay on error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98662linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of Service via use-after-free during gp2ap020a00f device removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98663linux-libc-dev7.0.0-38.38 kernel: iio: imu: adis16480: fix unprotected debugfs reads — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98664linux-libc-dev7.0.0-38.38 kernel: iio: imu: adis16400: fix unprotected debugfs reads — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98665linux-libc-dev7.0.0-38.38 kernel: iio: health: max30102: fix NULL dereference in interrupt handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98666linux-libc-dev7.0.0-38.38 kernel: iio: gyro: adis16136: fix unprotected debugfs reads — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98667linux-libc-dev7.0.0-38.38 kernel: iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98576linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: fix slab-out-of-bounds reads when logging service names — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98578linux-libc-dev7.0.0-38.38 kernel: nfc: st21nfca: validate ISO15693 inventory length — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98579linux-libc-dev7.0.0-38.38 kernel: nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98583linux-libc-dev7.0.0-38.38 kernel: nfc: nfcmrvl: validate helper command length before pull — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98593linux-libc-dev7.0.0-38.38 kernel: s390/debug: Fix NULL pointer dereference in debug_info_copy() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98594linux-libc-dev7.0.0-38.38 kernel: tg3: clean up PHYLIB resources on probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98602linux-libc-dev7.0.0-38.38 kernel: Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98603linux-libc-dev7.0.0-38.38 kernel: kernel: Denial of service via race condition in ovpn — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98604linux-libc-dev7.0.0-38.38 kernel: ovpn: replace bind when learning local endpoint — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98605linux-libc-dev7.0.0-38.38 kernel: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98611linux-libc-dev7.0.0-38.38 kernel: bpf: Check params size before reading reserved fields — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98615linux-libc-dev7.0.0-38.38 kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98616linux-libc-dev7.0.0-38.38 kernel: eth: fbnic: reset num_napi when the napi vectors are freed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98617linux-libc-dev7.0.0-38.38 kernel: eth: fbnic: use the Rx queue napi pointer to find the napi vector — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98618linux-libc-dev7.0.0-38.38 kernel: eth: fbnic: Handle maximum standalone channels — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98620linux-libc-dev7.0.0-38.38 kernel: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98623linux-libc-dev7.0.0-38.38 kernel: drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98668linux-libc-dev7.0.0-38.38 kernel: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98696linux-libc-dev7.0.0-38.38 kernel: USB: serial: fix driver deregistration order — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98697linux-libc-dev7.0.0-38.38 kernel: USB: serial: fix dynamic id driver deregistration race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98703linux-libc-dev7.0.0-38.38 kernel: wifi: mac80211: minstrel_ht: validate fixed rate index — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98710linux-libc-dev7.0.0-38.38 kernel: wifi: iwlegacy: 3945: free EEPROM data on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98711linux-libc-dev7.0.0-38.38 kernel: kernel: cw1200: Information disclosure via out-of-bounds read during frame transmission — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98713linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98714linux-libc-dev7.0.0-38.38 kernel: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98715linux-libc-dev7.0.0-38.38 kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98718linux-libc-dev7.0.0-38.38 kernel: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98720linux-libc-dev7.0.0-38.38 kernel: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98721linux-libc-dev7.0.0-38.38 kernel: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98722linux-libc-dev7.0.0-38.38 kernel: mtd: block2mtd: Fix divide error when erase_size is zero — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98728linux-libc-dev7.0.0-38.38 kernel: tpm: fix off-by-four bounds check in tpm2_get_random() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98732linux-libc-dev7.0.0-38.38 kernel: Bluetooth: btintel: fix buffer over-read in btintel_hw_error() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98740linux-libc-dev7.0.0-38.38 kernel: EDAC/altera: Drop __init from ECC setup paths for re-probe safety — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98746linux-libc-dev7.0.0-38.38 kernel: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98747linux-libc-dev7.0.0-38.38 kernel: serial: core: fix NULL pointer dereference in serial_core_unregister_port() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98669linux-libc-dev7.0.0-38.38 kernel: iio: buffer: serialize buffer teardown with mode claims — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98670linux-libc-dev7.0.0-38.38 kernel: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98671linux-libc-dev7.0.0-38.38 kernel: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98673linux-libc-dev7.0.0-38.38 kernel: iio: adc: pac1934: check ACPI label duplication — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98674linux-libc-dev7.0.0-38.38 kernel: iio: adc: adi-axi-adc: Initialize state mutex — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98675linux-libc-dev7.0.0-38.38 kernel: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98676linux-libc-dev7.0.0-38.38 kernel: iio: adc: ade9000: fix NULL pointer dereference in clkout registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98677linux-libc-dev7.0.0-38.38 kernel: iio: adc: ad_sigma_delta: fix use-after-free on unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98678linux-libc-dev7.0.0-38.38 kernel: iio: adc: ad4030: fix invalid oversampling_ratio validation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98679linux-libc-dev7.0.0-38.38 kernel: iio: accel: kxcjk-1013: reject duplicate event disable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98680linux-libc-dev7.0.0-38.38 kernel: iio: accel: kionix-kx022a: Prevent memory leak and fix state — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98682linux-libc-dev7.0.0-38.38 kernel: smb: client: drain and invalidate before server-side copy/clone — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98683linux-libc-dev7.0.0-38.38 kernel: smb: client: flush dirty data before zeroing a range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98684linux-libc-dev7.0.0-38.38 kernel: smb: client: flush and commit data before querying allocated ranges — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98687linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Reject oversized XDomain properties responses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98692linux-libc-dev7.0.0-38.38 kernel: thunderbolt: Make the DP tunnel activation callback mandatory — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-98695linux-libc-dev7.0.0-38.38 kernel: USB: serial: fix ioctl hangup race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80723linux-libc-dev7.0.0-38.38 kernel: of: reserved_mem: prevent OOB when too many dynamic regions are defined — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80724linux-libc-dev7.0.0-38.38 kernel: ptp: vmclock: prevent read-only mappings from becoming writable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80738linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80747linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: d ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80755linux-libc-dev7.0.0-38.38 kernel: selinux: reject a permission value exceeding the class permission count — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80764linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_event: fix LE list UAF on reset — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80785linux-libc-dev7.0.0-38.38 kernel: fbdev: serialize mode sysfs access with lock_fb_info() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80786linux-libc-dev7.0.0-38.38 kernel: fbdev: Wrap user-invoked calls to fb_set_var() in helper — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80820linux-libc-dev7.0.0-38.38 kernel: xfs: don't livelock in scrub on a circular unlinked list — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80822linux-libc-dev7.0.0-38.38 kernel: mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80851linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: g ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80899linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: e ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80948linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80974linux-libc-dev7.0.0-38.38 kernel: mfd: sm501: Fix potential memory leaks during remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80990linux-libc-dev7.0.0-38.38 kernel: net: thunderbolt: Release the Rx HopID that was handed out on mismatch — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80999linux-libc-dev7.0.0-38.38 kernel: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-81011linux-libc-dev7.0.0-38.38 kernel: platform/x86: hp-bioscfg: pass validated element count to package parsers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89437linux-libc-dev7.0.0-38.38 kernel: platform/x86: int1092: Fix potential memory leak in sar_probe() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89441linux-libc-dev7.0.0-38.38 kernel: mmc: via-sdmmc: cancel card-detect work on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80556linux-libc-dev7.0.0-38.38 kernel: mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80572linux-libc-dev7.0.0-38.38 kernel: Input: byd - synchronize timer deletion before freeing private data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80579linux-libc-dev7.0.0-38.38 kernel: fbdev: clear fb_info->mode before deleting a videomode — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80580linux-libc-dev7.0.0-38.38 kernel: fbdev: bound mode sysfs output to the sysfs buffer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80608linux-libc-dev7.0.0-38.38 kernel: accel/amdxdna: Fix iommu domain lifetime race during device removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80678linux-libc-dev7.0.0-38.38 kernel: i2c: imx: Fix slave registration race and error handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80679linux-libc-dev7.0.0-38.38 kernel: s390/dasd: Fix potential NULL pointer dereference — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80680linux-libc-dev7.0.0-38.38 kernel: i2c: amd-mp2: Unregister callback on adapter add failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80685linux-libc-dev7.0.0-38.38 kernel: mm/util: don't read __page_2 for order-1 folios in snapshot_page() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80687linux-libc-dev7.0.0-38.38 kernel: iommufd/viommu: Release the igroup lock on the vdevice_size error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80688linux-libc-dev7.0.0-38.38 kernel: riscv: drop __init from vec_check_unaligned_access_speed_all_cpus — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80689linux-libc-dev7.0.0-38.38 kernel: tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80690linux-libc-dev7.0.0-38.38 kernel: scsi: ufs: core: Initialize hba->rpmbs list in ufshcd — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80696linux-libc-dev7.0.0-38.38 kernel: hwmon: (ltc4282) Fix reading the minimum alarm voltage — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80698linux-libc-dev7.0.0-38.38 kernel: dmaengine: idxd: fix double free of wq, engine, and group structs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80704linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: use proper context for logging — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80706linux-libc-dev7.0.0-38.38 kernel: can: softing: fw_parse(): validate firmware record spans — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80708linux-libc-dev7.0.0-38.38 kernel: s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80709linux-libc-dev7.0.0-38.38 kernel: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-80711linux-libc-dev7.0.0-38.38 kernel: power: supply: max17040: handle missing status supplier — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89719linux-libc-dev7.0.0-38.38 kernel: zram: fix out-of-bounds access in read_block_state() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89722linux-libc-dev7.0.0-38.38 kernel: PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89738linux-libc-dev7.0.0-38.38 kernel: usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89740linux-libc-dev7.0.0-38.38 kernel: serial: imx: serialize imx_uart_ports[] lifetime — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89744linux-libc-dev7.0.0-38.38 kernel: device property: fix infinite loop in fwnode_for_each_child_node() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89756linux-libc-dev7.0.0-38.38 kernel: mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89762linux-libc-dev7.0.0-38.38 kernel: apparmor: fix cred UAF caused by begin_current_label_crit_section() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89763linux-libc-dev7.0.0-38.38 kernel: KEYS: trusted: Fix TPM teardown ordering — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89764linux-libc-dev7.0.0-38.38 kernel: rust: devres: fix race between concurrent revokers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89772linux-libc-dev7.0.0-38.38 kernel: btrfs: write-protect folios during data writeback — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89795linux-libc-dev7.0.0-38.38 kernel: PCI: Allow per function PCI slots to fix slot reset on s390 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89797linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89799linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: b ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89809linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89822linux-libc-dev7.0.0-38.38 kernel: drm/i915: Guard against NULL driver_data in i915_pci_probe() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89824linux-libc-dev7.0.0-38.38 kernel: drm/panel-edp: fix i2c adapter leak on probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89834linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89835linux-libc-dev7.0.0-38.38 kernel: f2fs: avoid NULL checkpoint thread access in sysfs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89838linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93146linux-libc-dev7.0.0-38.38 kernel: time/namespace: Validate nanosecond field in proc_timens_set_offset() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89452linux-libc-dev7.0.0-38.38 kernel: iommu/msm: Unwind probe state on registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89462linux-libc-dev7.0.0-38.38 kernel: power: supply: max17040: propagate register read errors — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89465linux-libc-dev7.0.0-38.38 kernel: power: supply: rt9455: quiesce delayed work before teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89468linux-libc-dev7.0.0-38.38 kernel: power: supply: lp8788-charger: fix use-after-free on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89472linux-libc-dev7.0.0-38.38 kernel: power: supply: charger-manager: register regulators before exposing sysfs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89539linux-libc-dev7.0.0-38.38 kernel: SUNRPC: reject duplicate CREDS_VALUE options — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89543linux-libc-dev7.0.0-38.38 kernel: sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89552linux-libc-dev7.0.0-38.38 kernel: params: fix charp corruption on allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89556linux-libc-dev7.0.0-38.38 kernel: module: validate string table section types — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89568linux-libc-dev7.0.0-38.38 kernel: kho: fix size calculation in kho_preserved_memory_reserve() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89574linux-libc-dev7.0.0-38.38 kernel: dm array: validate array block headers on read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89632linux-libc-dev7.0.0-38.38 kernel: smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89636linux-libc-dev7.0.0-38.38 kernel: smb: client: clear ce->tgthint in free_tgts() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89648linux-libc-dev7.0.0-38.38 kernel: ceph: cap delegated inode count in ceph_parse_deleg_inos() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89654linux-libc-dev7.0.0-38.38 kernel: ceph: fix UAF in check_new_map() on session freed during unlock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89682linux-libc-dev7.0.0-38.38 kernel: nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89702linux-libc-dev7.0.0-38.38 kernel: nfsd: size fh_verify server sockaddr slot by xpt_locallen — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89709linux-libc-dev7.0.0-38.38 kernel: lockd, nfsd: RCU-protect nlmsvc_ops dispatch — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89713linux-libc-dev7.0.0-38.38 kernel: NFSD: check truncate permission under inode lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89718linux-libc-dev7.0.0-38.38 kernel: zram: fix out-of-bounds access in writeback_store() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2019-14899linux-libc-dev7.0.0-38.38 VPN: an attacker can inject data into the TCP stream which allows a hijack of active connections inside the VPN tunnel — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2019-15213linux-libc-dev7.0.0-38.38 kernel: use-after-free caused by malicious USB device in drivers/media/usb/dvb-usb/dvb-usb-init.c — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2019-19378linux-libc-dev7.0.0-38.38 kernel: out-of-bounds write in index_rbio_pages in fs/btrfs/raid56.c — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2019-19814linux-libc-dev7.0.0-38.38 kernel: out-of-bounds write in __remove_dirty_segment in fs/f2fs/segment.c — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2019-20426linux-libc-dev7.0.0-38.38 ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2020-14304linux-libc-dev7.0.0-38.38 kernel: ethtool when reading eeprom of device could lead to memory leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2020-35501linux-libc-dev7.0.0-38.38 kernel: audit not logging access to syscall open_by_handle_at for users with CAP_DAC_READ_SEARCH capability — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2021-26934linux-libc-dev7.0.0-38.38 An issue was discovered in the Linux kernel 4.18 through 5.10.16, as u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2022-41848linux-libc-dev7.0.0-38.38 kernel: Race condition between mgslpc_ioctl and mgslpc_detach — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2022-44034linux-libc-dev7.0.0-38.38 Kernel: A use-after-free due to race between scr24x_open() and scr24x_remove() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2022-45885linux-libc-dev7.0.0-38.38 kernel: use-after-free due to race condition occurring in dvb_frontend.c — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2022-48846linux-libc-dev7.0.0-38.38 kernel: block: release rq qos structures for queue without disk — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2022-48929linux-libc-dev7.0.0-38.38 kernel: bpf: Fix crash due to out of bounds access into reg2btf_ids. — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2022-50230linux-libc-dev7.0.0-38.38 kernel: arm64: set UXN on swapper page tables — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2022-50232linux-libc-dev7.0.0-38.38 kernel: arm64: set UXN on swapper page tables — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2023-33053linux-libc-dev7.0.0-38.38 ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2023-52879linux-libc-dev7.0.0-38.38 kernel: tracing: Have trace_event_file have ref counters — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2023-54105linux-libc-dev7.0.0-38.38 kernel: can: isotp: check CAN address family in isotp_bind() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2023-54190linux-libc-dev7.0.0-38.38 kernel: Kernel: Denial of Service via reference count leak in LED core — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2023-6238linux-libc-dev7.0.0-38.38 kernel: nvme: memory corruption via unprivileged user passthrough — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13716binutils2.46-3ubuntu2 binutils: Memory leak with the C++ symbol demangler routine in libiberty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13716binutils-common2.46-3ubuntu2 binutils: Memory leak with the C++ symbol demangler routine in libiberty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13716binutils-x86-64-linux-gnu2.46-3ubuntu2 binutils: Memory leak with the C++ symbol demangler routine in libiberty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13716libbinutils2.46-3ubuntu2 binutils: Memory leak with the C++ symbol demangler routine in libiberty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13716libctf-nobfd02.46-3ubuntu2 binutils: Memory leak with the C++ symbol demangler routine in libiberty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13716libctf02.46-3ubuntu2 binutils: Memory leak with the C++ symbol demangler routine in libiberty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13716libgprofng02.46-3ubuntu2 binutils: Memory leak with the C++ symbol demangler routine in libiberty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2025-58767libruby3.33.3.8-2ubuntu3.1 rexml: REXML denial of service — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2025-61594libruby3.33.3.8-2ubuntu3.1 uri: URI module: Credential exposure via URI + operator — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13716libsframe32.46-3ubuntu2 binutils: Memory leak with the C++ symbol demangler routine in libiberty — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-40228libsystemd0259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-40228libudev1259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-0537linux-libc-dev7.0.0-38.38 ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13165linux-libc-dev7.0.0-38.38 ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2017-13693linux-libc-dev7.0.0-38.38 kernel: ACPI operand cache leak in dsutils.c — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2018-1121linux-libc-dev7.0.0-38.38 procps: process hiding through race condition enumerating /proc — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2018-12928linux-libc-dev7.0.0-38.38 kernel: NULL pointer dereference in hfs_ext_read_extent in hfs.ko — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2018-12929linux-libc-dev7.0.0-38.38 kernel: use-after-free in ntfs_read_locked_inode in the ntfs.ko — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2018-12930linux-libc-dev7.0.0-38.38 kernel: stack-based out-of-bounds write in ntfs_end_buffer_async_read in the ntfs.ko — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2018-12931linux-libc-dev7.0.0-38.38 kernel: stack-based out-of-bounds write in ntfs_attr_find in the ntfs.ko — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74521linux-libc-dev7.0.0-38.38 kernel: ksmbd: use memcmp() to compare ClientGUIDs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74527linux-libc-dev7.0.0-38.38 kernel: octeontx2-af: Block VFs from clobbering special CGX PKIND state — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74543linux-libc-dev7.0.0-38.38 kernel: net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74544linux-libc-dev7.0.0-38.38 kernel: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74553linux-libc-dev7.0.0-38.38 kernel: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74554linux-libc-dev7.0.0-38.38 kernel: wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74568linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: vgic: Fix race between LPI release and re-registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74571linux-libc-dev7.0.0-38.38 kernel: btrfs: skip global block reserve accounting for rescue mounts — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74605linux-libc-dev7.0.0-38.38 kernel: eventfs: Use children field for rcu head and add memory barriers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74653linux-libc-dev7.0.0-38.38 kernel: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74672linux-libc-dev7.0.0-38.38 kernel: mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74687linux-libc-dev7.0.0-38.38 kernel: watchdog: at91sam9_wdt: prevent timer rearm during teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74689linux-libc-dev7.0.0-38.38 kernel: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74690linux-libc-dev7.0.0-38.38 kernel: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74711linux-libc-dev7.0.0-38.38 kernel: hwmon: (pmbus) Fix type confusion in notification logic — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74713linux-libc-dev7.0.0-38.38 kernel: vhost_iotlb: bound map allocation in add_range — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74725linux-libc-dev7.0.0-38.38 kernel: enic: fix tx_hang_reset use-after-free on device removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74729linux-libc-dev7.0.0-38.38 kernel: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74733linux-libc-dev7.0.0-38.38 kernel: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74754linux-libc-dev7.0.0-38.38 kernel: scsi: core: pair EH runtime PM get and put — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2024-0564linux-libc-dev7.0.0-38.38 kernel: max page sharing of Kernel Samepage Merging (KSM) may cause memory deduplication — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2024-35995linux-libc-dev7.0.0-38.38 kernel: ACPI: CPPC: Use access_width over bit_width for system memory accesses — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2024-56568linux-libc-dev7.0.0-38.38 kernel: iommu/arm-smmu: Defer probe of clients after smmu device bound — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-100072linux-libc-dev7.0.0-38.38 kernel: ACPI: platform: Use acpi_bus_get_primary_device() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-46055linux-libc-dev7.0.0-38.38 kernel: apparmor: Fix string overrun due to missing termination — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-68086linux-libc-dev7.0.0-38.38 kernel: mm/khugepaged: write all dirty file folios when collapsing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-68102linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: fix aperture mapping leak — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-68305linux-libc-dev7.0.0-38.38 kernel: drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-72344linux-libc-dev7.0.0-38.38 kernel: net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74441linux-libc-dev7.0.0-38.38 kernel: usb: typec: ucsi: Fix race condition and ordering in port unregistration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74448linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: fix QID bit leak in pqm_create_queue() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74450linux-libc-dev7.0.0-38.38 kernel: drm/amd/pm: fix pptable use-after-free — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74466linux-libc-dev7.0.0-38.38 kernel: s390/zcrypt: Close speculative mem read possibility — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74481linux-libc-dev7.0.0-38.38 kernel: mm/page_reporting: use system_freezable_wq to fix UAF during suspend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74490linux-libc-dev7.0.0-38.38 kernel: tipc: avoid use-after-free in poll trace queue dumps — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74509linux-libc-dev7.0.0-38.38 kernel: Bluetooth: hci_sync: Fix advertising data UAFs — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74512linux-libc-dev7.0.0-38.38 kernel: audit: fix potential use-after-free in audit_del_rule() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74514linux-libc-dev7.0.0-38.38 kernel: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74515linux-libc-dev7.0.0-38.38 kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-74519linux-libc-dev7.0.0-38.38 kernel: pinctrl: devicetree: don't free uninitialized dev_name on error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93150linux-libc-dev7.0.0-38.38 kernel: cgroup/cpuset: Make nr_deadline_tasks an atomic_t — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93155linux-libc-dev7.0.0-38.38 kernel: crypto: keembay - Fix AEAD unregister count in error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93163linux-libc-dev7.0.0-38.38 kernel: hwrng: core - fix rng list on registration error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93168linux-libc-dev7.0.0-38.38 kernel: dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93172linux-libc-dev7.0.0-38.38 kernel: mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93181linux-libc-dev7.0.0-38.38 kernel: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93186linux-libc-dev7.0.0-38.38 kernel: cxl/mbox: Clamp mailbox output allocation to the payload size — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93200linux-libc-dev7.0.0-38.38 kernel: i3c: master: Fix use-after-free of master->this — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93202linux-libc-dev7.0.0-38.38 kernel: i3c: master: Fix recursive locking during device registration — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93205linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93216linux-libc-dev7.0.0-38.38 kernel: mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93230linux-libc-dev7.0.0-38.38 kernel: mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93231linux-libc-dev7.0.0-38.38 kernel: lockd: fix swapped arguments in nlmsvc_match_ip() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93235linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93237linux-libc-dev7.0.0-38.38 kernel: LoongArch: Add DIRECT_MAP_PHYSMEM_END definition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93239linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: a ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93240linux-libc-dev7.0.0-38.38 kernel: memcg: make the v1 soft limit knob inert — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93251linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93260linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-92493linux-libc-dev7.0.0-38.38 kernel: cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93042linux-libc-dev7.0.0-38.38 kernel: dmaengine: dw-edma: Terminate all descriptors without callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93047linux-libc-dev7.0.0-38.38 kernel: drm/v3d: Associate BOs with every job that accesses them — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93050linux-libc-dev7.0.0-38.38 kernel: ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93058linux-libc-dev7.0.0-38.38 kernel: drm/msm: Only fini scheduler after successful init — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93062linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93072linux-libc-dev7.0.0-38.38 kernel: irqchip/renesas-irqc: Fix generic interrupt chip leak on remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93081linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Fix SCMI device destroy lifetimes — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93091linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Quiesce notifications before teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93093linux-libc-dev7.0.0-38.38 kernel: firmware: arm_scmi: Publish channel state before callbacks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93099linux-libc-dev7.0.0-38.38 kernel: fs/resctrl: Fix UAF from worker threads when domains are removed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93100linux-libc-dev7.0.0-38.38 kernel: fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93104linux-libc-dev7.0.0-38.38 kernel: RDMA/rvt: Return NULL after port allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93116linux-libc-dev7.0.0-38.38 kernel: platform/x86: asus-wmi: fix resource leaks on probe failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93117linux-libc-dev7.0.0-38.38 kernel: usb: fix UAF when probe runs concurrent to dyn ID removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93122linux-libc-dev7.0.0-38.38 kernel: usb: gadget: uac: validate rate list length before storing — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93123linux-libc-dev7.0.0-38.38 kernel: serial: qcom-geni: do not advance stale DMA completions — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93128linux-libc-dev7.0.0-38.38 kernel: platform/x86: lg-laptop: Fix LED resource handling — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93129linux-libc-dev7.0.0-38.38 kernel: platform/x86: dell-wmi-base: Fix handling of ultra performance key — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93142linux-libc-dev7.0.0-38.38 kernel: thermal/drivers/rcar: Fix error checking in probe() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97431linux-libc-dev7.0.0-38.38 kernel: drm/amd/display: Avoid DPMS-on for phantom stream — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97447linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: A ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97473linux-libc-dev7.0.0-38.38 kernel: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97474linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: mld: purge async notifications upon nic error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97477linux-libc-dev7.0.0-38.38 kernel: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97478linux-libc-dev7.0.0-38.38 kernel: virt: acrn: Fix irqfd use-after-free during eventfd shutdown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97479linux-libc-dev7.0.0-38.38 kernel: driver core: Avoid warning when removing a device while its supplier is unbinding — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97480linux-libc-dev7.0.0-38.38 kernel: tty: serial: 8250: protect against NULL uart->port.dev in register — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97494linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97495linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Check bounds on allocate_doorbell — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97496linux-libc-dev7.0.0-38.38 kernel: drm/amdkfd: Fix OOB memory exposure in get_wave_state() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97499linux-libc-dev7.0.0-38.38 kernel: coresight: perf: Retrieve path and source from event data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97501linux-libc-dev7.0.0-38.38 kernel: pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97503linux-libc-dev7.0.0-38.38 kernel: genirq/proc: Size interrupt directory names for 10-digit interrupt numbers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97505linux-libc-dev7.0.0-38.38 kernel: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97512linux-libc-dev7.0.0-38.38 kernel: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97519linux-libc-dev7.0.0-38.38 kernel: drm/xe: Fix null pointer dereference in devcoredump cleanup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97521linux-libc-dev7.0.0-38.38 kernel: gfs2: fix quota init duplicate scan — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97531linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Skip vport under deletion in report ID acquisition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97532linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93272linux-libc-dev7.0.0-38.38 kernel: remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93285linux-libc-dev7.0.0-38.38 kernel: f2fs: embed f2fs_gc_kthread in f2fs_sb_info — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93786linux-libc-dev7.0.0-38.38 kernel: ksmbd: preserve VFS inherited POSIX ACL mask — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93788linux-libc-dev7.0.0-38.38 kernel: wifi: iwlwifi: acpi: validate WGDS table revision index — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93809linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: flush pending RCU callbacks on module unload — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93810linux-libc-dev7.0.0-38.38 kernel: cachefiles: Fix double fput — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93814linux-libc-dev7.0.0-38.38 kernel: spi: core: Abort active target transfer on controller suspend — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93818linux-libc-dev7.0.0-38.38 kernel: PCI: plda: Protect root bus removal with rescan lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93827linux-libc-dev7.0.0-38.38 kernel: virtio-fs: avoid double-free on failed queue setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-93829linux-libc-dev7.0.0-38.38 kernel: smb: client: fix races in cifsd thread creation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97409linux-libc-dev7.0.0-38.38 kernel: nvme-fc: Do not cancel requests in io target before it is initialized — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97410linux-libc-dev7.0.0-38.38 kernel: netconsole: take target_cleanup_list_lock in drop_netconsole_target() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97412linux-libc-dev7.0.0-38.38 kernel: pds_core: quiesce DMA before freeing resources — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97414linux-libc-dev7.0.0-38.38 kernel: ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97423linux-libc-dev7.0.0-38.38 kernel: cxl/region: Validate partition index before array access — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97424linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97425linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: fix buffer overflow during vBIOS update — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97426linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97427linux-libc-dev7.0.0-38.38 kernel: drm/amd/pm: bound pp_dpm_set_pp_table() memcpy — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-97428linux-libc-dev7.0.0-38.38 kernel: drm/amdgpu: harden FRU PIA parsing with bounded helpers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90013linux-libc-dev7.0.0-38.38 kernel: tracing: Take trace_array reference when opening options file — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90021linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_midi: initialize work in f_midi_alloc() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90022linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90023linux-libc-dev7.0.0-38.38 kernel: usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90027linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90036linux-libc-dev7.0.0-38.38 kernel: NFSD: Prevent client use-after-free during blocked-lock reaping — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90044linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: u ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90045linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: U ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90060linux-libc-dev7.0.0-38.38 kernel: ALSA: control: Don't add invalid kcontrols to LED layer — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90084linux-libc-dev7.0.0-38.38 kernel: octeontx2-vf: fix workqueue and netdev race in probe/remove — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90097linux-libc-dev7.0.0-38.38 kernel: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90105linux-libc-dev7.0.0-38.38 kernel: vxlan: fix reading neigh ha — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90106linux-libc-dev7.0.0-38.38 kernel: net: bridge: arp/nd proxy: fix reading neigh ha — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90112linux-libc-dev7.0.0-38.38 kernel: net: qlcnic: validate unified ROM sections before loading — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90116linux-libc-dev7.0.0-38.38 kernel: ALSA: mtpav: shut down output timer before card teardown — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90144linux-libc-dev7.0.0-38.38 kernel: dpll: fix NULL deref in dpll_device_ops() during teardown race — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90174linux-libc-dev7.0.0-38.38 kernel: ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90180linux-libc-dev7.0.0-38.38 kernel: block: mtip32xx: synchronize ioctls with device removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90182linux-libc-dev7.0.0-38.38 kernel: blk-iocost: clear delay state when freeing policy data — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90184linux-libc-dev7.0.0-38.38 kernel: null_blk: serialize configfs attribute updates with device setup — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89848linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Quiesce response IRQ before freeing request queue — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89859linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89860linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Initialize NVMe abort_work once at submission — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89862linux-libc-dev7.0.0-38.38 kernel: scsi: qla2xxx: Fix BSG job leak on validate flash image error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89870linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: m ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89877linux-libc-dev7.0.0-38.38 kernel: media: saa7164: fix cleanup on resource allocation failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89899linux-libc-dev7.0.0-38.38 kernel: media: cec: disable delayed work before freeing an interrupted transmit — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89912linux-libc-dev7.0.0-38.38 kernel: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89920linux-libc-dev7.0.0-38.38 kernel: KVM: s390: Fix memory corruption by not reinjecting CK machine checks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89921linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: K ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89929linux-libc-dev7.0.0-38.38 kernel: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89938linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: i ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89944linux-libc-dev7.0.0-38.38 kernel: ASoC: hdac_hda: Fix hlink refcount leak on component registration failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89960linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: s ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89962linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: p ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89972linux-libc-dev7.0.0-38.38 kernel: nvme: add missing SRCU grace period in error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89988linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: k ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89996linux-libc-dev7.0.0-38.38 kernel: dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-89998linux-libc-dev7.0.0-38.38 kernel: dm: fix race when loading and unloading a table — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90002linux-libc-dev7.0.0-38.38 In the Linux kernel, the following vulnerability has been resolved: f ... — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90336linux-libc-dev7.0.0-38.38 kernel: serial: core: clear freed pointers on uart_register_driver() failure — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90337linux-libc-dev7.0.0-38.38 kernel: serial: core: do fallible allocations before the console can be registered — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90351linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90359linux-libc-dev7.0.0-38.38 kernel: bpf: Reject >8 byte return values on return-reading trampoline paths — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90363linux-libc-dev7.0.0-38.38 kernel: drm/msm: don't tear down KMS twice when KMS init fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90365linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: cancel reset and rc work on device unregister — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90367linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90379linux-libc-dev7.0.0-38.38 kernel: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90383linux-libc-dev7.0.0-38.38 kernel: misc: sgi-gru: remove interrupt-context page-table walks — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90385linux-libc-dev7.0.0-38.38 kernel: md/raid1: create serial pool adding rdev to array with serialize_policy=1 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90389linux-libc-dev7.0.0-38.38 kernel: md: scope memalloc_noio to allocation critical sections — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90401linux-libc-dev7.0.0-38.38 kernel: md: remove REQ_NOWAIT support from raid1/10/456 — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90408linux-libc-dev7.0.0-38.38 kernel: wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90410linux-libc-dev7.0.0-38.38 kernel: spi: davinci: switch to managed controller allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90418linux-libc-dev7.0.0-38.38 kernel: nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90421linux-libc-dev7.0.0-38.38 kernel: PCI: Fix UAF when probe runs concurrent to dyn ID removal — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90422linux-libc-dev7.0.0-38.38 kernel: clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90433linux-libc-dev7.0.0-38.38 kernel: spi: oc-tiny: switch to managed controller allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-92481linux-libc-dev7.0.0-38.38 kernel: pinctrl: mediatek: free EINT resources on unbind — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-92482linux-libc-dev7.0.0-38.38 kernel: pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90185linux-libc-dev7.0.0-38.38 kernel: null_blk: serialize configfs attribute stores with the lock — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90186linux-libc-dev7.0.0-38.38 kernel: null_blk: reject per-device queue resize for shared tag set — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90187linux-libc-dev7.0.0-38.38 kernel: null_blk: free zones array on device power-off — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90188linux-libc-dev7.0.0-38.38 kernel: null_blk: free global tag_set on init error path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90189linux-libc-dev7.0.0-38.38 kernel: null_blk: register configfs subsystem after creating default devices — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90194linux-libc-dev7.0.0-38.38 kernel: ACPI: scan: fix bus ID cleanup on device_add() failures — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90196linux-libc-dev7.0.0-38.38 kernel: ASoC: SOF: validate topology volume range before allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90206linux-libc-dev7.0.0-38.38 kernel: nvmet: fix max_qid race between configfs and controller allocation — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90208linux-libc-dev7.0.0-38.38 kernel: clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90235linux-libc-dev7.0.0-38.38 kernel: sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90247linux-libc-dev7.0.0-38.38 kernel: bpf: Fix mmap_lock leak in irq_work path — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90259linux-libc-dev7.0.0-38.38 kernel: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90267linux-libc-dev7.0.0-38.38 kernel: scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90301linux-libc-dev7.0.0-38.38 kernel: ocfs2: o2hb: quiesce negotiate handlers and timeout work — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90311linux-libc-dev7.0.0-38.38 kernel: thermal: hwmon: Remove hwmon class device along with its parent — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90315linux-libc-dev7.0.0-38.38 kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90322linux-libc-dev7.0.0-38.38 kernel: ocfs2/cluster: keep heartbeat local node stable — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90326linux-libc-dev7.0.0-38.38 kernel: blk-cgroup: fix race between policy activation and blkg destruction — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90328linux-libc-dev7.0.0-38.38 kernel: HID: steam: Reject short reads — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)
LOW CVE-2026-90335linux-libc-dev7.0.0-38.38 kernel: tty: skip cdev_del() when no cdev is registered — ghcr.io/openvoxproject/openvoxserver:latest (ubuntu 26.04)

Grype

CRITICAL 1 HIGH 11 MEDIUM 428 LOW 93 UNKNOWN 6
SeverityIDPackageInstalledFixedTitle / target
CRITICAL GO-2026-6612stdlibgo1.26.7 1.26.9The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/bin/pebble
HIGH CVE-2026-111497libbrotli11.2.0-3build1 1.2.0-3ubuntu0.1/var/lib/dpkg/status
HIGH GHSA-jr6h-r7vg-f9mcini4j0.5.4 org.ini4j allows attackers to cause a Denial of Service (DoS) — /opt/puppetlabs/server/apps/puppetserver/puppet-server-release.jar
HIGH GHSA-q339-8rmv-2mhverb4.0.3 4.0.3.1ERB has an @_init deserialization guard bypass via def_module / def_method / def_class — /usr/lib/ruby/gems/3.3.0/specifications/default/erb-4.0.3.gemspec
HIGH GO-2026-6607stdlibgo1.26.7 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/bin/pebble
HIGH GO-2026-6603stdlibgo1.26.7 1.26.9When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/bin/pebble
HIGH GO-2026-6611stdlibgo1.26.7 1.26.9A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/bin/pebble
HIGH GO-2026-6608stdlibgo1.26.7 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/bin/pebble
HIGH GO-2026-6613stdlibgo1.26.7 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/bin/pebble
HIGH GO-2026-6617stdlibgo1.26.7 1.26.9HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/bin/pebble
HIGH GO-2026-6605stdlibgo1.26.7 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/bin/pebble
HIGH GO-2026-6610stdlibgo1.26.7 1.26.9Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/bin/pebble
MEDIUM CVE-2026-90802binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91781libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91782libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91781libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91782libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90829binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90829binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90829binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90829libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90829libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90829libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90829libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91780libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90802libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90802libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90802libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90802libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90802libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-112060librtmp12.4+20151223.gitfa8646d.1-3 /var/lib/dpkg/status
MEDIUM CVE-2026-91781binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91782binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91781binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91782binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91781binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91782binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91781libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91782libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91781libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91782libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91781libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91782libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91779libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91780libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91779libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91780libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91779libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91780libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91779libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91780binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91779binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91780binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91779binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91780binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91779binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6846libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6846libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6846libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6846libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6846libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6846binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6846binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6846binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-4647libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-4647libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-4647libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-4647libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-4647libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-4647binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-4647binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-4647binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90829libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90802binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78408bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-88648libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-90804libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90804libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90804libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90804libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90804libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90804binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90804binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90804binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM GHSA-46q3-7gv7-qmggnet-imap0.4.19 0.5.15Net::IMAP: Command Injection via ID command argument — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
MEDIUM CVE-2026-90803libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90803libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90803libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90803libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90803libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90803binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90803binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90803binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-88647libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-90801libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90801libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-107161libsasl2-22.1.28+dfsg1-9ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-90802binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-47242ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47242ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47242libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-3441libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3441libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3441libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3441libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3441libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3441binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3441binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3441binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-118131gpgv2.4.8-4ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91461openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-90828libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90828libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90828libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90828libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90828libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90828binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90828binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90828binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78409bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-110928openssh-client1:10.2p1-2ubuntu3.8 /var/lib/dpkg/status
MEDIUM CVE-2026-35367rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35344rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35373rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91379openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35371rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35350rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-89161libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-35359rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2025-15649perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2025-15649perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2025-15649perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2025-15649libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc6-dev2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc-dev-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-95818libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-56391coreutils9.5-1ubuntu2+0.0.0~ubuntu25 9.7-3ubuntu2.1/var/lib/dpkg/status
MEDIUM CVE-2026-35351rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35348rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35368rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-115207patch2.8-2build1 /var/lib/dpkg/status
MEDIUM CVE-2026-93658rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-18508tar1.35+dfsg-4ubuntu0.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc6-dev2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc-dev-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-18374libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-6845libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-35374rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-18477tar1.35+dfsg-4ubuntu0.4 /var/lib/dpkg/status
MEDIUM CVE-2026-54370libacl12.3.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-35357rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35364rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91375openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91397openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35345rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc6-dev2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc-dev-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-86805libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91380openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35377rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-102473dash0.5.12-12ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-6844libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6844libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6844libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6844libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6844libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6844binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6844binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6844binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-35360rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-18938libp11-kit00.26.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-91484openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-35370rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35354rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-102474dash0.5.12-12ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-6845libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90830libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90830libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90830libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90830libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90830libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90830binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90830binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90830binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-35341rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-35363rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-19548libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-19548libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-19548libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-19548libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-19548libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-19548binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-19548binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-19548binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91487openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91374openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-90831libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90831libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90831libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90831libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90831libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90831binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90831binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90831binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91780libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91779libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6845libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6845libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6845libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6845binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6845binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-6845binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-35352rust-coreutils0.10.0-1ubuntu2~26.04.1 /var/lib/dpkg/status
MEDIUM CVE-2026-15003libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-15003libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-15003libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-15003libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-15003libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-15003binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-15003binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-15003binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-67693libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-54369libacl12.3.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-17591libarchive13t643.8.5-1ubuntu2.3 /var/lib/dpkg/status
MEDIUM CVE-2026-13757libp11-kit00.26.2-2 /var/lib/dpkg/status
MEDIUM CVE-2026-89162libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-95210libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-78410util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-78410bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-95184libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91382openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-47241ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47241ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47241libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47058openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83400openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91418openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-93990libexpat12.7.4-1ubuntu0.2 /var/lib/dpkg/status
MEDIUM CVE-2026-54696ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-54696ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-54696libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-91394openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83408openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-107778libkrb5support01.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107778libkrb5-31.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107778libk5crypto31.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107778libgssapi-krb5-21.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-86145libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-117610libexpat12.7.4-1ubuntu0.2 /var/lib/dpkg/status
MEDIUM CVE-2026-48962perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48962perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48962perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48962libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-91373openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-118370libexpat12.7.4-1ubuntu0.2 /var/lib/dpkg/status
MEDIUM CVE-2026-95619gcc-x86-64-linux-gnu4:15.2.0-5ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-95619gcc4:15.2.0-5ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-91417openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91410openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87291openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87255openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-61308openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc6-dev2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc-dev-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-8674libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-77214libexpat12.7.4-1ubuntu0.2 /var/lib/dpkg/status
MEDIUM CVE-2026-83380openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87290openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83387openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83395openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91396openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-102010gcc-x86-64-linux-gnu4:15.2.0-5ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-102010gcc4:15.2.0-5ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-102010cpp-x86-64-linux-gnu4:15.2.0-5ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-102010cpp4:15.2.0-5ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-89157libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-7017perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-7017perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-7017perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-7017libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-75466libjpeg-turbo82.1.5-4ubuntu4 /var/lib/dpkg/status
MEDIUM CVE-2026-102633libexpat12.7.4-1ubuntu0.2 /var/lib/dpkg/status
MEDIUM CVE-2026-107161libsasl2-modules-db2.1.28+dfsg1-9ubuntu3 /var/lib/dpkg/status
MEDIUM CVE-2026-107708libgssapi-krb5-21.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM GHSA-j3g3-5qv5-52mjnet-imap0.4.19 0.4.20net-imap rubygem vulnerable to possible DoS by memory exhaustion — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
MEDIUM CVE-2025-10990ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2025-10990ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2025-10990libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-48959perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48959perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48959perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48959libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-27820ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-27820ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-27820libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-82560perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-82560perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-82560perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-82560libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM GHSA-g857-hhfv-j68wzlib3.1.1 3.1.2Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption — /usr/lib/ruby/gems/3.3.0/specifications/default/zlib-3.1.1.gemspec
MEDIUM CVE-2026-42258ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-42258ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-42258libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM GHSA-75xq-5h9v-w6pxnet-imap0.4.19 0.4.24net-imap vulnerable to command Injection via unvalidated Symbol inputs — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
MEDIUM CVE-2026-47240ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47240ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-47240libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM GHSA-8p34-64r3-mwg8net-imap0.4.19 0.5.15Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
MEDIUM CVE-2026-41316ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-41316ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-41316libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-95619cpp-x86-64-linux-gnu4:15.2.0-5ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-95619cpp4:15.2.0-5ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-63435ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-63435ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-63435libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-83357openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-115506libexpat12.7.4-1ubuntu0.2 /var/lib/dpkg/status
MEDIUM CVE-2026-42497perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-42497perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-42497perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-42497libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM GO-2026-6809stdlibgo1.26.7 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/bin/pebble
MEDIUM CVE-2026-85091zlib1g-dev1:1.3.dfsg+really1.3.1-1ubuntu3.1 1:1.3.dfsg+really1.3.1-1ubuntu3.2/var/lib/dpkg/status
MEDIUM CVE-2026-85091zlib1g1:1.3.dfsg+really1.3.1-1ubuntu3.1 1:1.3.dfsg+really1.3.1-1ubuntu3.2/var/lib/dpkg/status
MEDIUM CVE-2026-47057openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-113351libexpat12.7.4-1ubuntu0.2 /var/lib/dpkg/status
MEDIUM CVE-2026-46727ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-46727ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2026-46727libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
MEDIUM CVE-2024-52005git-man1:2.53.0-1ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2024-52005git1:2.53.0-1ubuntu1 /var/lib/dpkg/status
MEDIUM CVE-2026-9538perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-9538perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-9538perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-9538libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-107708libkrb5support01.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107708libkrb5-31.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-107708libk5crypto31.22.1-2ubuntu4.1 /var/lib/dpkg/status
MEDIUM CVE-2026-87293openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91335openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91334openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-90801binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90801binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-89158libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-105111openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87367openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83376openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91395openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91400openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-3442libsframe32.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3442libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3442libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3442libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3442libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3442binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3442binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-3442binutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-48961perl-modules-5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48961perl-base5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-48961perl5.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-60589openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83381openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91463openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91398openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91381openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87292openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-112061librtmp12.4+20151223.gitfa8646d.1-3 /var/lib/dpkg/status
MEDIUM CVE-2025-66382libexpat12.7.4-1ubuntu0.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642bsdutils1:2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libblkid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libmount12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libsmartcols12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-91415openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc6-dev2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc-dev-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89092libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-95209libgnutls30t643.8.12-2ubuntu1.1 /var/lib/dpkg/status
MEDIUM CVE-2026-76642libuuid12.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642login1:4.16.0-2+really2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642mount2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-76642util-linux2.41.3-3ubuntu2.2 /var/lib/dpkg/status
MEDIUM CVE-2026-83378openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91411openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-89160libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-103111libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-91462openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83368openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-70907openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-94114openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-90801libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-91451openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-90801libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc6-dev2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc62.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc-gconv-modules-extra2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc-dev-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-97399libc-bin2.43-2ubuntu2.4 /var/lib/dpkg/status
MEDIUM CVE-2026-101516openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-83374openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91452openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91464openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91453openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-48961libperl5.405.40.1-7ubuntu0.3 /var/lib/dpkg/status
MEDIUM CVE-2026-90801binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-90801libctf02.46-3ubuntu2 /var/lib/dpkg/status
MEDIUM CVE-2026-89156libpcre2-8-010.46-1build1 /var/lib/dpkg/status
MEDIUM CVE-2026-91333openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-91332openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
MEDIUM CVE-2026-87294openjdk-21-jre-headless21.0.12.1+1-1~26.04.4 /var/lib/dpkg/status
LOW CVE-2025-66866libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66863libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66865libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66863libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66865libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66862binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66862binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66862binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66862libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66862libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66862libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW GHSA-c4fp-cxrr-mj66net-imap0.4.19 0.5.15Net::IMAP: Denial of Service via incomplete raw argument validation — /usr/lib/ruby/gems/3.3.0/specifications/net-imap-0.4.19.gemspec
LOW CVE-2026-56289patch2.8-2build1 /var/lib/dpkg/status
LOW CVE-2026-56288patch2.8-2build1 /var/lib/dpkg/status
LOW CVE-2025-66862libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66862libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2017-13716libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2017-13716libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2017-13716libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2017-13716binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2017-13716binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2017-13716binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2018-10126libjpeg-turbo82.1.5-4ubuntu4 /var/lib/dpkg/status
LOW CVE-2025-66861binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66861binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66861binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66861libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2017-13716libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2017-13716libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66861libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66861libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66861libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66861libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2026-40228libudev1259.5-0ubuntu3.4 /var/lib/dpkg/status
LOW CVE-2026-40228libsystemd0259.5-0ubuntu3.4 /var/lib/dpkg/status
LOW CVE-2026-105712gpgv2.4.8-4ubuntu3.1 /var/lib/dpkg/status
LOW GHSA-c2f4-jgmc-q2r5rexml3.3.9 3.4.2REXML has DoS condition when parsing malformed XML file — /usr/lib/ruby/gems/3.3.0/specifications/rexml-3.3.9.gemspec
LOW CVE-2025-66866libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66866libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66866libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-5278coreutils9.5-1ubuntu2+0.0.0~ubuntu25 9.7-3ubuntu2.1/var/lib/dpkg/status
LOW CVE-2024-56433passwd1:4.17.4-2ubuntu3 /var/lib/dpkg/status
LOW CVE-2024-56433login.defs1:4.17.4-2ubuntu3 /var/lib/dpkg/status
LOW CVE-2025-1150binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1150binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1150binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1150libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1150libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1150libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1150libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1150libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1151binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1151binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1151binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1151libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1151libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1151libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1151libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-1151libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-61594libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-61594ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-61594ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-43857ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-43857ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-43857libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-66865libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66863libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66865libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66863libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66865libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66863libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66865binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66863binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66865binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66863binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66865binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66863binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66864libsframe32.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66864libgprofng02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66864libctf02.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66866libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66866binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66866binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-58767libruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-58767ruby3.33.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-58767ruby3.3-dev3.3.8-2ubuntu3.1 /var/lib/dpkg/status
LOW CVE-2025-66866binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW GHSA-j4pr-3wm6-xx2ruri0.13.2 0.13.3URI Credential Leakage Bypass over CVE-2025-27221 — /usr/lib/ruby/gems/3.3.0/specifications/default/uri-0.13.2.gemspec
LOW CVE-2025-66864binutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66864binutils-common2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66864binutils-x86-64-linux-gnu2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66864libbinutils2.46-3ubuntu2 /var/lib/dpkg/status
LOW CVE-2025-66864libctf-nobfd02.46-3ubuntu2 /var/lib/dpkg/status
UNKNOWN CVE-2021-45261patch2.8-2build1 /var/lib/dpkg/status
UNKNOWN CVE-2019-20633patch2.8-2build1 /var/lib/dpkg/status
UNKNOWN CVE-2018-6952patch2.8-2build1 /var/lib/dpkg/status
UNKNOWN CVE-2025-9301cmake4.2.3-2ubuntu2 /var/lib/dpkg/status
UNKNOWN CVE-2025-9301cmake-data4.2.3-2ubuntu2 /var/lib/dpkg/status
UNKNOWN CVE-2026-11979libxml2-162.15.2+dfsg-0.1ubuntu0.3 /var/lib/dpkg/status

ghcr.io/openvoxproject/openvoxserver:latest-alpine (2026-10-16)

Trivy

CRITICAL 20 HIGH 11 MEDIUM 40 LOW 54 UNKNOWN 2
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-114820openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-46470openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0An issue was discovered in GStreamer gst-plugins-good before 1.28.2. W ... — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-91403openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-110264ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-89078ruby3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-93577ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-97229ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-110264ruby-dev3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-89078ruby-dev3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-93577ruby-dev3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-97229ruby-dev3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-97229ruby-rdoc3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-93577ruby-rdoc3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-89078ruby-rdoc3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-110264ruby-rdoc3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-97229ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-93577ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-89078ruby-libs3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
CRITICAL CVE-2026-110264ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-80212ruby-libs3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-80212ruby3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-80212ruby-dev3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-6732openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0libxml2: libxml2: Denial of Service via crafted XSD-validated document — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-80212ruby-rdoc3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2022-41404org.ini4j:ini4j0.5.4 org.ini4j: unspecified DoS — Java
HIGH CVE-2026-58050libssh2-dev1.11.1-r3 1.11.1-r4libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-58050libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-77214libexpat2.8.5-r0 2.9.0-r0expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-92392curl8.22.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
HIGH CVE-2026-92392libcurl8.22.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91375openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance jmod handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91374openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance jstatd (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91373openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance TLS handshakes (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91332openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance HTTP Client (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-87291openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance HTTP Server (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-87290openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance XPath Expressions (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83400openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance XML Processing (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83387openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance WebRowSets (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83381openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance SASL Authentication (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83378openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Improve C2 loop transformations (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-83374openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-66035libssh2-dev1.11.1-r3 1.11.1-r4libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-66034libssh2-dev1.11.1-r3 1.11.1-r4libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-66033libssh2-dev1.11.1-r3 1.11.1-r4libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-66032libssh2-dev1.11.1-r3 1.11.1-r4libssh2: libssh2: Arbitrary code execution via double-free in SFTP session — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91379openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance JShell (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91417openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance CORBA (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91418openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance GIF loading (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91451openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91452openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance HTTP server (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91453openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Improve HTTP headers (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91462openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance krb5 tokens (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91463openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance krb5 client (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91464openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Kerberos validation (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-91487openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance C2 comparisons (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-80213ruby3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-80213ruby-dev3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-80213ruby-libs3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-92388curl8.22.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-80213ruby-rdoc3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-102633libexpat2.8.5-r0 2.9.0-r0expat: expat: Denial of Service via integer overflow in expat_realloc — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2025-15661libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-58051libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-66032libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Arbitrary code execution via double-free in SFTP session — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-66033libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-66034libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-66035libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-92388libcurl8.22.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2025-15661libssh2-dev1.11.1-r3 1.11.1-r4libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
MEDIUM CVE-2026-58051libssh2-dev1.11.1-r3 1.11.1-r4libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87861curl8.22.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87862curl8.22.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87863curl8.22.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87864curl8.22.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87865curl8.22.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86414libcurl8.22.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87866curl8.22.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92386curl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92387curl8.22.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91400openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance MIDI file handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92389curl8.22.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92390curl8.22.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91461openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance TLS Extensions (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91402openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjfx: openjfx: information disclosure via untrusted code execution — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86413libcurl8.22.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86415curl8.22.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86414curl8.22.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86413curl8.22.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86412curl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86411curl8.22.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86412libcurl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86410curl8.22.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86409curl8.22.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-107929curl8.22.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-107928curl8.22.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86411libcurl8.22.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86410libcurl8.22.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86409libcurl8.22.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-94266curl8.22.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-94265curl8.22.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92391curl8.22.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-107928libcurl8.22.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-107929libcurl8.22.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-94266libcurl8.22.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-94265libcurl8.22.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92391libcurl8.22.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92390libcurl8.22.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92389libcurl8.22.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92387libcurl8.22.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-92386libcurl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87866libcurl8.22.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87865libcurl8.22.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87864libcurl8.22.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87863libcurl8.22.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87862libcurl8.22.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87861libcurl8.22.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-86415libcurl8.22.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-83376openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87255openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Vector Processing (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87292openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Network Clients (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-87367openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Template Handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91335openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Image Handling (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91381openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance Font Rendering (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
LOW CVE-2026-91397openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10) — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
UNKNOWN CVE-2026-107891musl-utils1.2.6-r2 1.2.6-r3Title Not Available — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)
UNKNOWN CVE-2026-107891musl1.2.6-r2 1.2.6-r3Title Not Available — ghcr.io/openvoxproject/openvoxserver:latest-alpine (alpine 3.24.2)

Grype

CRITICAL 34 HIGH 54 MEDIUM 28 LOW 11 UNKNOWN 2 NVD/CPE filtered 27
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-97229ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-91403openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby-rdoc3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby-dev3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby-dev3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby-rdoc3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0/lib/apk/db/installed
CRITICAL CVE-2026-46470openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby-dev3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby-rdoc3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-114820openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby-rdoc3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby-dev3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-94266libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-66033libssh2-dev1.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-94266curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-58051libssh2-dev1.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-58051libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-77214libexpat2.8.5-r0 2.9.0-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby-rdoc3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby-dev3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-66034libssh2-dev1.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-66034libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-86415libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86415curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-58050libssh2-dev1.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-58050libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-66035libssh2-dev1.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-66035libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-66032libssh2-dev1.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-66032libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-92386curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-q339-8rmv-2mhverb4.0.4 4.0.4.1ERB has an @_init deserialization guard bypass via def_module / def_method / def_class — /usr/lib/ruby/gems/3.4.0/specifications/default/erb-4.0.4.gemspec
HIGH CVE-2026-92392libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92392curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-jr6h-r7vg-f9mcini4j0.5.4 org.ini4j allows attackers to cause a Denial of Service (DoS) — /opt/puppetlabs/server/apps/puppetserver/puppet-server-release.jar
HIGH CVE-2026-66033libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-6732openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
HIGH CVE-2026-107929libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-91462openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91453openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91464openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby-dev3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby-rdoc3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-91463openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-83381openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-83378openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91374openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91487openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91379openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91375openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91373openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91418openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2025-15661libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
MEDIUM CVE-2025-15661libssh2-dev1.11.1-r3 1.11.1-r4/lib/apk/db/installed
MEDIUM CVE-2026-83400openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-102633libexpat2.8.5-r0 2.9.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-83387openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-87290openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-87291openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91417openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-83374openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91332openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91451openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
MEDIUM CVE-2026-91452openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91397openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91335openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91461openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91402openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91381openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-91400openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-87292openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-87367openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-83376openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW CVE-2026-87255openjdk21-jre-headless21.0.12_p8-r0 21.0.13.0.3_p1-r0/lib/apk/db/installed
LOW GHSA-x2f5-4prf-w687json2.9.1 2.19.9Ruby json: JSON generator heap buffer overflow when streaming to an IO — /usr/lib/ruby/gems/3.4.0/specifications/default/json-2.9.1.gemspec
UNKNOWN CVE-2026-107891musl1.2.6-r2 1.2.6-r3/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl-utils1.2.6-r2 1.2.6-r3/lib/apk/db/installed
Filtered NVD/CPE matches (27)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-59851libssh21.11.1-r3 A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users. — /lib/apk/db/installed
HIGH CVE-2026-59850libssh21.11.1-r3 A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions. — /lib/apk/db/installed
MEDIUM CVE-2026-18477tar1.35-r5 A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue. — /lib/apk/db/installed
MEDIUM CVE-2026-59845libssh21.11.1-r3 A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service. — /lib/apk/db/installed
MEDIUM CVE-2026-18508tar1.35-r5 A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction. — /lib/apk/db/installed
MEDIUM CVE-2026-56391coreutils-sha512sum9.11-r0 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. — /lib/apk/db/installed
MEDIUM CVE-2026-56391coreutils-fmt9.11-r0 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. — /lib/apk/db/installed
MEDIUM CVE-2026-56391coreutils-env9.11-r0 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. — /lib/apk/db/installed
MEDIUM CVE-2026-56391coreutils9.11-r0 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371. — /lib/apk/db/installed
MEDIUM CVE-2026-56392coreutils-sha512sum9.11-r0 GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d — /lib/apk/db/installed
MEDIUM CVE-2026-56392coreutils-fmt9.11-r0 GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d — /lib/apk/db/installed
MEDIUM CVE-2026-56392coreutils-env9.11-r0 GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d — /lib/apk/db/installed
MEDIUM CVE-2026-56392coreutils9.11-r0 GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d — /lib/apk/db/installed
MEDIUM CVE-2026-5745libarchive3.8.7-r0 A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare "d" or "default" tag without subsequent fields), the function fails to perform adequate validation before advancing the pointer. An attacker can exploit this by providing a maliciously crafted archive, causing an application utilizing the libarchive API (such as bsdtar) to crash, resulting in a Denial of Service (DoS). — /lib/apk/db/installed
MEDIUM CVE-2026-59848libssh21.11.1-r3 A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service. — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2016-2781coreutils-sha512sum9.11-r0 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. — /lib/apk/db/installed
MEDIUM CVE-2016-2781coreutils-fmt9.11-r0 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. — /lib/apk/db/installed
MEDIUM CVE-2016-2781coreutils-env9.11-r0 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. — /lib/apk/db/installed
MEDIUM CVE-2016-2781coreutils9.11-r0 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. — /lib/apk/db/installed
MEDIUM CVE-2026-5704tar1.35-r5 A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection. — /lib/apk/db/installed
MEDIUM CVE-2026-59844libssh21.11.1-r3 A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests. — /lib/apk/db/installed
MEDIUM CVE-2026-59843libssh21.11.1-r3 A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service. — /lib/apk/db/installed
MEDIUM CVE-2013-0256ruby-rdoc3.4.9-r0 darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL. — /lib/apk/db/installed
LOW CVE-2026-59846libssh21.11.1-r3 A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior. — /lib/apk/db/installed

ghcr.io/voxpupuli/commitlint

GitHub Container Registry

Downloads

1,316 downloads

ghcr.io/voxpupuli/commitlint:latest (2026-08-27)

Trivy

CRITICAL 1 HIGH 38 MEDIUM 39 LOW 34 UNKNOWN 3
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-109383undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Certificate validation bypass via dropped TLS options in Agent — Node.js
HIGH CVE-2026-73566tar7.5.19 7.5.21tar: node-tar: Denial of Service via crafted long-path tar archive — Node.js
HIGH CVE-2026-69192ip-address10.2.0 10.3.1ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass — Node.js
HIGH CVE-2026-84394fast-uri3.1.6 2.4.6, 3.1.7, 4.1.4fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies — Node.js
HIGH CVE-2026-84292fast-uri3.1.6 2.4.6, 3.1.7, 4.1.4fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization — Node.js
HIGH CVE-2026-69152brace-expansion5.0.7 1.1.18, 2.1.4, 3.0.6, 5.0.9brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation — Node.js
HIGH CVE-2026-14257brace-expansion5.0.7 5.0.8, 3.0.3, 2.1.3, 1.1.17brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function — Node.js
HIGH CVE-2026-102278brace-expansion5.0.7 5.0.11, 3.0.8, 2.1.6, 1.1.20brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns — Node.js
HIGH CVE-2026-102276brace-expansion5.0.7 5.0.10, 3.0.7, 2.1.5, 1.1.19brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns — Node.js
HIGH CVE-2026-89161pcre210.47-r1 10.48-r0pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-89157pcre210.47-r1 10.48-r0pcre2: PCRE2: Out-of-bounds write via large pattern input — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-86145pcre210.47-r1 10.48-r0pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-103111pcre210.47-r1 10.49-r0pcre2: pcre2: Out-of-bounds write via crafted regular expression — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-93990libexpat2.8.3-r0 2.8.5-r0expat: Expat: XML Injection via Malformed UTF-16 Input — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-77214libexpat2.8.3-r0 2.9.0-r0expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-76957libexpat2.8.3-r0 2.8.4-r0libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-76956libexpat2.8.3-r0 2.8.4-r0libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-76641libexpat2.8.3-r0 2.8.4-r0expat: Expat: Denial of Service via XML external entity parsing — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-97031stdlibv1.26.4 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-78669stdlibv1.26.4 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-78667stdlibv1.26.4 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56862stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56860stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56859stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56858stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3html/template: golang: Go html/template: Cross-Site Scripting via pathological input — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56853stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-46600stdlibv1.26.4 1.26.6, 1.27.0-rc.3golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-39822stdlibv1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2golang: Go os.Root: Symlink following vulnerability allows directory traversal — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-39821stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-33818stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-111943stdlibv1.26.4 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56852golang.org/x/textv0.38.0 0.39.0golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56851golang.org/x/textv0.38.0 0.41.0golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-87018undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via TLS renegotiation with mismatched certificate — Node.js
HIGH CVE-2026-19534undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: Denial of Service via unrequested WebSocket subprotocol — Node.js
HIGH CVE-2026-109869undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unhandled stream error on excessive content encodings — Node.js
HIGH CVE-2026-66046libexpat2.8.3-r0 2.8.4-r0expat: Expat: Denial of Service via quadratic complexity in attribute processing — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
HIGH CVE-2026-92392libcurl8.21.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-16729undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: Undici: Cookie attribute injection allows bypassing security protections — Node.js
MEDIUM CVE-2026-16728undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length — Node.js
MEDIUM CVE-2026-15157undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: undici: HTTP header injection via unvalidated blob-like body type property — Node.js
MEDIUM CVE-2026-109932undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unbounded WebSocket PONG buffering — Node.js
MEDIUM CVE-2026-109924undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via memory exhaustion in EventSource client — Node.js
MEDIUM CVE-2026-104844postcss-selector-parser7.1.4 7.1.6, 6.1.5postcss-selector-parser: postcss-selector-parser: Denial of Service via crafted CSS selectors — Node.js
MEDIUM CVE-2026-118764minimatch10.2.5 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-69198ip-address10.2.0 10.2.2ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass — Node.js
MEDIUM CVE-2026-54272ip-address10.2.0 10.2.1ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification — Node.js
MEDIUM CVE-2026-111997ip-address10.2.0 10.7.4ip-address: ip-address: Denial of Service via excessive percent characters in IPv6 address input — Node.js
MEDIUM CVE-2026-101913ip-address10.2.0 10.5.1ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation — Node.js
MEDIUM CVE-2026-101912ip-address10.2.0 10.7.1ip-address: ip-address: Access control bypass via cross-family subnet comparison — Node.js
MEDIUM CVE-2026-101911ip-address10.2.0 10.7.1ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing — Node.js
MEDIUM CVE-2026-101910ip-address10.2.0 10.5.1ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address range — Node.js
MEDIUM CVE-2026-85024undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: Denial of Service via unhandled error in WebSocket permessage-deflate decompression — Node.js
MEDIUM CVE-2026-92388libcurl8.21.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-82208libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Improper certificate validation when using wolfSSL CA cache — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-19931libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-42505stdlibv1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-56866stdlibv1.26.4 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-78659stdlibv1.26.4 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-78660stdlibv1.26.4 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-78663stdlibv1.26.4 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-94439stdlibv1.26.4 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-94440stdlibv1.26.4 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-94448stdlibv1.26.4 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-97030stdlibv1.26.4 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-97032stdlibv1.26.4 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-118773glob13.0.6 14.0.2glob: glob: Denial of Service (DoS) via incomplete traversal cancellation — Node.js
MEDIUM CVE-2026-89160pcre210.47-r1 10.48-r0pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-89158pcre210.47-r1 10.48-r0PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-86472fast-uri3.1.6 2.4.7, 3.1.8, 4.1.5fast-uri: fast-uri: Security bypass due to inconsistent host case normalization — Node.js
MEDIUM CVE-2026-110306fast-uri3.1.6 2.4.8, 3.1.9, 4.2.3fast-uri: fast-uri: Cross-Site Scripting via improper URI scheme decoding — Node.js
MEDIUM CVE-2026-110180fast-uri3.1.6 2.4.8, 3.1.9, 4.2.3fast-uri: fast-uri: Security policy bypass via improper host canonicalization — Node.js
MEDIUM CVE-2026-102633libexpat2.8.3-r0 2.9.0-r0expat: expat: Denial of Service via integer overflow in expat_realloc — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 1.70.0-r0nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-102277brace-expansion5.0.7 5.0.12, 3.0.9, 2.1.7, 1.1.21brace-expansion: brace-expansion: Denial of Service via crafted brace patterns — Node.js
MEDIUM CVE-2026-89156pcre210.47-r1 10.48-r0PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
MEDIUM CVE-2026-85091zlib1.3.2-r0 1.3.2-r1zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-107929libcurl8.21.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-13608libcurl8.21.0-r0 8.22.0-r0curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-18924libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-80229libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Memory corruption vulnerability via OpenSSL 3 provider use-after-free — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-80230libcurl8.21.0-r0 8.22.0-r0curl: curl: Public key pinning bypass allows unauthenticated connections — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-80231libcurl8.21.0-r0 8.22.0-r0curl: curl: Incorrect HTTPS connection reuse with Native CA Store — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-87861libcurl8.21.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-107928libcurl8.21.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-92387libcurl8.21.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-92389libcurl8.21.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-92390libcurl8.21.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-92391libcurl8.21.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-94265libcurl8.21.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-94266libcurl8.21.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-56857stdlibv1.26.4 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
LOW CVE-2026-110725fast-uri3.1.6 2.4.8, 3.1.9, 4.2.3fast-uri: fast-uri: Cross-site scripting via unescaped colon in relative URI paths — Node.js
LOW CVE-2026-110095fast-uri3.1.6 2.4.8, 3.1.9, 4.2.3fast-uri: fast-uri: Path traversal via improper relative URI normalization — Node.js
LOW CVE-2026-87862libcurl8.21.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-87863libcurl8.21.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-86415libcurl8.21.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-86414libcurl8.21.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-86413libcurl8.21.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-86412libcurl8.21.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-86411libcurl8.21.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-87864libcurl8.21.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-87865libcurl8.21.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-87866libcurl8.21.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-92386libcurl8.21.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-89162pcre210.47-r1 10.48-r0pcre2: PCRE2: Information disclosure via pcre2_serialize_encode — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-18540undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: HTTP response splitting via retry interceptor — Node.js
LOW CVE-2026-86410libcurl8.21.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-86409libcurl8.21.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-82209libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Information disclosure via improper Public Suffix List boundary check — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
LOW CVE-2026-80255libcurl8.21.0-r0 8.22.0-r0curl: curl: Information disclosure due to secure cookie attribute bypass — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
UNKNOWN CVE-2026-107891musl-utils1.2.6-r2 1.2.6-r3Title Not Available — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
UNKNOWN CVE-2026-107891musl1.2.6-r2 1.2.6-r3Title Not Available — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)
UNKNOWN CVE-2026-80256libcurl8.21.0-r0 8.22.0-r0Title Not Available — ghcr.io/voxpupuli/commitlint:latest (alpine 3.24.1)

Grype

CRITICAL 12 HIGH 68 MEDIUM 29 LOW 4 UNKNOWN 3 NVD/CPE filtered 37
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-92388libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL GO-2026-6612golang.org/x/netv0.54.0 0.60.0The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/bin/git-lfs
CRITICAL CVE-2026-94265libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL GO-2026-6612stdlibgo1.26.3 1.26.9The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/bin/git-lfs
CRITICAL CVE-2026-87866libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-18924libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-19931libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0/lib/apk/db/installed
HIGH CVE-2026-93990libexpat2.8.3-r0 2.8.5-r0/lib/apk/db/installed
HIGH GO-2026-6610golang.org/x/netv0.54.0 0.60.0Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/bin/git-lfs
HIGH CVE-2026-86145pcre210.47-r1 10.48-r0/lib/apk/db/installed
HIGH GHSA-6j4f-fj2g-mc7pbrace-expansion5.0.7 5.0.10brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GO-2026-6610stdlibgo1.26.3 1.26.9Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/bin/git-lfs
HIGH GHSA-mwp4-54f8-5fhrip-address10.2.0 10.3.1ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
HIGH GO-2026-6605stdlibgo1.26.3 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/bin/git-lfs
HIGH GO-2026-5970golang.org/x/textv0.38.0 0.39.0A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. — /npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH GO-2026-5970golang.org/x/textv0.37.0 0.39.0A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. — /usr/bin/git-lfs
HIGH CVE-2026-80255libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-6617stdlibgo1.26.3 1.26.9HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/bin/git-lfs
HIGH GO-2026-6617golang.org/x/netv0.54.0 0.60.0HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/bin/git-lfs
HIGH GHSA-qhr7-859c-m2p7brace-expansion5.0.7 5.0.11brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH CVE-2026-85091zlib1.3.2-r0 1.3.2-r1/lib/apk/db/installed
HIGH CVE-2026-13608libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-6608stdlibgo1.26.3 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/bin/git-lfs
HIGH CVE-2026-76957libexpat2.8.3-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-89161pcre210.47-r1 10.48-r0/lib/apk/db/installed
HIGH GHSA-2m5v-pch6-74hxundici6.27.0 6.29.1undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-qrxm-fqhp-jwvmundici6.27.0 6.29.1undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-qw65-cvwx-89v3fast-uri3.1.6 3.1.7fast-uri vulnerable to authority injection via an unvalidated port in serialize — /npm/node_modules/fast-uri/package.json
HIGH CVE-2026-103111pcre210.47-r1 10.49-r0/lib/apk/db/installed
HIGH CVE-2026-76956libexpat2.8.3-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-77214libexpat2.8.3-r0 2.9.0-r0/lib/apk/db/installed
HIGH GHSA-xjj6-f33q-929cundici6.27.0 6.29.1undici vulnerable to Denial of Service via unhandled error on excessive content-encodings — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH CVE-2026-89157pcre210.47-r1 10.48-r0/lib/apk/db/installed
HIGH CVE-2026-80230libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GHSA-58mr-gqgx-xq4gfast-uri3.1.6 3.1.7fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority — /npm/node_modules/fast-uri/package.json
HIGH CVE-2026-76641libexpat2.8.3-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-82209libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GHSA-rfgv-xxqx-mfg5undici6.27.0 6.28.1undici vulnerable to Denial of Service via unrequested WebSocket subprotocol — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH CVE-2026-82208libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-6613stdlibgo1.26.3 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/bin/git-lfs
HIGH CVE-2026-86415libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-5026golang.org/x/netv0.54.0 0.55.0The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". — /usr/bin/git-lfs
HIGH CVE-2026-92389libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-66046libexpat2.8.3-r0 2.8.4-r0/lib/apk/db/installed
HIGH GO-2026-5026stdlibgo1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". — /usr/bin/git-lfs
HIGH CVE-2026-92386libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-80231libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-92392libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-r292-9mhp-454mtar7.5.19 7.5.21node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection — /usr/local/lib/node_modules/npm/node_modules/tar/package.json
HIGH GO-2026-5942stdlibgo1.26.3 1.26.6, 1.27.0-rc.3Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. — /usr/bin/git-lfs
HIGH GO-2026-5942golang.org/x/netv0.54.0 0.56.0Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. — /usr/bin/git-lfs
HIGH CVE-2026-94266libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6607stdlibgo1.26.3 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/bin/git-lfs
HIGH CVE-2026-80229libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-6090stdlibgo1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. — /usr/bin/git-lfs
HIGH GO-2026-5972stdlibgo1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. — /usr/bin/git-lfs
HIGH CVE-2026-92390libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-5037stdlibgo1.26.3 1.25.11, 1.26.4(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates. — /usr/bin/git-lfs
HIGH CVE-2026-87865libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6611stdlibgo1.26.3 1.26.9A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/bin/git-lfs
HIGH GO-2026-6611golang.org/x/netv0.54.0 0.60.0A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/bin/git-lfs
HIGH GO-2026-6603stdlibgo1.26.3 1.26.9When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/bin/git-lfs
HIGH GO-2026-6603golang.org/x/netv0.54.0 0.60.0When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/bin/git-lfs
HIGH GHSA-mh99-v99m-4gvgbrace-expansion5.0.7 5.0.8brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GHSA-rgw5-rvv9-x895brace-expansion5.0.7 5.0.9brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
MEDIUM GO-2026-6218stdlibgo1.26.3 1.25.13, 1.26.6, 1.27.0-rc.3Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations. — /usr/bin/git-lfs
MEDIUM GHSA-9fm3-97px-rjf6undici6.27.0 6.29.1undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch10.2.5 11.0.1minimatch has potential denial of service via globparts amplification — /usr/local/lib/node_modules/npm/node_modules/minimatch/package.json
MEDIUM CVE-2026-89156pcre210.47-r1 10.48-r0/lib/apk/db/installed
MEDIUM CVE-2026-89160pcre210.47-r1 10.48-r0/lib/apk/db/installed
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 1.70.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-89158pcre210.47-r1 10.48-r0/lib/apk/db/installed
MEDIUM GHSA-8xcm-r25x-g524undici6.27.0 6.28.0undici vulnerable to downstream response desynchronization via retry interceptor — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-w74x-v6f9-j3xgfast-uri3.1.6 3.1.9fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding — /npm/node_modules/fast-uri/package.json
MEDIUM GHSA-v3r7-h72x-cjcmundici6.27.0 6.28.0undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-wjr9-j795-jxcrfast-uri3.1.6 3.1.9fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization — /npm/node_modules/fast-uri/package.json
MEDIUM GHSA-hrr3-gc8f-f4qjfast-uri3.1.6 3.1.8fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets — /npm/node_modules/fast-uri/package.json
MEDIUM GHSA-m8rv-5g2x-5cg5undici6.27.0 6.28.0undici vulnerable to CRLF Injection via blob-like body 'type' property — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-4xrf-jv44-h6hhip-address10.2.0 10.2.2ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-22jq-vg5j-6vggip-address10.2.0 10.2.1ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GO-2026-6809stdlibgo1.26.3 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/bin/git-lfs
MEDIUM GHSA-2vr4-cq9g-pvrcip-address10.2.0 10.5.1ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-3wwx-pv8p-q78vundici6.27.0 6.28.1undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-q2hr-2g5m-vwhrbrace-expansion5.0.7 5.0.12brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
MEDIUM GHSA-rpw4-54j3-4h4qip-address10.2.0 10.5.1ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-h3mg-xc3c-68pwip-address10.2.0 10.7.1ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-rj75-hqrm-r3gfpostcss-selector-parser7.1.4 7.1.6PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion — /usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json
MEDIUM GHSA-j6r3-76f7-8jcvip-address10.2.0 10.7.1ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM CVE-2026-102633libexpat2.8.3-r0 2.9.0-r0/lib/apk/db/installed
MEDIUM GHSA-3g3m-2fjr-6pw4glob13.0.6 14.0.2Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal — /usr/local/lib/node_modules/npm/node_modules/glob/package.json
MEDIUM GO-2026-5856stdlibgo1.26.3 1.25.12, 1.26.5, 1.27.0-rc.2Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. — /usr/bin/git-lfs
MEDIUM GO-2026-5039stdlibgo1.26.3 1.25.11, 1.26.4When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged. — /usr/bin/git-lfs
MEDIUM GHSA-rxp7-6hxx-x8q5ip-address10.2.0 10.7.4ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-4qv8-2p9j-2685undici6.27.0 6.29.1undici vulnerable to Denial of Service via unbounded memory in the EventSource parser — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
LOW GHSA-r53p-7pc4-xj5rundici6.27.0 6.28.1undici vulnerable to downstream response splitting via retry interceptor — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
LOW GHSA-333x-w4r6-6crpfast-uri3.1.6 3.1.9fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references — /npm/node_modules/fast-uri/package.json
LOW GHSA-xhq7-xmqj-769hfast-uri3.1.6 3.1.9fast-uri vulnerable to improper path equivalence in relative reference normalization — /npm/node_modules/fast-uri/package.json
LOW CVE-2026-89162pcre210.47-r1 10.48-r0/lib/apk/db/installed
UNKNOWN CVE-2026-80256libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl1.2.6-r2 1.2.6-r3/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl-utils1.2.6-r2 1.2.6-r3/lib/apk/db/installed
Filtered NVD/CPE matches (37)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-111497node24.19.0 11.0.0, 22.23.4, 24.22.1, 26.12.1A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. — /usr/local/bin/node
HIGH CVE-2026-106069node24.19.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as `0127.0.0.1`. `tls.checkServerIdentity()` normalizes the host following the WHATWG URL rules, which read a leading-zero octet as octal (`0127.0.0.1` becomes `87.0.0.1`), while the connection is made through the operating system resolver, which on some platforms such as macOS reads it as decimal (`127.0.0.1`). A server at the connected address can then be authenticated with a certificate issued for another IP address. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
HIGH CVE-2026-105483node24.19.0 24.22.1, 26.12.1A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (`１２７.0.0.1`). `tls.checkServerIdentity()` did not recognize such hosts as IP addresses, even though they normalize and resolve to a regular IPv4 address, and matched them against the certificate DNS names and Common Name instead. A certificate containing `DNS:127.0.0.1` or `DNS:*.0.0.1` could therefore be accepted for an IP endpoint it was not issued for. This is a regression introduced after the fix for CVE-2026-48618. This vulnerability affects Node.js **26.x** and **24.x**. — /usr/local/bin/node
HIGH CVE-2026-72897libssl33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-72897libcrypto33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-105482node24.19.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup() and the net/tls host options. Because the name is passed to c-ares as a C string, resolving attacker.example\0.trusted.example queries attacker.example and returns its records without any error. Applications that validate a hostname, for example against a domain allowlist, and then resolve it with dns.resolve*() can act on records for a different name than the one they validated. This vulnerability affects Node.js 26.x, 24.x, and 22.x. — /usr/local/bin/node
HIGH CVE-2026-84784libssl33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libcrypto33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libssl33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libcrypto33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libssl33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libcrypto33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-106074node24.19.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`. If any of these functions, or an API that relies on them such as `URL.createObjectURL()`, is called while the snapshot is built, every process started from that snapshot returns the same values until the cache is refilled: up to 127 UUIDs and about 1,000 `randomInt()` values. Identifiers expected to be unique can collide across processes, and values issued by one process can be predicted by observing another. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
MEDIUM CVE-2026-35189libcrypto33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libssl33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libssl33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libcrypto33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2026-105481node24.19.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931. The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when the event loop polls for I/O. If an unsolicited response has already reached the socket but has not been read yet when the socket is handed to a new request, for example because the event loop was busy with synchronous work, the guard is removed without seeing it and the data is parsed as the response to the new request. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
MEDIUM CVE-2026-42772libssl33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libcrypto33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libssl33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libcrypto33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-106072node24.19.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as `0177.0.0.1`, `0x7f.0.0.1`, `2130706433` or `127.1`. `tls.checkServerIdentity()` did not classify these hosts as IP addresses, but normalized them to their canonical form and matched the result against the certificate DNS names. A certificate containing `DNS:127.0.0.1` and no `IP Address:127.0.0.1` SAN was therefore accepted, while the same certificate is correctly rejected for `127.0.0.1`. Exploitation requires a certificate with a numeric DNS SAN issued by a CA trusted by the client, and a platform resolver that accepts these spellings, such as glibc. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
MEDIUM CVE-2026-75806libssl33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libcrypto33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
LOW CVE-2026-77696libssl33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-106073node24.19.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered `fs.realpathSync.native()`. As a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync()` to check file existence, resolve symlink targets, and enumerate filesystem paths outside of permitted directories. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
LOW CVE-2026-77696libcrypto33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-54872libssl33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54872libcrypto33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54875libssl33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-54875libcrypto33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-35191libssl33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed
LOW CVE-2026-35191libcrypto33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed

ghcr.io/voxpupuli/onceover

GitHub Container Registry

Downloads

4,853 downloads

ghcr.io/voxpupuli/onceover:latest (2026-09-02)

Trivy

CRITICAL 2 HIGH 38 MEDIUM 65 LOW 64 UNKNOWN 4
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-111497brotli-libs1.2.0-r0 1.2.1-r0brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
CRITICAL CVE-2026-42257net-imap0.3.9 ~> 0.4.24, ~> 0.5.14, >= 0.6.4net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input — Ruby
HIGH CVE-2026-82049python3-pycache-pyc03.12.14-r0 3.12.15-r0python: Python tarfile module: File modification and content disclosure via crafted archives — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-19553python3-pycache-pyc03.12.14-r0 3.12.15-r0python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-19445python3-pycache-pyc03.12.14-r0 3.12.15-r0python: Use-after-free of a server-side SSLContext when sni_callback switches contexts — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-82049python3-pyc3.12.14-r0 3.12.15-r0python: Python tarfile module: File modification and content disclosure via crafted archives — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-19553python3-pyc3.12.14-r0 3.12.15-r0python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-19445python3-pyc3.12.14-r0 3.12.15-r0python: Use-after-free of a server-side SSLContext when sni_callback switches contexts — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-11352libcurl8.20.0-r0 8.22.0-r0curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-11586libcurl8.20.0-r0 8.22.0-r0curl: curl: Denial of Service via WebSocket PING flood — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-12064libcurl8.20.0-r0 8.22.0-r0curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-8286libcurl8.20.0-r0 8.22.0-r0curl: curl: Insecure connection establishment due to TLS configuration mismatch — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-8458libcurl8.20.0-r0 8.22.0-r0curl: libcurl: Unauthorized connection reuse due to a logical error — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-8925libcurl8.20.0-r0 8.22.0-r0curl: curl: Double-free vulnerability in SASL authentication — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-8927libcurl8.20.0-r0 8.22.0-r0curl: Information disclosure due to uncleared proxy authentication state — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-92392libcurl8.20.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-9547libcurl8.20.0-r0 8.22.0-r0curl: curl: Man-in-the-middle attack via SSH host key bypass — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-82049python33.12.14-r0 3.12.15-r0python: Python tarfile module: File modification and content disclosure via crafted archives — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-19553python33.12.14-r0 3.12.15-r0python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-19445python33.12.14-r0 3.12.15-r0python: Use-after-free of a server-side SSLContext when sni_callback switches contexts — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-82049pyc3.12.14-r0 3.12.15-r0python: Python tarfile module: File modification and content disclosure via crafted archives — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-19553pyc3.12.14-r0 3.12.15-r0python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-19445pyc3.12.14-r0 3.12.15-r0python: Use-after-free of a server-side SSLContext when sni_callback switches contexts — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-103111pcre210.48-r0 10.49-r0pcre2: pcre2: Out-of-bounds write via crafted regular expression — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-93990libexpat2.8.4-r0 2.8.5-r0expat: Expat: XML Injection via Malformed UTF-16 Input — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-77214libexpat2.8.4-r0 2.9.0-r0expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-80212resolv0.2.3 ~> 0.3.2, >= 0.7.2resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — Ruby
HIGH CVE-2026-9547curl8.20.0-r0 8.22.0-r0curl: curl: Man-in-the-middle attack via SSH host key bypass — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-92392curl8.20.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-8927curl8.20.0-r0 8.22.0-r0curl: Information disclosure due to uncleared proxy authentication state — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-42258net-imap0.3.9 ~> 0.4.24, ~> 0.5.14, >= 0.6.4ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments — Ruby
HIGH CVE-2026-42246net-imap0.3.9 ~> 0.3.10, ~> 0.4.24, ~> 0.5.14, >= 0.6.4net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS — Ruby
HIGH CVE-2026-42245net-imap0.3.9 ~> 0.4.24, ~> 0.5.14, >= 0.6.4ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses — Ruby
HIGH CVE-2026-41316erb4.0.2 ~> 4.0.3.1, ~> 4.0.4.1, ~> 6.0.1.1, >= 6.0.4erb: ERB: Arbitrary code execution via deserialization bypass — Ruby
HIGH CVE-2026-8925curl8.20.0-r0 8.22.0-r0curl: curl: Double-free vulnerability in SASL authentication — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-8458curl8.20.0-r0 8.22.0-r0curl: libcurl: Unauthorized connection reuse due to a logical error — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-8286curl8.20.0-r0 8.22.0-r0curl: curl: Insecure connection establishment due to TLS configuration mismatch — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-12064curl8.20.0-r0 8.22.0-r0curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-11586curl8.20.0-r0 8.22.0-r0curl: curl: Denial of Service via WebSocket PING flood — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
HIGH CVE-2026-11352curl8.20.0-r0 8.22.0-r0curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM GHSA-qq38-m9mg-xjj5addressable2.9.0 >= 2.9.1Denial of service in Addressable URI path normalization — Ruby
MEDIUM CVE-2026-47240net-imap0.3.9 ~> 0.5.15, >= 0.6.4.1net-imap: Net::IMAP: Command injection via non-synchronizing literals — Ruby
MEDIUM CVE-2026-47242net-imap0.3.9 ~> 0.5.15, >= 0.6.4.1net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation — Ruby
MEDIUM CVE-2026-87910python3-pycache-pyc03.12.14-r0 3.12.15-r0python: Python tarfile module: Security filter bypass allows arbitrary file write — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-80213resolv0.2.3 ~> 0.3.2, >= 0.7.2resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — Ruby
MEDIUM CVE-2026-87910pyc3.12.14-r0 3.12.15-r0python: Python tarfile module: Security filter bypass allows arbitrary file write — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-19672pyc3.12.14-r0 3.12.15-r0python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destination — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-17084pyc3.12.14-r0 3.12.15-r0python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-15806pyc3.12.14-r0 3.12.15-r0python: Python: Information disclosure due to incorrect URL scheme matching — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-15310pyc3.12.14-r0 3.12.15-r0python: Python: Denial of Service via crafted zip file memory pre-allocation — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-115557pyc3.12.14-r0 3.12.16-r0Python has added a denylist for known compromised certificates to the ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-114583pyc3.12.14-r0 3.12.16-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-102633libexpat2.8.4-r0 2.9.0-r0expat: expat: Denial of Service via integer overflow in expat_realloc — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-19672python3-pycache-pyc03.12.14-r0 3.12.15-r0python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destination — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-17084python3-pycache-pyc03.12.14-r0 3.12.15-r0python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-15806python3-pycache-pyc03.12.14-r0 3.12.15-r0python: Python: Information disclosure due to incorrect URL scheme matching — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-15310python3-pycache-pyc03.12.14-r0 3.12.15-r0python: Python: Denial of Service via crafted zip file memory pre-allocation — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-115557python3-pycache-pyc03.12.14-r0 3.12.16-r0Python has added a denylist for known compromised certificates to the ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-114583python3-pycache-pyc03.12.14-r0 3.12.16-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-85091zlib1.3.2-r0 1.3.2-r1zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM GHSA-4w5q-wg7v-w6gpaddressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with several exploded variables — Ruby
MEDIUM GHSA-8gmh-2hhj-2hv9addressable2.9.0 >= 2.9.1Addressable URI normalization resolves some dotted path segments to the wrong path — Ruby
MEDIUM CVE-2026-87910python3-pyc3.12.14-r0 3.12.15-r0python: Python tarfile module: Security filter bypass allows arbitrary file write — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-19672python3-pyc3.12.14-r0 3.12.15-r0python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destination — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-17084python3-pyc3.12.14-r0 3.12.15-r0python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-15806python3-pyc3.12.14-r0 3.12.15-r0python: Python: Information disclosure due to incorrect URL scheme matching — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-15310python3-pyc3.12.14-r0 3.12.15-r0python: Python: Denial of Service via crafted zip file memory pre-allocation — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-115557python3-pyc3.12.14-r0 3.12.16-r0Python has added a denylist for known compromised certificates to the ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-114583python3-pyc3.12.14-r0 3.12.16-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM GHSA-9crm-g4mf-wc5jaddressable2.9.0 >= 2.9.1Addressable display_uri can show misleading hosts with invalid Punycode A-labels — Ruby
MEDIUM GHSA-9f42-57jx-vpp3addressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with multiple variables — Ruby
MEDIUM GHSA-j82w-28jv-3pmjaddressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with certain exploded expressions — Ruby
MEDIUM CVE-2026-87910python33.12.14-r0 3.12.15-r0python: Python tarfile module: Security filter bypass allows arbitrary file write — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-19672python33.12.14-r0 3.12.15-r0python: Python tarfile module: Directory traversal allows creation of empty directories outside extraction destination — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-17084python33.12.14-r0 3.12.15-r0python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-15806python33.12.14-r0 3.12.15-r0python: Python: Information disclosure due to incorrect URL scheme matching — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-15310python33.12.14-r0 3.12.15-r0python: Python: Denial of Service via crafted zip file memory pre-allocation — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-115557python33.12.14-r0 3.12.16-r0Python has added a denylist for known compromised certificates to the ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-114583python33.12.14-r0 3.12.16-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ... — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-92388libcurl8.20.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-9545libcurl8.20.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure via cached SSL session and early data — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-9546libcurl8.20.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure due to persistent Referer header — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-9080libcurl8.20.0-r0 8.22.0-r0libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-9079libcurl8.20.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-8932libcurl8.20.0-r0 8.22.0-r0libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-8926libcurl8.20.0-r0 8.22.0-r0curl: curl: Information disclosure via incorrect .netrc password lookup — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-8924libcurl8.20.0-r0 8.22.0-r0curl: curl: Cookie injection via malicious HTTP server using super cookies — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-82208libcurl8.20.0-r0 8.22.0-r0curl: libcurl: Improper certificate validation when using wolfSSL CA cache — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-19931libcurl8.20.0-r0 8.22.0-r0curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-11856libcurl8.20.0-r0 8.22.0-r0curl: curl: Information disclosure via incorrect Digest authentication header reuse — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-11564libcurl8.20.0-r0 8.22.0-r0libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-10536libcurl8.20.0-r0 8.22.0-r0libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-9546curl8.20.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure due to persistent Referer header — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-10536curl8.20.0-r0 8.22.0-r0libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-11564curl8.20.0-r0 8.22.0-r0libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-11856curl8.20.0-r0 8.22.0-r0curl: curl: Information disclosure via incorrect Digest authentication header reuse — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-19931curl8.20.0-r0 8.22.0-r0curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-82208curl8.20.0-r0 8.22.0-r0curl: libcurl: Improper certificate validation when using wolfSSL CA cache — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-8924curl8.20.0-r0 8.22.0-r0curl: curl: Cookie injection via malicious HTTP server using super cookies — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-8926curl8.20.0-r0 8.22.0-r0curl: curl: Information disclosure via incorrect .netrc password lookup — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-8932curl8.20.0-r0 8.22.0-r0libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-9079curl8.20.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-9080curl8.20.0-r0 8.22.0-r0libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-92388curl8.20.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
MEDIUM CVE-2026-9545curl8.20.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure via cached SSL session and early data — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92386curl8.20.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86415curl8.20.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87861curl8.20.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87862curl8.20.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87863curl8.20.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87864curl8.20.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87865curl8.20.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2024-3220python33.12.14-r0 3.12.16-r0python: Default mimetype known files writeable on Windows — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87866curl8.20.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-47241net-imap0.3.9 ~> 0.5.15, >= 0.6.4.1net-imap: rubygem-net-imap: Net::IMAP: Denial of Service via malformed command input — Ruby
LOW GHSA-539f-xcgw-2gjgaddressable2.9.0 >= 2.9.1Addressable display_uri can show misleading hosts containing bidi and invisible characters — Ruby
LOW CVE-2026-107928curl8.20.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-107929curl8.20.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-13608curl8.20.0-r0 8.22.0-r0curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2024-3220python3-pycache-pyc03.12.14-r0 3.12.16-r0python: Default mimetype known files writeable on Windows — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-18924curl8.20.0-r0 8.22.0-r0curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-80229curl8.20.0-r0 8.22.0-r0curl: libcurl: Memory corruption vulnerability via OpenSSL 3 provider use-after-free — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-80230curl8.20.0-r0 8.22.0-r0curl: curl: Public key pinning bypass allows unauthenticated connections — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-80231curl8.20.0-r0 8.22.0-r0curl: curl: Incorrect HTTPS connection reuse with Native CA Store — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-80255curl8.20.0-r0 8.22.0-r0curl: curl: Information disclosure due to secure cookie attribute bypass — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-82209curl8.20.0-r0 8.22.0-r0curl: libcurl: Information disclosure via improper Public Suffix List boundary check — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86409curl8.20.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86410curl8.20.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86411curl8.20.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86412curl8.20.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2024-3220python3-pyc3.12.14-r0 3.12.16-r0python: Default mimetype known files writeable on Windows — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86413curl8.20.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86414curl8.20.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92387libcurl8.20.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92386libcurl8.20.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87866libcurl8.20.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87865libcurl8.20.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87864libcurl8.20.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87863libcurl8.20.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87862libcurl8.20.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-87861libcurl8.20.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86415libcurl8.20.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86414libcurl8.20.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86413libcurl8.20.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86412libcurl8.20.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86411libcurl8.20.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86410libcurl8.20.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-86409libcurl8.20.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-82209libcurl8.20.0-r0 8.22.0-r0curl: libcurl: Information disclosure via improper Public Suffix List boundary check — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-80255libcurl8.20.0-r0 8.22.0-r0curl: curl: Information disclosure due to secure cookie attribute bypass — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-80231libcurl8.20.0-r0 8.22.0-r0curl: curl: Incorrect HTTPS connection reuse with Native CA Store — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-80230libcurl8.20.0-r0 8.22.0-r0curl: curl: Public key pinning bypass allows unauthenticated connections — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-80229libcurl8.20.0-r0 8.22.0-r0curl: libcurl: Memory corruption vulnerability via OpenSSL 3 provider use-after-free — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92387curl8.20.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92389curl8.20.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92390curl8.20.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92391curl8.20.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-94265curl8.20.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-94266curl8.20.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2024-3220pyc3.12.14-r0 3.12.16-r0python: Default mimetype known files writeable on Windows — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-107928libcurl8.20.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-107929libcurl8.20.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-13608libcurl8.20.0-r0 8.22.0-r0curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-18924libcurl8.20.0-r0 8.22.0-r0curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-94266libcurl8.20.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-94265libcurl8.20.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92391libcurl8.20.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92390libcurl8.20.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
LOW CVE-2026-92389libcurl8.20.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
UNKNOWN CVE-2026-107891musl1.2.5-r23 1.2.5-r24Title Not Available — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
UNKNOWN CVE-2026-107891musl-utils1.2.5-r23 1.2.5-r24Title Not Available — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
UNKNOWN CVE-2026-80256curl8.20.0-r0 8.22.0-r0Title Not Available — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)
UNKNOWN CVE-2026-80256libcurl8.20.0-r0 8.22.0-r0Title Not Available — ghcr.io/voxpupuli/onceover:latest (alpine 3.23.4)

Grype

CRITICAL 43 HIGH 80 MEDIUM 27 LOW 10 UNKNOWN 4 NVD/CPE filtered 38
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-92388curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8924curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8924libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-10536curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-10536libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-11564curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-11564libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-18924curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-18924libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-115557pyc3.12.14-r0 3.12.16-r0/lib/apk/db/installed
CRITICAL CVE-2026-115557python33.12.14-r0 3.12.16-r0/lib/apk/db/installed
CRITICAL CVE-2026-115557python3-pyc3.12.14-r0 3.12.16-r0/lib/apk/db/installed
CRITICAL CVE-2026-115557python3-pycache-pyc03.12.14-r0 3.12.16-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-19445pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
CRITICAL CVE-2026-19445python33.12.14-r0 3.12.15-r0/lib/apk/db/installed
CRITICAL CVE-2026-19445python3-pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
CRITICAL CVE-2026-19445python3-pycache-pyc03.12.14-r0 3.12.15-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8927curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8927libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8926libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8926curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-9079libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-9079curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8925libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-11856curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-11856libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8925curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-19931libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-19931curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-111497brotli-libs1.2.0-r0 1.2.1-r0/lib/apk/db/installed
HIGH CVE-2026-103111pcre210.48-r0 10.49-r0/lib/apk/db/installed
HIGH GHSA-vcgp-9326-pqcpnet-imap0.3.9 0.3.10net-imap vulnerable to STARTTLS stripping via invalid response timing — /usr/local/lib/ruby/gems/3.2.0/specifications/net-imap-0.3.9.gemspec
HIGH CVE-2026-82049pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
HIGH CVE-2026-8286libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-8286curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-77214libexpat2.8.4-r0 2.9.0-r0/lib/apk/db/installed
HIGH CVE-2026-13608curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-82049python33.12.14-r0 3.12.15-r0/lib/apk/db/installed
HIGH CVE-2026-82049python3-pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
HIGH CVE-2026-82049python3-pycache-pyc03.12.14-r0 3.12.15-r0/lib/apk/db/installed
HIGH CVE-2026-19553python3-pycache-pyc03.12.14-r0 3.12.15-r0/lib/apk/db/installed
HIGH CVE-2026-19553python3-pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
HIGH CVE-2026-19553python33.12.14-r0 3.12.15-r0/lib/apk/db/installed
HIGH CVE-2026-19553pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
HIGH CVE-2026-94266libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-82208libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-82208curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9545libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9545curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-12064libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-12064curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-86415libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86415curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-8932curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-8932libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-82209curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-82209libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-93990libexpat2.8.4-r0 2.8.5-r0/lib/apk/db/installed
HIGH CVE-2026-80255libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80255curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9080libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80230curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80230libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9080curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-85091zlib1.3.2-r0 1.3.2-r1/lib/apk/db/installed
HIGH CVE-2026-9547curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9547libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-13608libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GHSA-q339-8rmv-2mhverb4.0.2 4.0.3.1ERB has an @_init deserialization guard bypass via def_module / def_method / def_class — /usr/local/lib/ruby/gems/3.2.0/specifications/default/erb-4.0.2.gemspec
HIGH CVE-2026-92391curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-11586libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-11586curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-80231libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80231curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-11352libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-11352curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-80229libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80229curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92392curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-9546libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9546curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-92392libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929curl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929libcurl8.20.0-r0 8.23.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-114583pyc3.12.14-r0 3.12.16-r0/lib/apk/db/installed
MEDIUM CVE-2026-114583python33.12.14-r0 3.12.16-r0/lib/apk/db/installed
MEDIUM CVE-2026-8458libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-8458curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
MEDIUM GHSA-hm49-wcqc-g2xgnet-imap0.3.9 0.4.24net-imap vulnerable to command Injection via "raw" arguments to multiple commands — /usr/local/lib/ruby/gems/3.2.0/specifications/net-imap-0.3.9.gemspec
MEDIUM CVE-2026-114583python3-pyc3.12.14-r0 3.12.16-r0/lib/apk/db/installed
MEDIUM CVE-2026-114583python3-pycache-pyc03.12.14-r0 3.12.16-r0/lib/apk/db/installed
MEDIUM CVE-2026-102633libexpat2.8.4-r0 2.9.0-r0/lib/apk/db/installed
MEDIUM GHSA-46q3-7gv7-qmggnet-imap0.3.9 0.5.15Net::IMAP: Command Injection via ID command argument — /usr/local/lib/ruby/gems/3.2.0/specifications/net-imap-0.3.9.gemspec
MEDIUM GHSA-75xq-5h9v-w6pxnet-imap0.3.9 0.4.24net-imap vulnerable to command Injection via unvalidated Symbol inputs — /usr/local/lib/ruby/gems/3.2.0/specifications/net-imap-0.3.9.gemspec
MEDIUM GHSA-8p34-64r3-mwg8net-imap0.3.9 0.5.15Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument — /usr/local/lib/ruby/gems/3.2.0/specifications/net-imap-0.3.9.gemspec
MEDIUM CVE-2026-17084pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-17084python33.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-17084python3-pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-17084python3-pycache-pyc03.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-87910pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-87910python33.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-87910python3-pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-19672python3-pycache-pyc03.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-87910python3-pycache-pyc03.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-15806pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-15806python33.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-15806python3-pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-15806python3-pycache-pyc03.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-19672pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-19672python33.12.14-r0 3.12.15-r0/lib/apk/db/installed
MEDIUM CVE-2026-19672python3-pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
LOW GHSA-c4fp-cxrr-mj66net-imap0.3.9 0.5.15Net::IMAP: Denial of Service via incomplete raw argument validation — /usr/local/lib/ruby/gems/3.2.0/specifications/net-imap-0.3.9.gemspec
LOW GHSA-q2mw-fvj9-vvcwnet-imap0.3.9 0.4.24net-imap has quadratic complexity when reading response literals — /usr/local/lib/ruby/gems/3.2.0/specifications/net-imap-0.3.9.gemspec
LOW CVE-2026-15310python3-pycache-pyc03.12.14-r0 3.12.15-r0/lib/apk/db/installed
LOW CVE-2026-15310python3-pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
LOW CVE-2026-15310python33.12.14-r0 3.12.15-r0/lib/apk/db/installed
LOW CVE-2026-15310pyc3.12.14-r0 3.12.15-r0/lib/apk/db/installed
LOW CVE-2024-3220python3-pycache-pyc03.12.14-r0 3.12.16-r0/lib/apk/db/installed
LOW CVE-2024-3220python3-pyc3.12.14-r0 3.12.16-r0/lib/apk/db/installed
LOW CVE-2024-3220python33.12.14-r0 3.12.16-r0/lib/apk/db/installed
LOW CVE-2024-3220pyc3.12.14-r0 3.12.16-r0/lib/apk/db/installed
UNKNOWN CVE-2026-80256curl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
UNKNOWN CVE-2026-80256libcurl8.20.0-r0 8.22.0-r0/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl1.2.5-r23 1.2.5-r24/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl-utils1.2.5-r23 1.2.5-r24/lib/apk/db/installed
Filtered NVD/CPE matches (38)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-72897libssl33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-72897libcrypto33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libssl33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libcrypto33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libssl33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libcrypto33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libssl33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libcrypto33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning. — /lib/apk/db/installed
MEDIUM CVE-2026-3446python33.12.14-r0 When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data. — /lib/apk/db/installed
MEDIUM CVE-2026-6019python33.12.14-r0 http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libssl33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libcrypto33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libssl33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libcrypto33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2026-12345python33.12.14-r0 The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms. — /lib/apk/db/installed
MEDIUM CVE-2025-15367python33.12.14-r0 The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters. — /lib/apk/db/installed
MEDIUM CVE-2025-15366python33.12.14-r0 The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libcrypto33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libssl33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libcrypto33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libssl33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libcrypto33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libssl33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2025-12781python33.12.14-r0 When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the "base64" module the characters "+/" will always be accepted, regardless of the value of "altchars" parameter, typically used to establish an "alternative base64 alphabet" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues. This behavior can only be insecure if your application uses an alternate base64 alphabet (without "+/"). If your application does not use the "altchars" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet. The attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 alphabet they are expecting or verify that their application would not be affected if the b64decode() functions accepted "+" or "/" outside of altchars. — /lib/apk/db/installed
LOW CVE-2026-103995python33.12.14-r0 Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents. — /lib/apk/db/installed
LOW CVE-2026-77696libssl33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-77696libcrypto33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-54872libssl33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54872libcrypto33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54875libssl33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-54875libcrypto33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-35191libcrypto33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed
LOW CVE-2026-35191libssl33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed
UNKNOWN CVE-2026-3479python33.12.14-r0 DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals. — /lib/apk/db/installed

ghcr.io/voxpupuli/r10k-webhook

GitHub Container Registry

Downloads

12,632 downloads

ghcr.io/voxpupuli/r10k-webhook:latest (2026-08-27)

Trivy

CRITICAL 10 HIGH 93 MEDIUM 134 LOW 95 UNKNOWN 9
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-110264ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
CRITICAL CVE-2026-89078ruby3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
CRITICAL CVE-2026-93577ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
CRITICAL CVE-2026-97229ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
CRITICAL CVE-2026-110264ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
CRITICAL CVE-2026-89078ruby-libs3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
CRITICAL CVE-2026-93577ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
CRITICAL CVE-2026-97229ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
CRITICAL CVE-2026-54906concurrent-ruby1.3.6 >= 1.3.7concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Synchronization flaw in ReadWriteLock allows unauthorized lock release and denial of service — Ruby
CRITICAL CVE-2026-111497brotli-libs1.2.0-r0 1.2.1-r0brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-111943stdlibv1.26.2 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-27145stdlibv1.26.2 1.25.11, 1.26.4crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-45363jwt2.10.2 ~> 2.10.3, >= 3.2.0ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification — Ruby
HIGH CVE-2026-54297faraday2.14.2 ~> 1.10.6, >= 2.14.3faraday: Faraday: Denial of Service via crafted nested query strings — Ruby
HIGH CVE-2026-54904concurrent-ruby1.3.6 >= 1.3.7concurrent-ruby: rubygem-concurrent-ruby: concurrent-ruby: Denial of Service due to infinite loop in AtomicReference#update — Ruby
HIGH CVE-2026-33811stdlibv1.26.2 1.25.10, 1.26.3net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-11352libcurl8.19.0-r0 8.22.0-r0curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-11586libcurl8.19.0-r0 8.22.0-r0curl: curl: Denial of Service via WebSocket PING flood — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-12064libcurl8.19.0-r0 8.22.0-r0curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-97031stdlibv1.26.2 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-78669stdlibv1.26.2 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-78667stdlibv1.26.2 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-14456libcrypto33.5.6-r0 3.5.8-r0openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-45447libcrypto33.5.6-r0 3.5.7-r0openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-56862stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-56860stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-56859stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-56858stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3html/template: golang: Go html/template: Cross-Site Scripting via pathological input — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-56853stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-46600stdlibv1.26.2 1.26.6, 1.27.0-rc.3golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-42504stdlibv1.26.2 1.25.11, 1.26.4mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-42499stdlibv1.26.2 1.25.10, 1.26.3net/mail: golang: net/mail: Denial of Service via pathological email address parsing — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-39836stdlibv1.26.2 1.25.10, 1.26.3net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-39822stdlibv1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2golang: Go os.Root: Symlink following vulnerability allows directory traversal — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-39821stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-39820stdlibv1.26.2 1.25.10, 1.26.3net/mail: golang: Go net/mail: Denial of Service via crafted email inputs — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-33818stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-33814stdlibv1.26.2 1.25.10, 1.26.3net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-93990libexpat2.7.5-r0 2.8.5-r0expat: Expat: XML Injection via Malformed UTF-16 Input — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-77214libexpat2.7.5-r0 2.9.0-r0expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-76957libexpat2.7.5-r0 2.8.4-r0libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-76956libexpat2.7.5-r0 2.8.4-r0libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-76641libexpat2.7.5-r0 2.8.4-r0expat: Expat: Denial of Service via XML external entity parsing — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-66046libexpat2.7.5-r0 2.8.4-r0expat: Expat: Denial of Service via quadratic complexity in attribute processing — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-45186libexpat2.7.5-r0 2.8.1-r0libexpat: denial of service via crafted XML input — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-53587libgit21.9.2-r0 1.9.6-r0libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-5917libgit21.9.2-r0 1.9.7-r0libgit2: libgit2: Arbitrary code execution via shell command injection in SSH backend — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-55199libssh21.11.1-r1 1.11.1-r3libssh2: libssh2: Denial of Service via crafted SSH_MSG_EXT_INFO message — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-55200libssh21.11.1-r1 1.11.1-r3libssh2: libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-58050libssh21.11.1-r1 1.11.1-r4libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-7598libssh21.11.1-r1 1.11.1-r2libssh2: integer overflow via large username or password arguments — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-14456libssl33.5.6-r0 3.5.8-r0openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-45447libssl33.5.6-r0 3.5.7-r0openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-103111pcre210.47-r0 10.49-r0pcre2: pcre2: Out-of-bounds write via crafted regular expression — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-86145pcre210.47-r0 10.48-r0pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-89157pcre210.47-r0 10.48-r0pcre2: PCRE2: Out-of-bounds write via large pattern input — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-89161pcre210.47-r0 10.48-r0pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-80212ruby3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-80212ruby-libs3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-9547libcurl8.19.0-r0 8.22.0-r0curl: curl: Man-in-the-middle attack via SSH host key bypass — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-92392libcurl8.19.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-8927libcurl8.19.0-r0 8.22.0-r0curl: Information disclosure due to uncleared proxy authentication state — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-8925libcurl8.19.0-r0 8.22.0-r0curl: curl: Double-free vulnerability in SASL authentication — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-8458libcurl8.19.0-r0 8.22.0-r0curl: libcurl: Unauthorized connection reuse due to a logical error — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-8286libcurl8.19.0-r0 8.22.0-r0curl: curl: Insecure connection establishment due to TLS configuration mismatch — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-6276libcurl8.19.0-r0 8.20.0-r0curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-5773libcurl8.19.0-r0 8.20.0-r0curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-39829golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters — usr/sbin/webhook-go
HIGH CVE-2026-39830golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses — usr/sbin/webhook-go
HIGH CVE-2026-39831golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check — usr/sbin/webhook-go
HIGH CVE-2026-39832golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions — usr/sbin/webhook-go
HIGH CVE-2026-39835golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate — usr/sbin/webhook-go
HIGH CVE-2026-42508golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey — usr/sbin/webhook-go
HIGH CVE-2026-46595golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation — usr/sbin/webhook-go
HIGH CVE-2026-46597golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs — usr/sbin/webhook-go
HIGH CVE-2026-56854golang.org/x/cryptov0.48.0 0.55.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions — usr/sbin/webhook-go
HIGH CVE-2026-97031stdlibv1.27.0 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — usr/sbin/webhook-go
HIGH CVE-2026-8458curl8.19.0-r0 8.22.0-r0curl: libcurl: Unauthorized connection reuse due to a logical error — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-8925curl8.19.0-r0 8.22.0-r0curl: curl: Double-free vulnerability in SASL authentication — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-78669stdlibv1.27.0 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/sbin/webhook-go
HIGH CVE-2026-78667stdlibv1.27.0 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — usr/sbin/webhook-go
HIGH CVE-2026-33814golang.org/x/netv0.51.0 0.53.0net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame — usr/sbin/webhook-go
HIGH CVE-2026-8927curl8.19.0-r0 8.22.0-r0curl: Information disclosure due to uncleared proxy authentication state — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-92392curl8.19.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-25681golang.org/x/netv0.51.0 0.55.0golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting — usr/sbin/webhook-go
HIGH CVE-2026-27136golang.org/x/netv0.51.0 0.55.0golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass — usr/sbin/webhook-go
HIGH CVE-2026-56851golang.org/x/textv0.34.0 0.41.0golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile — usr/sbin/webhook-go
HIGH CVE-2026-56852golang.org/x/textv0.34.0 0.39.0golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input — usr/sbin/webhook-go
HIGH CVE-2026-33630c-ares1.34.6-r0 1.34.8-r0c-ares: c-ares: Use-after-free / double-free in query-completion handling — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-11352curl8.19.0-r0 8.22.0-r0curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-11586curl8.19.0-r0 8.22.0-r0curl: curl: Denial of Service via WebSocket PING flood — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-12064curl8.19.0-r0 8.22.0-r0curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-5773curl8.19.0-r0 8.20.0-r0curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-6276curl8.19.0-r0 8.20.0-r0curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-8286curl8.19.0-r0 8.22.0-r0curl: curl: Insecure connection establishment due to TLS configuration mismatch — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-40164jq1.8.1-r0 1.8.2-r0jq: jq: Denial of Service via crafted JSON object causing hash collisions — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-32316jq1.8.1-r0 1.8.2-r0jq: jq: Denial of Service or potential arbitrary code execution due to integer overflow and heap-based buffer overflow — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-111943stdlibv1.27.0 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — usr/sbin/webhook-go
HIGH CVE-2026-9547curl8.19.0-r0 8.22.0-r0curl: curl: Man-in-the-middle attack via SSH host key bypass — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
HIGH CVE-2026-78669golang.org/x/netv0.51.0 0.60.0net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/sbin/webhook-go
HIGH CVE-2026-46600golang.org/x/netv0.51.0 0.56.0golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing — usr/sbin/webhook-go
HIGH CVE-2026-39821golang.org/x/netv0.51.0 0.55.0golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing — usr/sbin/webhook-go
HIGH CVE-2026-39828golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions — usr/sbin/webhook-go
MEDIUM CVE-2026-66035libssh21.11.1-r1 1.11.1-r4libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-66034libssh21.11.1-r1 1.11.1-r4libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-97030stdlibv1.27.0 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — usr/sbin/webhook-go
MEDIUM CVE-2026-94448stdlibv1.27.0 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — usr/sbin/webhook-go
MEDIUM CVE-2026-18798libssl33.5.6-r0 3.5.8-r0openssl: QUIC server may trigger double free when processing INITIAL packet — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-34182libssl33.5.6-r0 3.5.7-r0openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-34183libssl33.5.6-r0 3.5.7-r0openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-42764libssl33.5.6-r0 3.5.7-r0openssl: NULL pointer dereference in QUIC server initial packet handling — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-45445libssl33.5.6-r0 3.5.7-r0openssl: AES-OCB IV Ignored on EVP_Cipher() Path — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-63072libssl33.5.6-r0 3.5.8-r0openssl: heap buffer overflow in CMS key unwrapping — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-63076libssl33.5.6-r0 3.5.8-r0openssl: invalid pointer dereference in CMP server via crafted protectionAlg — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-54905concurrent-ruby1.3.6 >= 1.3.7concurrent-ruby: Concurrent-ruby: Incorrect write lock granting leading to broken mutual exclusion — Ruby
MEDIUM CVE-2026-56403libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56404libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56405libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56406libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56407libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Arbitrary code execution due to integer overflow — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56408libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56409libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Integer overflow in xmlwf may lead to information disclosure or arbitrary code execution — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56410libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution. — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56411libexpat2.7.5-r0 2.8.2-r0expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56412libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-53583libgit21.9.2-r0 1.9.6-r0libgit2: libgit2: Network attacker can intercept HTTPS connections via inverted IP SubjectAltName comparison — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-53585libgit21.9.2-r0 1.9.6-r0libgit2: libgit2: Denial of Service via Unbounded Memory Allocation — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-53586libgit21.9.2-r0 1.9.6-r0libgit2: libgit2: Information disclosure via HTTP redirect allows credential leakage — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-97032stdlibv1.27.0 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/sbin/webhook-go
MEDIUM CVE-2025-15661libssh21.11.1-r1 1.11.1-r4libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-58051libssh21.11.1-r1 1.11.1-r4libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-66032libssh21.11.1-r1 1.11.1-r4libssh2: libssh2: Arbitrary code execution via double-free in SFTP session — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-66033libssh21.11.1-r1 1.11.1-r4libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-46598golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh/agent: golang: golang.org/x/crypto/ssh/agent: Denial of Service via malformed input — usr/sbin/webhook-go
MEDIUM CVE-2026-39834golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write — usr/sbin/webhook-go
MEDIUM CVE-2026-39833golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation — usr/sbin/webhook-go
MEDIUM CVE-2026-39827golang.org/x/cryptov0.48.0 0.52.0golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via repeated rejected channel openings — usr/sbin/webhook-go
MEDIUM GHSA-gxhx-2686-5h9ggithub.com/slack-go/slackv0.18.0 0.23.1slack-go `SecretsVerifier` accepts empty signing secret without precondition — usr/sbin/webhook-go
MEDIUM CVE-2026-40898github.com/quic-go/quic-gov0.59.0 0.59.1github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers — usr/sbin/webhook-go
MEDIUM CVE-2026-97032stdlibv1.26.2 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-97030stdlibv1.26.2 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-94448stdlibv1.26.2 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-94440stdlibv1.26.2 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-94439stdlibv1.26.2 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-78663stdlibv1.26.2 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-39823stdlibv1.26.2 1.25.10, 1.26.3html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-39825stdlibv1.26.2 1.25.10, 1.26.3net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-39826stdlibv1.26.2 1.25.10, 1.26.3html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-42505stdlibv1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-42507stdlibv1.26.2 1.25.11, 1.26.4net/textproto: golang: Golang net/textproto: Misleading error messages via input injection — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-56866stdlibv1.26.2 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-78659stdlibv1.26.2 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-78660stdlibv1.26.2 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-94440stdlibv1.27.0 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — usr/sbin/webhook-go
MEDIUM CVE-2026-94439stdlibv1.27.0 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — usr/sbin/webhook-go
MEDIUM CVE-2026-78663stdlibv1.27.0 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/sbin/webhook-go
MEDIUM CVE-2026-78660stdlibv1.27.0 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/sbin/webhook-go
MEDIUM CVE-2026-89156pcre210.47-r0 10.48-r0PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-89158pcre210.47-r0 10.48-r0PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-89160pcre210.47-r0 10.48-r0pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-78659stdlibv1.27.0 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/sbin/webhook-go
MEDIUM CVE-2026-56866stdlibv1.27.0 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — usr/sbin/webhook-go
MEDIUM CVE-2026-80213ruby3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-97032golang.org/x/netv0.51.0 0.60.0net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/sbin/webhook-go
MEDIUM CVE-2026-78663golang.org/x/netv0.51.0 0.60.0net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/sbin/webhook-go
MEDIUM CVE-2026-80213ruby-libs3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-78660golang.org/x/netv0.51.0 0.60.0net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/sbin/webhook-go
MEDIUM CVE-2026-78659golang.org/x/netv0.51.0 0.60.0net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/sbin/webhook-go
MEDIUM CVE-2026-42506golang.org/x/netv0.51.0 0.55.0golang.org/x/net/html: golang.org/x/net/html: Cross-Site Scripting (XSS) via arbitrary HTML parsing — usr/sbin/webhook-go
MEDIUM CVE-2026-42502golang.org/x/netv0.51.0 0.55.0golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering — usr/sbin/webhook-go
MEDIUM CVE-2026-25680golang.org/x/netv0.51.0 0.55.0golang.org/x/net/html: golang.org/x/net/html: Denial of Service due to excessive HTML parsing — usr/sbin/webhook-go
MEDIUM CVE-2026-85091zlib1.3.2-r0 1.3.2-r1zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-78662golang.org/x/cryptov0.48.0 0.56.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding — usr/sbin/webhook-go
MEDIUM CVE-2026-56855golang.org/x/cryptov0.48.0 0.56.0golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages — usr/sbin/webhook-go
MEDIUM CVE-2026-10536libcurl8.19.0-r0 8.22.0-r0libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-11564libcurl8.19.0-r0 8.22.0-r0libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-11856libcurl8.19.0-r0 8.22.0-r0curl: curl: Information disclosure via incorrect Digest authentication header reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-19931libcurl8.19.0-r0 8.22.0-r0curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-4873libcurl8.19.0-r0 8.20.0-r0curl: curl: Information disclosure due to incorrect TLS connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-5545libcurl8.19.0-r0 8.20.0-r0curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-6253libcurl8.19.0-r0 8.20.0-r0curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-6429libcurl8.19.0-r0 8.20.0-r0curl: libcurl: Credential leak via reused proxy connection during HTTP redirects — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-7009libcurl8.19.0-r0 8.20.0-r0curl: Curl: Certificate validation bypass due to OCSP stapling flaw — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-7168libcurl8.19.0-r0 8.20.0-r0curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-82208libcurl8.19.0-r0 8.22.0-r0curl: libcurl: Improper certificate validation when using wolfSSL CA cache — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-8924libcurl8.19.0-r0 8.22.0-r0curl: curl: Cookie injection via malicious HTTP server using super cookies — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-33947jq1.8.1-r0 1.8.2-r0jq: unbounded Recursion in jv_setpath() / jv_getpath() / delpaths_sorted() — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-8926libcurl8.19.0-r0 8.22.0-r0curl: curl: Information disclosure via incorrect .netrc password lookup — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-8932libcurl8.19.0-r0 8.22.0-r0libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-9079libcurl8.19.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-9080libcurl8.19.0-r0 8.22.0-r0libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-92388libcurl8.19.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-9545libcurl8.19.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure via cached SSL session and early data — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-9546libcurl8.19.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure due to persistent Referer header — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-45445libcrypto33.5.6-r0 3.5.7-r0openssl: AES-OCB IV Ignored on EVP_Cipher() Path — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-63072libcrypto33.5.6-r0 3.5.8-r0openssl: heap buffer overflow in CMS key unwrapping — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-63076libcrypto33.5.6-r0 3.5.8-r0openssl: invalid pointer dereference in CMP server via crafted protectionAlg — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-42764libcrypto33.5.6-r0 3.5.7-r0openssl: NULL pointer dereference in QUIC server initial packet handling — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-34183libcrypto33.5.6-r0 3.5.7-r0openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-34182libcrypto33.5.6-r0 3.5.7-r0openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-18798libcrypto33.5.6-r0 3.5.8-r0openssl: QUIC server may trigger double free when processing INITIAL packet — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-54679jq1.8.1-r0 1.8.2-r0jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systems — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-49839jq1.8.1-r0 1.8.2-r0jq: jq: Heap out-of-bounds write via oversized raw file processing — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-47770jq1.8.1-r0 1.8.2-r0jq: jq: Denial of Service via deeply nested array comparison — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-44777jq1.8.1-r0 1.8.2-r0jq: stack overflow in module loading on mutual include — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-43896jq1.8.1-r0 1.8.2-r0jq: stack overflow in recursive object merge — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-43895jq1.8.1-r0 1.8.2-r0jq: embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-43894jq1.8.1-r0 1.8.2-r0jq: jq: Arbitrary Code Execution or Denial of Service via Signed Integer Overflow — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-41257jq1.8.1-r0 1.8.2-r0jq: signed-int overflow in stack_reallocate — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-41256jq1.8.1-r0 1.8.2-r0jq: embedded NUL truncates top-level jq programs loaded with -f — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-40612jq1.8.1-r0 1.8.2-r0jq: stack overflow via unbounded recursion in jv_contains — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-39979jq1.8.1-r0 1.8.2-r0jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-39956jq1.8.1-r0 1.8.2-r0jq: missing runtime type checks for _strindices lead to crash and limited memory disclosure — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-33948jq1.8.1-r0 1.8.2-r0jq: jq: Input validation bypass via embedded NUL bytes allows parser differential attacks — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-9546curl8.19.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure due to persistent Referer header — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-9545curl8.19.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure via cached SSL session and early data — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-92388curl8.19.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-9080curl8.19.0-r0 8.22.0-r0libcurl: libcurl: Use-after-free via curl_easy_pause() in CURLMOPT_SOCKETFUNCTION callback — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-9079curl8.19.0-r0 8.22.0-r0libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-8932curl8.19.0-r0 8.22.0-r0libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-8926curl8.19.0-r0 8.22.0-r0curl: curl: Information disclosure via incorrect .netrc password lookup — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-8924curl8.19.0-r0 8.22.0-r0curl: curl: Cookie injection via malicious HTTP server using super cookies — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-82208curl8.19.0-r0 8.22.0-r0curl: libcurl: Improper certificate validation when using wolfSSL CA cache — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-7168curl8.19.0-r0 8.20.0-r0curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-7009curl8.19.0-r0 8.20.0-r0curl: Curl: Certificate validation bypass due to OCSP stapling flaw — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-6429curl8.19.0-r0 8.20.0-r0curl: libcurl: Credential leak via reused proxy connection during HTTP redirects — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-6253curl8.19.0-r0 8.20.0-r0curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-5545curl8.19.0-r0 8.20.0-r0curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-4873curl8.19.0-r0 8.20.0-r0curl: curl: Information disclosure due to incorrect TLS connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-19931curl8.19.0-r0 8.22.0-r0curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-11856curl8.19.0-r0 8.22.0-r0curl: curl: Information disclosure via incorrect Digest authentication header reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-11564curl8.19.0-r0 8.22.0-r0libcurl: libcurl: Certificate validation bypass due to incorrect connection reuse — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-10536curl8.19.0-r0 8.22.0-r0libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-102633libexpat2.7.5-r0 2.9.0-r0expat: expat: Denial of Service via integer overflow in expat_realloc — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-50219libexpat2.7.5-r0 2.8.2-r0expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56131libexpat2.7.5-r0 2.8.2-r0libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
MEDIUM CVE-2026-56132libexpat2.7.5-r0 2.8.2-r0expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-56857stdlibv1.27.0 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — usr/sbin/webhook-go
LOW CVE-2026-107928curl8.19.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-107929curl8.19.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-13608curl8.19.0-r0 8.22.0-r0curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87861curl8.19.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87862curl8.19.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87863curl8.19.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87864curl8.19.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87865curl8.19.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87866curl8.19.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92386curl8.19.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92387curl8.19.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92389curl8.19.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92390curl8.19.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92391curl8.19.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-56857stdlibv1.26.2 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — usr/local/bin/supercronic-linux-amd64
LOW CVE-2026-94265curl8.19.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-94266curl8.19.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86415curl8.19.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86414curl8.19.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86413curl8.19.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86412curl8.19.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86411curl8.19.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86410curl8.19.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86409curl8.19.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-82209curl8.19.0-r0 8.22.0-r0curl: libcurl: Information disclosure via improper Public Suffix List boundary check — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-80255curl8.19.0-r0 8.22.0-r0curl: curl: Information disclosure due to secure cookie attribute bypass — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-80231curl8.19.0-r0 8.22.0-r0curl: curl: Incorrect HTTPS connection reuse with Native CA Store — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-80230curl8.19.0-r0 8.22.0-r0curl: curl: Public key pinning bypass allows unauthenticated connections — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-80229curl8.19.0-r0 8.22.0-r0curl: libcurl: Memory corruption vulnerability via OpenSSL 3 provider use-after-free — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-18924curl8.19.0-r0 8.22.0-r0curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86413libcurl8.19.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86412libcurl8.19.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86411libcurl8.19.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86410libcurl8.19.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86409libcurl8.19.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-82209libcurl8.19.0-r0 8.22.0-r0curl: libcurl: Information disclosure via improper Public Suffix List boundary check — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-80255libcurl8.19.0-r0 8.22.0-r0curl: curl: Information disclosure due to secure cookie attribute bypass — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-80231libcurl8.19.0-r0 8.22.0-r0curl: curl: Incorrect HTTPS connection reuse with Native CA Store — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-80230libcurl8.19.0-r0 8.22.0-r0curl: curl: Public key pinning bypass allows unauthenticated connections — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-80229libcurl8.19.0-r0 8.22.0-r0curl: libcurl: Memory corruption vulnerability via OpenSSL 3 provider use-after-free — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-18924libcurl8.19.0-r0 8.22.0-r0curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-13608libcurl8.19.0-r0 8.22.0-r0curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-107929libcurl8.19.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-107928libcurl8.19.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-14457libssl33.5.6-r0 3.5.8-r0openssl: RPK server signature algorithm selection can dereference a missing certificate — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-34180libssl33.5.6-r0 3.5.7-r0openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-34181libssl33.5.6-r0 3.5.7-r0openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-94266libcurl8.19.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-94265libcurl8.19.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92391libcurl8.19.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92390libcurl8.19.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92389libcurl8.19.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-41080libexpat2.7.5-r0 2.8.1-r0libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92387libcurl8.19.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-92386libcurl8.19.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87866libcurl8.19.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87865libcurl8.19.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87864libcurl8.19.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-53584libgit21.9.2-r0 1.9.6-r0libgit2: libgit2: Submodule path traversal allows arbitrary directory creation — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87863libcurl8.19.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87862libcurl8.19.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-87861libcurl8.19.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86415libcurl8.19.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-86414libcurl8.19.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-89162pcre210.47-r0 10.48-r0pcre2: PCRE2: Information disclosure via pcre2_serialize_encode — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-9076libcrypto33.5.6-r0 3.5.7-r0openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-75803libcrypto33.5.6-r0 3.5.8-r0openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher() — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-7383libcrypto33.5.6-r0 3.5.7-r0openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-63075libcrypto33.5.6-r0 3.5.8-r0openssl: QUIC ACK-only packet retention can cause memory exhaustion — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-63074libcrypto33.5.6-r0 3.5.8-r0openssl: CMP indefinite cache growth of ExtraCerts — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-63073libcrypto33.5.6-r0 3.5.8-r0openssl: untrusted sender DN used as format string in CMP response validation — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-54874libcrypto33.5.6-r0 3.5.8-r0openssl: excessive memory use buffering DTLS records for a future epoch — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-45446libcrypto33.5.6-r0 3.5.7-r0openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42770libcrypto33.5.6-r0 3.5.7-r0openssl: FFC-DH Peer Validation Uses Attacker-Supplied q — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42769libcrypto33.5.6-r0 3.5.7-r0openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42768libcrypto33.5.6-r0 3.5.7-r0openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42767libcrypto33.5.6-r0 3.5.7-r0openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42766libcrypto33.5.6-r0 3.5.7-r0openssl: Possible NULL Dereference in Password-Based CMS Decryption — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-34181libcrypto33.5.6-r0 3.5.7-r0openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-34180libcrypto33.5.6-r0 3.5.7-r0openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-14457libcrypto33.5.6-r0 3.5.8-r0openssl: RPK server signature algorithm selection can dereference a missing certificate — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42766libssl33.5.6-r0 3.5.7-r0openssl: Possible NULL Dereference in Password-Based CMS Decryption — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42767libssl33.5.6-r0 3.5.7-r0openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42768libssl33.5.6-r0 3.5.7-r0openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42769libssl33.5.6-r0 3.5.7-r0openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-42770libssl33.5.6-r0 3.5.7-r0openssl: FFC-DH Peer Validation Uses Attacker-Supplied q — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-9076libssl33.5.6-r0 3.5.7-r0openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-75803libssl33.5.6-r0 3.5.8-r0openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher() — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-7383libssl33.5.6-r0 3.5.7-r0openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-63075libssl33.5.6-r0 3.5.8-r0openssl: QUIC ACK-only packet retention can cause memory exhaustion — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-45446libssl33.5.6-r0 3.5.7-r0openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-63074libssl33.5.6-r0 3.5.8-r0openssl: CMP indefinite cache growth of ExtraCerts — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-63073libssl33.5.6-r0 3.5.8-r0openssl: untrusted sender DN used as format string in CMP response validation — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
LOW CVE-2026-54874libssl33.5.6-r0 3.5.8-r0openssl: excessive memory use buffering DTLS records for a future epoch — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
UNKNOWN CVE-2026-80256libcurl8.19.0-r0 8.22.0-r0Title Not Available — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
UNKNOWN GO-2026-5932golang.org/x/cryptov0.48.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues — usr/sbin/webhook-go
UNKNOWN CVE-2026-39824golang.org/x/sysv0.43.0 0.44.0Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows — usr/local/bin/supercronic-linux-amd64
UNKNOWN CVE-2026-39824golang.org/x/sysv0.41.0 0.44.0Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows — usr/sbin/webhook-go
UNKNOWN CVE-2026-97045golang.org/x/netv0.51.0 0.62.0In childTextNodesAreLiteral, walking up the tree previously stopped at ... — usr/sbin/webhook-go
UNKNOWN CVE-2026-78661golang.org/x/netv0.51.0 0.62.0When coalescing adjacent text nodes in addText and fosterParent, appen ... — usr/sbin/webhook-go
UNKNOWN CVE-2026-107891musl1.2.5-r23 1.2.5-r24Title Not Available — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
UNKNOWN CVE-2026-107891musl-utils1.2.5-r23 1.2.5-r24Title Not Available — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)
UNKNOWN CVE-2026-80256curl8.19.0-r0 8.22.0-r0Title Not Available — ghcr.io/voxpupuli/r10k-webhook:latest (alpine 3.23.4)

Grype

CRITICAL 53 HIGH 161 MEDIUM 66 LOW 8 UNKNOWN 4 NVD/CPE filtered 39
SeverityIDPackageInstalledFixedTitle / target
CRITICAL GO-2026-6612stdlibgo1.27.0 1.27.2The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/sbin/webhook-go
CRITICAL GO-2026-6612stdlibgo1.26.2 1.26.9The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/local/bin/supercronic-linux-amd64
CRITICAL GO-2026-6612golang.org/x/netv0.51.0 0.60.0The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/sbin/webhook-go
CRITICAL CVE-2026-93577ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-8924libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8924curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-11856libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-11856curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-75803libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
CRITICAL CVE-2026-75803libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8926libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8926curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-7598libssh21.11.1-r1 1.11.1-r2/lib/apk/db/installed
CRITICAL CVE-2026-8927libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8927curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-18924libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-18924curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-11564libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-11564curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-10536libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-10536curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8925libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-8925curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-34182libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-111497brotli-libs1.2.0-r0 1.2.1-r0/lib/apk/db/installed
CRITICAL CVE-2026-19931libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-9079curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-19931curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-63073libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
CRITICAL CVE-2026-9079libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-34182libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
CRITICAL CVE-2026-63073libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-66032libssh21.11.1-r1 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-45186libexpat2.7.5-r0 2.8.1-r0/lib/apk/db/installed
HIGH CVE-2026-66035libssh21.11.1-r1 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-9080libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9080curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-6617stdlibgo1.27.0 1.27.2HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/sbin/webhook-go
HIGH GO-2026-6617stdlibgo1.26.2 1.26.9HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-80255curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80255libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-5970golang.org/x/textv0.34.0 0.39.0A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. — /usr/sbin/webhook-go
HIGH GO-2026-6605stdlibgo1.26.2 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6605stdlibgo1.27.0 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/sbin/webhook-go
HIGH CVE-2026-53587libgit21.9.2-r0 1.9.6-r0/lib/apk/db/installed
HIGH CVE-2026-92390curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-63075libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-63075libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH GO-2026-5972stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6090stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6089stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-80229curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80229libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-5026golang.org/x/netv0.51.0 0.55.0The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". — /usr/sbin/webhook-go
HIGH CVE-2026-94266curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-55200libssh21.11.1-r1 1.11.1-r3/lib/apk/db/installed
HIGH CVE-2026-45447libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-45447libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH GO-2026-6607stdlibgo1.26.2 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6607stdlibgo1.27.0 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/sbin/webhook-go
HIGH GO-2026-6608stdlibgo1.26.2 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6608stdlibgo1.27.0 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/sbin/webhook-go
HIGH CVE-2026-13608curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-13608libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-85091zlib1.3.2-r0 1.3.2-r1/lib/apk/db/installed
HIGH GO-2026-6617golang.org/x/netv0.51.0 0.60.0HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/sbin/webhook-go
HIGH CVE-2026-82209libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-76641libexpat2.7.5-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-34181libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-34181libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-80230curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80230libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-40164jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
HIGH GHSA-c32j-vqhx-rx3xjwt2.10.2 2.10.3ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351 — /usr/lib/ruby/gems/3.4.0/specifications/jwt-2.10.2.gemspec
HIGH CVE-2026-9547curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9547libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-89157pcre210.47-r0 10.48-r0/lib/apk/db/installed
HIGH CVE-2026-77214libexpat2.7.5-r0 2.9.0-r0/lib/apk/db/installed
HIGH CVE-2026-8286curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-8286libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-6276curl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
HIGH CVE-2026-6276libcurl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
HIGH CVE-2026-58051libssh21.11.1-r1 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-76956libexpat2.7.5-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-103111pcre210.47-r0 10.49-r0/lib/apk/db/installed
HIGH CVE-2026-49839jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
HIGH CVE-2026-89161pcre210.47-r0 10.48-r0/lib/apk/db/installed
HIGH CVE-2026-76957libexpat2.7.5-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-86145pcre210.47-r0 10.48-r0/lib/apk/db/installed
HIGH CVE-2026-58050libssh21.11.1-r1 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-93990libexpat2.7.5-r0 2.8.5-r0/lib/apk/db/installed
HIGH GO-2026-6610stdlibgo1.26.2 1.26.9Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6610stdlibgo1.27.0 1.27.2Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/sbin/webhook-go
HIGH CVE-2026-86415curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86415libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6613stdlibgo1.26.2 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6613stdlibgo1.27.0 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/sbin/webhook-go
HIGH CVE-2026-12064curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-12064libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9545curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9545libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-66034libssh21.11.1-r1 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-82208curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-82208libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-41080libexpat2.7.5-r0 2.8.1-r0/lib/apk/db/installed
HIGH CVE-2026-8932curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-8932libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-82209curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-34183libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-92386curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-11586curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-11586libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-33630c-ares1.34.6-r0 1.34.8-r0/lib/apk/db/installed
HIGH CVE-2026-92391libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-4918stdlibgo1.26.2 1.25.10, 1.26.3When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-7383libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-7383libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-14457libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-14457libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH GHSA-q339-8rmv-2mhverb4.0.4 4.0.4.1ERB has an @_init deserialization guard bypass via def_module / def_method / def_class — /usr/lib/ruby/gems/3.4.0/specifications/default/erb-4.0.4.gemspec
HIGH CVE-2026-66046libexpat2.7.5-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-86410curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92392libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-32316jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
HIGH CVE-2026-34183libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-87862curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-34180libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-34180libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-11352curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-11352libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-55199libssh21.11.1-r1 1.11.1-r3/lib/apk/db/installed
HIGH CVE-2026-63072libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-63072libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-80231curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80231libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-42764libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-42764libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-86412curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-h8w8-99g7-qmvjconcurrent-ruby1.3.6 1.3.7Concurrent Ruby : `AtomicReference#update` livelocks when the stored value is `Float::NAN` — /usr/lib/ruby/gems/3.4.0/specifications/concurrent-ruby-1.3.6.gemspec
HIGH CVE-2026-63076libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH GO-2026-5026stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-18798libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-9546curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-9546libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-4971stdlibgo1.26.2 1.25.10, 1.26.3The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0). — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-5037stdlibgo1.26.2 1.25.11, 1.26.4(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-66033libssh21.11.1-r1 1.11.1-r4/lib/apk/db/installed
HIGH GO-2026-6603golang.org/x/netv0.51.0 0.60.0When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/sbin/webhook-go
HIGH CVE-2026-87865curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6611stdlibgo1.27.0 1.27.2A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/sbin/webhook-go
HIGH GO-2026-6603stdlibgo1.26.2 1.26.9When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6603stdlibgo1.27.0 1.27.2When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/sbin/webhook-go
HIGH GO-2026-6611stdlibgo1.26.2 1.26.9A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-87865libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-54874libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-54874libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH GO-2026-6611golang.org/x/netv0.51.0 0.60.0A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/sbin/webhook-go
HIGH CVE-2026-18798libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-5773libcurl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
HIGH CVE-2026-5773curl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
HIGH GHSA-98m9-hrrm-r99rfaraday2.14.2 2.14.3Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters — /usr/lib/ruby/gems/3.4.0/specifications/faraday-2.14.2.gemspec
HIGH CVE-2026-92392curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928libcurl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-14456libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-14456libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-9076libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-9076libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-5917libgit21.9.2-r0 1.9.7-r0/lib/apk/db/installed
HIGH CVE-2026-63076libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
HIGH CVE-2026-107929curl8.19.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-45445libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
HIGH CVE-2026-45445libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM CVE-2026-5545curl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-89160pcre210.47-r0 10.48-r0/lib/apk/db/installed
MEDIUM CVE-2026-53584libgit21.9.2-r0 1.9.6-r0/lib/apk/db/installed
MEDIUM CVE-2026-89158pcre210.47-r0 10.48-r0/lib/apk/db/installed
MEDIUM CVE-2026-7009curl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-33948jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-33947jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-56407libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56406libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-53583libgit21.9.2-r0 1.9.6-r0/lib/apk/db/installed
MEDIUM CVE-2026-7009libcurl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-56409libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-43895jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56408libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56405libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-41257jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56411libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56410libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-54679jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-47770jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56404libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56132libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-43896jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-41256jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-43894jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-44777jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-40612jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56131libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-39956jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56412libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-50219libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-56403libexpat2.7.5-r0 2.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-7168libcurl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-7168curl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-6429libcurl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-6429curl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-6253curl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-6253libcurl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-42769libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM CVE-2026-42769libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM CVE-2025-15661libssh21.11.1-r1 1.11.1-r4/lib/apk/db/installed
MEDIUM GO-2026-6218stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations. — /usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-42767libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM CVE-2026-42767libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM CVE-2026-42766libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM CVE-2026-42766libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM CVE-2026-63074libssl33.5.6-r0 3.5.8-r0/lib/apk/db/installed
MEDIUM CVE-2026-63074libcrypto33.5.6-r0 3.5.8-r0/lib/apk/db/installed
MEDIUM CVE-2026-39979jq1.8.1-r0 1.8.2-r0/lib/apk/db/installed
MEDIUM CVE-2026-89156pcre210.47-r0 10.48-r0/lib/apk/db/installed
MEDIUM CVE-2026-53586libgit21.9.2-r0 1.9.6-r0/lib/apk/db/installed
MEDIUM CVE-2026-4873libcurl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-4873curl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
MEDIUM GO-2026-5039stdlibgo1.26.2 1.25.11, 1.26.4When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged. — /usr/local/bin/supercronic-linux-amd64
MEDIUM GO-2026-5856stdlibgo1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. — /usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-102633libexpat2.7.5-r0 2.9.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-53585libgit21.9.2-r0 1.9.6-r0/lib/apk/db/installed
MEDIUM CVE-2026-8458libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-8458curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-45446libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM CVE-2026-45446libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
MEDIUM GO-2026-6809stdlibgo1.27.0 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/sbin/webhook-go
MEDIUM GO-2026-6809stdlibgo1.26.2 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-5545libcurl8.19.0-r0 8.20.0-r0/lib/apk/db/installed
LOW CVE-2026-89162pcre210.47-r0 10.48-r0/lib/apk/db/installed
LOW GHSA-6wx8-w4f5-wwcrconcurrent-ruby1.3.6 1.3.7Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption — /usr/lib/ruby/gems/3.4.0/specifications/concurrent-ruby-1.3.6.gemspec
LOW GHSA-wv3x-4vxv-whppconcurrent-ruby1.3.6 1.3.7Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity — /usr/lib/ruby/gems/3.4.0/specifications/concurrent-ruby-1.3.6.gemspec
LOW CVE-2026-42770libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
LOW CVE-2026-42770libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
LOW GHSA-x2f5-4prf-w687json2.9.1 2.19.9Ruby json: JSON generator heap buffer overflow when streaming to an IO — /usr/lib/ruby/gems/3.4.0/specifications/default/json-2.9.1.gemspec
LOW CVE-2026-42768libcrypto33.5.6-r0 3.5.7-r0/lib/apk/db/installed
LOW CVE-2026-42768libssl33.5.6-r0 3.5.7-r0/lib/apk/db/installed
UNKNOWN CVE-2026-80256curl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
UNKNOWN CVE-2026-80256libcurl8.19.0-r0 8.22.0-r0/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl1.2.5-r23 1.2.5-r24/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl-utils1.2.5-r23 1.2.5-r24/lib/apk/db/installed
Filtered NVD/CPE matches (39)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-84782libcrypto33.5.6-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libssl33.5.6-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-59850libssh21.11.1-r1 A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions. — /lib/apk/db/installed
HIGH CVE-2026-54873libcrypto33.5.6-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libssl33.5.6-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libcrypto33.5.6-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libssl33.5.6-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-59851libssh21.11.1-r1 A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users. — /lib/apk/db/installed
HIGH CVE-2026-69184c-ares1.34.6-r0 c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_name_parse() enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource records whose NAME or RDATA fields refer to the chain, causing repeated decompression work that grows quadratically with message size. A single crafted response can stall the single-threaded c-ares event loop and deny DNS resolution, without causing memory corruption or information disclosure. This issue is fixed in version 1.34.7. — /lib/apk/db/installed
HIGH CVE-2026-72897libcrypto33.5.6-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-72897libssl33.5.6-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-69186c-ares1.34.6-r0 c-ares is an asynchronous resolver library. Prior to 1.34.7, ares_dns_parse() trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because process_answer() invokes parsing before transaction ID and question validation, a malicious DNS response can cause ares_dns_record_rr_prealloc() and ares_array_set_size() to reserve disproportionate heap memory for a tiny message. Repeated responses create large allocation and release cycles that can degrade or deny name resolution, without causing memory corruption or information disclosure. This issue is fixed in version 1.34.7. — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2026-59848libssh21.11.1-r1 A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libcrypto33.5.6-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libssl33.5.6-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libcrypto33.5.6-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libssl33.5.6-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning. — /lib/apk/db/installed
MEDIUM CVE-2026-59845libssh21.11.1-r1 A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libssl33.5.6-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libcrypto33.5.6-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libssl33.5.6-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libcrypto33.5.6-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-59844libssh21.11.1-r1 A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests. — /lib/apk/db/installed
MEDIUM CVE-2026-59843libssh21.11.1-r1 A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libssl33.5.6-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libcrypto33.5.6-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
LOW CVE-2026-59846libssh21.11.1-r1 A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior. — /lib/apk/db/installed
LOW CVE-2026-77696libssl33.5.6-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-77696libcrypto33.5.6-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-54872libssl33.5.6-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54872libcrypto33.5.6-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54875libssl33.5.6-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-54875libcrypto33.5.6-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-35191libssl33.5.6-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed
LOW CVE-2026-35191libcrypto33.5.6-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed

ghcr.io/voxpupuli/r10k

GitHub Container Registry

Downloads

32,191 downloads

ghcr.io/voxpupuli/r10k:latest (2026-08-27)

Trivy

CRITICAL 12 HIGH 41 MEDIUM 55 LOW 63 UNKNOWN 5
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-60002openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-60002openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-60002openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-110264ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-89078ruby3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-93577ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-97229ruby3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-110264ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-89078ruby-libs3.4.9-r0 3.4.12-r0ruby: double free issue in regular expression parser — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-93577ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in regular expression compiler — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-97229ruby-libs3.4.9-r0 3.4.12-r0ruby: integer overflow issue in CI/CD regular expression compiler — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-89161pcre210.47-r1 10.48-r0pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-89157pcre210.47-r1 10.48-r0pcre2: PCRE2: Out-of-bounds write via large pattern input — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-86145pcre210.47-r1 10.48-r0pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-103111pcre210.47-r1 10.49-r0pcre2: pcre2: Out-of-bounds write via crafted regular expression — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-60000openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-59999openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-78669stdlibv1.26.2 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-60000openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-59999openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-97031stdlibv1.26.2 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-60000openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-59999openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-58050libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Heap buffer overflow via integer overflow in publickey attribute allocation — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-93990libexpat2.8.3-r0 2.8.5-r0expat: Expat: XML Injection via Malformed UTF-16 Input — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-77214libexpat2.8.3-r0 2.9.0-r0expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-76957libexpat2.8.3-r0 2.8.4-r0libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-76956libexpat2.8.3-r0 2.8.4-r0libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-76641libexpat2.8.3-r0 2.8.4-r0expat: Expat: Denial of Service via XML external entity parsing — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-66046libexpat2.8.3-r0 2.8.4-r0expat: Expat: Denial of Service via quadratic complexity in attribute processing — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-42499stdlibv1.26.2 1.25.10, 1.26.3net/mail: golang: net/mail: Denial of Service via pathological email address parsing — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-39836stdlibv1.26.2 1.25.10, 1.26.3net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-39822stdlibv1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2golang: Go os.Root: Symlink following vulnerability allows directory traversal — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-39821stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-39820stdlibv1.26.2 1.25.10, 1.26.3net/mail: golang: Go net/mail: Denial of Service via crafted email inputs — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-33818stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-33814stdlibv1.26.2 1.25.10, 1.26.3net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-33811stdlibv1.26.2 1.25.10, 1.26.3net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-27145stdlibv1.26.2 1.25.11, 1.26.4crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-111943stdlibv1.26.2 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-80212ruby-libs3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-42504stdlibv1.26.2 1.25.11, 1.26.4mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-46600stdlibv1.26.2 1.26.6, 1.27.0-rc.3golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-56853stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-56858stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3html/template: golang: Go html/template: Cross-Site Scripting via pathological input — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-80212ruby3.4.9-r0 3.4.12-r0resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-56859stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-56860stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-56862stdlibv1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-78667stdlibv1.26.2 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-92392curl8.21.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
HIGH CVE-2026-92392libcurl8.21.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-92388libcurl8.21.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-73282openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-73283openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Tunnel forwarding restriction bypass — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-73283openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Tunnel forwarding restriction bypass — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-73282openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-60001openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59998openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59997openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59996openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59995openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: sftp client allows attacker to control downloaded file location — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-85091zlib1.3.2-r0 1.3.2-r1zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-80213ruby-libs3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 1.70.0-r0nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-89156pcre210.47-r1 10.48-r0PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-66035libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Arbitrary code execution via heap buffer overflow during SSH negotiation — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59995openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: sftp client allows attacker to control downloaded file location — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59996openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59997openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59998openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-60001openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-73282openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-73283openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Tunnel forwarding restriction bypass — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-60001openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-82208libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Improper certificate validation when using wolfSSL CA cache — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-19931libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59995openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: sftp client allows attacker to control downloaded file location — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59996openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59997openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-59998openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-97032stdlibv1.26.2 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-97030stdlibv1.26.2 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-94448stdlibv1.26.2 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-94440stdlibv1.26.2 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-94439stdlibv1.26.2 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-78663stdlibv1.26.2 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-78660stdlibv1.26.2 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-78659stdlibv1.26.2 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-56866stdlibv1.26.2 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-42507stdlibv1.26.2 1.25.11, 1.26.4net/textproto: golang: Golang net/textproto: Misleading error messages via input injection — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-42505stdlibv1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-39826stdlibv1.26.2 1.25.10, 1.26.3html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-39825stdlibv1.26.2 1.25.10, 1.26.3net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-39823stdlibv1.26.2 1.25.10, 1.26.3html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content — usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-19931curl8.21.0-r0 8.22.0-r0curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-82208curl8.21.0-r0 8.22.0-r0curl: libcurl: Improper certificate validation when using wolfSSL CA cache — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-66034libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Information disclosure and potential arbitrary code execution via heap out-of-bounds read — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-66033libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Denial of Service via integer underflow in AES-GCM cipher negotiation — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-66032libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Arbitrary code execution via double-free in SFTP session — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-58051libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2025-15661libssh21.11.1-r3 1.11.1-r4libssh2: libssh2: Information disclosure and denial of service via crafted SFTP response — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-89158pcre210.47-r1 10.48-r0PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-102633libexpat2.8.3-r0 2.9.0-r0expat: expat: Denial of Service via integer overflow in expat_realloc — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-89160pcre210.47-r1 10.48-r0pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-80213ruby3.4.9-r0 3.4.12-r0resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
MEDIUM CVE-2026-92388curl8.21.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87863curl8.21.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87864curl8.21.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87865curl8.21.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87861curl8.21.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87862curl8.21.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86415curl8.21.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87866curl8.21.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86414curl8.21.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86413curl8.21.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86412curl8.21.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86411curl8.21.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86410curl8.21.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86409curl8.21.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-82209curl8.21.0-r0 8.22.0-r0curl: libcurl: Information disclosure via improper Public Suffix List boundary check — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-80255curl8.21.0-r0 8.22.0-r0curl: curl: Information disclosure due to secure cookie attribute bypass — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-80231curl8.21.0-r0 8.22.0-r0curl: curl: Incorrect HTTPS connection reuse with Native CA Store — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-80230curl8.21.0-r0 8.22.0-r0curl: curl: Public key pinning bypass allows unauthenticated connections — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-80229curl8.21.0-r0 8.22.0-r0curl: libcurl: Memory corruption vulnerability via OpenSSL 3 provider use-after-free — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-18924curl8.21.0-r0 8.22.0-r0curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-13608curl8.21.0-r0 8.22.0-r0curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-107929curl8.21.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-107928curl8.21.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-56857stdlibv1.26.2 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — usr/local/bin/supercronic-linux-amd64
LOW CVE-2026-80255libcurl8.21.0-r0 8.22.0-r0curl: curl: Information disclosure due to secure cookie attribute bypass — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-82209libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Information disclosure via improper Public Suffix List boundary check — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86409libcurl8.21.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86410libcurl8.21.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86411libcurl8.21.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-94266libcurl8.21.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-94265libcurl8.21.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92391libcurl8.21.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92390libcurl8.21.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92389libcurl8.21.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92387libcurl8.21.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92386libcurl8.21.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87866libcurl8.21.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87865libcurl8.21.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87864libcurl8.21.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87863libcurl8.21.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87862libcurl8.21.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-87861libcurl8.21.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86415libcurl8.21.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86414libcurl8.21.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86413libcurl8.21.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-86412libcurl8.21.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92386curl8.21.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92387curl8.21.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92389curl8.21.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92390curl8.21.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-89162pcre210.47-r1 10.48-r0pcre2: PCRE2: Information disclosure via pcre2_serialize_encode — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-92391curl8.21.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-94265curl8.21.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-94266curl8.21.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-73281openssh-keygen10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: ssh-agent allows remote execution of local operations — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-73281openssh-client-default10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: ssh-agent allows remote execution of local operations — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-107928libcurl8.21.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-107929libcurl8.21.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-73281openssh-client-common10.3_p1-r0 10.3_p1-r1openssh: OpenSSH: ssh-agent allows remote execution of local operations — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-13608libcurl8.21.0-r0 8.22.0-r0curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-18924libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-80229libcurl8.21.0-r0 8.22.0-r0curl: libcurl: Memory corruption vulnerability via OpenSSL 3 provider use-after-free — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-80230libcurl8.21.0-r0 8.22.0-r0curl: curl: Public key pinning bypass allows unauthenticated connections — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
LOW CVE-2026-80231libcurl8.21.0-r0 8.22.0-r0curl: curl: Incorrect HTTPS connection reuse with Native CA Store — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
UNKNOWN CVE-2026-39824golang.org/x/sysv0.43.0 0.44.0Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows — usr/local/bin/supercronic-linux-amd64
UNKNOWN CVE-2026-80256curl8.21.0-r0 8.22.0-r0Title Not Available — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
UNKNOWN CVE-2026-80256libcurl8.21.0-r0 8.22.0-r0Title Not Available — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
UNKNOWN CVE-2026-107891musl-utils1.2.6-r2 1.2.6-r3Title Not Available — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)
UNKNOWN CVE-2026-107891musl1.2.6-r2 1.2.6-r3Title Not Available — ghcr.io/voxpupuli/r10k:latest (alpine 3.24.1)

Grype

CRITICAL 31 HIGH 89 MEDIUM 30 LOW 8 UNKNOWN 4 NVD/CPE filtered 36
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-110264ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-60002openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
CRITICAL CVE-2026-86413curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-93577ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL GO-2026-6612stdlibgo1.26.2 1.26.9The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/local/bin/supercronic-linux-amd64
CRITICAL CVE-2026-18924curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-18924libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-89078ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0/lib/apk/db/installed
CRITICAL CVE-2026-110264ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-97229ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
CRITICAL CVE-2026-19931curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-19931libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-60002openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
CRITICAL CVE-2026-60002openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
CRITICAL CVE-2026-94265curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86145pcre210.47-r1 10.48-r0/lib/apk/db/installed
HIGH GO-2026-6605stdlibgo1.26.2 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-80255libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80230libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80255curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-66035libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-66032libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH GO-2026-6617stdlibgo1.26.2 1.26.9HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-85091zlib1.3.2-r0 1.3.2-r1/lib/apk/db/installed
HIGH CVE-2026-13608libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-59999openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
HIGH CVE-2026-13608curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH GO-2026-6608stdlibgo1.26.2 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6607stdlibgo1.26.2 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-94266libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-80229libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80229curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80230curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-76641libexpat2.8.3-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-82209libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-82209curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-80212ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
HIGH CVE-2026-82208libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-82208curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-89157pcre210.47-r1 10.48-r0/lib/apk/db/installed
HIGH CVE-2026-77214libexpat2.8.3-r0 2.9.0-r0/lib/apk/db/installed
HIGH CVE-2026-66034libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-58051libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-76956libexpat2.8.3-r0 2.8.4-r0/lib/apk/db/installed
HIGH CVE-2026-103111pcre210.47-r1 10.49-r0/lib/apk/db/installed
HIGH CVE-2026-76957libexpat2.8.3-r0 2.8.4-r0/lib/apk/db/installed
HIGH GO-2026-6613stdlibgo1.26.2 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-86415libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86415curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-89161pcre210.47-r1 10.48-r0/lib/apk/db/installed
HIGH CVE-2026-59999openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
HIGH CVE-2026-59999openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
HIGH GO-2026-6610stdlibgo1.26.2 1.26.9Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-93990libexpat2.8.3-r0 2.8.5-r0/lib/apk/db/installed
HIGH CVE-2026-58050libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH CVE-2026-66046libexpat2.8.3-r0 2.8.4-r0/lib/apk/db/installed
HIGH GO-2026-4918stdlibgo1.26.2 1.25.10, 1.26.3When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-92386libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-80231libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-80231curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-5026stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com". — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-92392curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-q339-8rmv-2mhverb4.0.4 4.0.4.1ERB has an @_init deserialization guard bypass via def_module / def_method / def_class — /usr/lib/ruby/gems/3.4.0/specifications/default/erb-4.0.4.gemspec
HIGH CVE-2026-92392libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6089stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-6090stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. — /usr/local/bin/supercronic-linux-amd64
HIGH GO-2026-5972stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-92390libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-5037stdlibgo1.26.2 1.25.11, 1.26.4(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-87865libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6611stdlibgo1.26.2 1.26.9A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-60000openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
HIGH CVE-2026-60000openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
HIGH CVE-2026-60000openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
HIGH GO-2026-6603stdlibgo1.26.2 1.26.9When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-66033libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
HIGH GO-2026-4971stdlibgo1.26.2 1.25.10, 1.26.3The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0). — /usr/local/bin/supercronic-linux-amd64
HIGH CVE-2026-107929libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410libcurl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410curl8.21.0-r0 8.23.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-59995openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-59996openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-80213ruby-libs3.4.9-r0 3.4.12-r0/lib/apk/db/installed
MEDIUM CVE-2026-59998openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-59998openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-59998openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-59997openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-59997openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-59997openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-73282openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-73282openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-73282openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2025-15661libssh21.11.1-r3 1.11.1-r4/lib/apk/db/installed
MEDIUM GO-2026-6218stdlibgo1.26.2 1.25.13, 1.26.6, 1.27.0-rc.3Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations. — /usr/local/bin/supercronic-linux-amd64
MEDIUM GO-2026-6809stdlibgo1.26.2 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-102633libexpat2.8.3-r0 2.9.0-r0/lib/apk/db/installed
MEDIUM GO-2026-5856stdlibgo1.26.2 1.25.12, 1.26.5, 1.27.0-rc.2Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. — /usr/local/bin/supercronic-linux-amd64
MEDIUM GO-2026-5039stdlibgo1.26.2 1.25.11, 1.26.4When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged. — /usr/local/bin/supercronic-linux-amd64
MEDIUM CVE-2026-60001openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-60001openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-60001openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-89156pcre210.47-r1 10.48-r0/lib/apk/db/installed
MEDIUM CVE-2026-89160pcre210.47-r1 10.48-r0/lib/apk/db/installed
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 1.70.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-89158pcre210.47-r1 10.48-r0/lib/apk/db/installed
MEDIUM CVE-2026-59995openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-59996openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-59995openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
MEDIUM CVE-2026-59996openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
LOW CVE-2026-73283openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
LOW CVE-2026-73283openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
LOW CVE-2026-73283openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
LOW CVE-2026-89162pcre210.47-r1 10.48-r0/lib/apk/db/installed
LOW CVE-2026-73281openssh-keygen10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
LOW CVE-2026-73281openssh-client-default10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
LOW CVE-2026-73281openssh-client-common10.3_p1-r0 10.3_p1-r1/lib/apk/db/installed
LOW GHSA-x2f5-4prf-w687json2.9.1 2.19.9Ruby json: JSON generator heap buffer overflow when streaming to an IO — /usr/lib/ruby/gems/3.4.0/specifications/default/json-2.9.1.gemspec
UNKNOWN CVE-2026-80256curl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
UNKNOWN CVE-2026-80256libcurl8.21.0-r0 8.22.0-r0/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl1.2.6-r2 1.2.6-r3/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl-utils1.2.6-r2 1.2.6-r3/lib/apk/db/installed
Filtered NVD/CPE matches (36)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-84782libcrypto33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libssl33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-59850libssh21.11.1-r3 A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions. — /lib/apk/db/installed
HIGH CVE-2026-54873libcrypto33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libssl33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libcrypto33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libssl33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-59851libssh21.11.1-r3 A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users. — /lib/apk/db/installed
HIGH CVE-2026-72897libcrypto33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-72897libssl33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-59845libssh21.11.1-r3 A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service. — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2026-59848libssh21.11.1-r3 A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libcrypto33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libssl33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libcrypto33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libssl33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libssl33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libcrypto33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libssl33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libcrypto33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-59844libssh21.11.1-r3 A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and potentially exhaust it through repeated requests. — /lib/apk/db/installed
MEDIUM CVE-2026-59843libssh21.11.1-r3 A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libssl33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libcrypto33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
LOW CVE-2026-59846libssh21.11.1-r3 A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior. — /lib/apk/db/installed
LOW CVE-2026-77696libssl33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-77696libcrypto33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-54872libssl33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54872libcrypto33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54875libssl33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-54875libcrypto33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-35191libssl33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed
LOW CVE-2026-35191libcrypto33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed

ghcr.io/voxpupuli/renovate

GitHub Container Registry

Downloads

8,455 downloads

ghcr.io/voxpupuli/renovate:latest (2026-11-01)

Trivy

HIGH 10 MEDIUM 22 LOW 2
SeverityIDPackageInstalledFixedTitle / target
HIGH CVE-2026-73566tar7.5.19 7.5.21tar: node-tar: Denial of Service via crafted long-path tar archive — Node.js
HIGH CVE-2026-109383undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Certificate validation bypass via dropped TLS options in Agent — Node.js
HIGH CVE-2026-109869undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unhandled stream error on excessive content encodings — Node.js
HIGH CVE-2026-19534undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: Denial of Service via unrequested WebSocket subprotocol — Node.js
HIGH CVE-2026-87018undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via TLS renegotiation with mismatched certificate — Node.js
HIGH CVE-2026-69192ip-address10.2.0 10.3.1ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass — Node.js
HIGH CVE-2026-69152brace-expansion5.0.7 1.1.18, 2.1.4, 3.0.6, 5.0.9brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation — Node.js
HIGH CVE-2026-14257brace-expansion5.0.7 5.0.8, 3.0.3, 2.1.3, 1.1.17brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function — Node.js
HIGH CVE-2026-102278brace-expansion5.0.7 5.0.11, 3.0.8, 2.1.6, 1.1.20brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns — Node.js
HIGH CVE-2026-102276brace-expansion5.0.7 5.0.10, 3.0.7, 2.1.5, 1.1.19brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns — Node.js
MEDIUM CVE-2026-16728undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length — Node.js
MEDIUM CVE-2026-15157undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: undici: HTTP header injection via unvalidated blob-like body type property — Node.js
MEDIUM CVE-2026-109932undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unbounded WebSocket PONG buffering — Node.js
MEDIUM CVE-2026-16729undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: Undici: Cookie attribute injection allows bypassing security protections — Node.js
MEDIUM CVE-2026-109924undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via memory exhaustion in EventSource client — Node.js
MEDIUM CVE-2026-85024undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: Denial of Service via unhandled error in WebSocket permessage-deflate decompression — Node.js
MEDIUM CVE-2026-104844postcss-selector-parser7.1.4 7.1.6, 6.1.5postcss-selector-parser: postcss-selector-parser: Denial of Service via crafted CSS selectors — Node.js
MEDIUM CVE-2026-118764minimatch9.0.9 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-118764minimatch3.1.5 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-118764minimatch10.2.6 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-118764minimatch10.2.5 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-69198ip-address10.2.0 10.2.2ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass — Node.js
MEDIUM CVE-2026-54272ip-address10.2.0 10.2.1ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification — Node.js
MEDIUM CVE-2026-111997ip-address10.2.0 10.7.4ip-address: ip-address: Denial of Service via excessive percent characters in IPv6 address input — Node.js
MEDIUM CVE-2026-101913ip-address10.2.0 10.5.1ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation — Node.js
MEDIUM CVE-2026-101912ip-address10.2.0 10.7.1ip-address: ip-address: Access control bypass via cross-family subnet comparison — Node.js
MEDIUM CVE-2026-101911ip-address10.2.0 10.7.1ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing — Node.js
MEDIUM CVE-2026-101910ip-address10.2.0 10.5.1ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address range — Node.js
MEDIUM CVE-2026-118773glob13.0.6 14.0.2glob: glob: Denial of Service (DoS) via incomplete traversal cancellation — Node.js
MEDIUM CVE-2026-118773glob13.0.6 14.0.2glob: glob: Denial of Service (DoS) via incomplete traversal cancellation — Node.js
MEDIUM CVE-2026-118773glob10.5.0 14.0.2glob: glob: Denial of Service (DoS) via incomplete traversal cancellation — Node.js
MEDIUM CVE-2026-102277brace-expansion5.0.7 5.0.12, 3.0.9, 2.1.7, 1.1.21brace-expansion: brace-expansion: Denial of Service via crafted brace patterns — Node.js
LOW CVE-2026-93753deepmerge4.3.1 deepmerge: deepmerge: Prototype Poisoning via mergeObject function — Node.js
LOW CVE-2026-18540undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: HTTP response splitting via retry interceptor — Node.js

Grype

HIGH 10 MEDIUM 22 LOW 2 NVD/CPE filtered 3
SeverityIDPackageInstalledFixedTitle / target
HIGH GHSA-qrxm-fqhp-jwvmundici6.27.0 6.29.1undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-2m5v-pch6-74hxundici6.27.0 6.29.1undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-xjj6-f33q-929cundici6.27.0 6.29.1undici vulnerable to Denial of Service via unhandled error on excessive content-encodings — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-rfgv-xxqx-mfg5undici6.27.0 6.28.1undici vulnerable to Denial of Service via unrequested WebSocket subprotocol — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-6j4f-fj2g-mc7pbrace-expansion5.0.7 5.0.10brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GHSA-mwp4-54f8-5fhrip-address10.2.0 10.3.1ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
HIGH GHSA-qhr7-859c-m2p7brace-expansion5.0.7 5.0.11brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GHSA-r292-9mhp-454mtar7.5.19 7.5.21node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection — /usr/local/lib/node_modules/npm/node_modules/tar/package.json
HIGH GHSA-mh99-v99m-4gvgbrace-expansion5.0.7 5.0.8brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GHSA-rgw5-rvv9-x895brace-expansion5.0.7 5.0.9brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
MEDIUM GHSA-m8rv-5g2x-5cg5undici6.27.0 6.28.0undici vulnerable to CRLF Injection via blob-like body 'type' property — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-v3r7-h72x-cjcmundici6.27.0 6.28.0undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-8xcm-r25x-g524undici6.27.0 6.28.0undici vulnerable to downstream response desynchronization via retry interceptor — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch9.0.9 11.0.1minimatch has potential denial of service via globparts amplification — /npm/node_modules/rimraf/node_modules/minimatch/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch3.1.5 11.0.1minimatch has potential denial of service via globparts amplification — /npm/node_modules/mv/node_modules/minimatch/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch10.2.6 11.0.1minimatch has potential denial of service via globparts amplification — /npm/node_modules/minimatch/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch10.2.5 11.0.1minimatch has potential denial of service via globparts amplification — /usr/local/lib/node_modules/npm/node_modules/minimatch/package.json
MEDIUM GHSA-9fm3-97px-rjf6undici6.27.0 6.29.1undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-4qv8-2p9j-2685undici6.27.0 6.29.1undici vulnerable to Denial of Service via unbounded memory in the EventSource parser — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-rxp7-6hxx-x8q5ip-address10.2.0 10.7.4ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-3g3m-2fjr-6pw4glob13.0.6 14.0.2Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal — /usr/local/lib/node_modules/npm/node_modules/glob/package.json
MEDIUM GHSA-3g3m-2fjr-6pw4glob13.0.6 14.0.2Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal — /npm/node_modules/glob/package.json
MEDIUM GHSA-3g3m-2fjr-6pw4glob10.5.0 14.0.2Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal — /npm/node_modules/rimraf/node_modules/glob/package.json
MEDIUM GHSA-j6r3-76f7-8jcvip-address10.2.0 10.7.1ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-rj75-hqrm-r3gfpostcss-selector-parser7.1.4 7.1.6PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion — /usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json
MEDIUM GHSA-h3mg-xc3c-68pwip-address10.2.0 10.7.1ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-rpw4-54j3-4h4qip-address10.2.0 10.5.1ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-q2hr-2g5m-vwhrbrace-expansion5.0.7 5.0.12brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
MEDIUM GHSA-3wwx-pv8p-q78vundici6.27.0 6.28.1undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-2vr4-cq9g-pvrcip-address10.2.0 10.5.1ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-22jq-vg5j-6vggip-address10.2.0 10.2.1ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-4xrf-jv44-h6hhip-address10.2.0 10.2.2ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
LOW GHSA-gcqx-w48m-w2h4deepmerge4.3.1 deepmerge mergeObject() allows prototype poisoning of returned objects — /npm/node_modules/deepmerge/package.json
LOW GHSA-r53p-7pc4-xj5rundici6.27.0 6.28.1undici vulnerable to downstream response splitting via retry interceptor — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
Filtered NVD/CPE matches (3)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
MEDIUM CVE-2025-60876busybox1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed

ghcr.io/voxpupuli/semantic-release

GitHub Container Registry

Downloads

12,294 downloads

ghcr.io/voxpupuli/semantic-release:latest (2026-09-23)

Trivy

CRITICAL 1 HIGH 43 MEDIUM 61 LOW 50 UNKNOWN 2
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
HIGH CVE-2026-97031stdlibv1.26.4 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-109383undici6.28.1 6.29.1, 7.30.1, 8.12.2undici: undici: Certificate validation bypass via dropped TLS options in Agent — Node.js
HIGH CVE-2026-87018undici6.28.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via TLS renegotiation with mismatched certificate — Node.js
HIGH CVE-2026-19534undici6.28.0 6.28.1, 7.29.1, 8.10.2undici: undici: Denial of Service via unrequested WebSocket subprotocol — Node.js
HIGH CVE-2026-109869undici6.28.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unhandled stream error on excessive content encodings — Node.js
HIGH CVE-2026-109383undici6.28.0 6.29.1, 7.30.1, 8.12.2undici: undici: Certificate validation bypass via dropped TLS options in Agent — Node.js
HIGH CVE-2026-87018undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via TLS renegotiation with mismatched certificate — Node.js
HIGH CVE-2026-19534undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: Denial of Service via unrequested WebSocket subprotocol — Node.js
HIGH CVE-2026-109869undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unhandled stream error on excessive content encodings — Node.js
HIGH CVE-2026-109383undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Certificate validation bypass via dropped TLS options in Agent — Node.js
HIGH CVE-2026-73566tar7.5.19 7.5.21tar: node-tar: Denial of Service via crafted long-path tar archive — Node.js
HIGH CVE-2026-69192ip-address10.2.0 10.3.1ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass — Node.js
HIGH CVE-2026-102278brace-expansion5.0.9 5.0.11, 3.0.8, 2.1.6, 1.1.20brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns — Node.js
HIGH CVE-2026-102276brace-expansion5.0.9 5.0.10, 3.0.7, 2.1.5, 1.1.19brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns — Node.js
HIGH CVE-2026-69152brace-expansion5.0.7 1.1.18, 2.1.4, 3.0.6, 5.0.9brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation — Node.js
HIGH CVE-2026-14257brace-expansion5.0.7 5.0.8, 3.0.3, 2.1.3, 1.1.17brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function — Node.js
HIGH CVE-2026-102278brace-expansion5.0.7 5.0.11, 3.0.8, 2.1.6, 1.1.20brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns — Node.js
HIGH CVE-2026-102276brace-expansion5.0.7 5.0.10, 3.0.7, 2.1.5, 1.1.19brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns — Node.js
HIGH CVE-2026-103111pcre210.48-r0 10.49-r0pcre2: pcre2: Out-of-bounds write via crafted regular expression — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
HIGH CVE-2026-93990libexpat2.8.4-r0 2.8.5-r0expat: Expat: XML Injection via Malformed UTF-16 Input — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
HIGH CVE-2026-77214libexpat2.8.4-r0 2.9.0-r0expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
HIGH CVE-2026-78669stdlibv1.26.4 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-78667stdlibv1.26.4 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56862stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56860stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56859stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56858stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3html/template: golang: Go html/template: Cross-Site Scripting via pathological input — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56853stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-46600stdlibv1.26.4 1.26.6, 1.27.0-rc.3golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-39822stdlibv1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2golang: Go os.Root: Symlink following vulnerability allows directory traversal — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-39821stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-33818stdlibv1.26.4 1.25.13, 1.26.6, 1.27.0-rc.3encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-111943stdlibv1.26.4 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56852golang.org/x/textv0.38.0 0.39.0golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-56851golang.org/x/textv0.38.0 0.41.0golang.org/x/text: golang.org/x/text: Denial of Service via out-of-bounds slice error in Nickname profile — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH CVE-2026-87018undici7.29.1 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via TLS renegotiation with mismatched certificate — Node.js
HIGH CVE-2026-109869undici7.29.1 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unhandled stream error on excessive content encodings — Node.js
HIGH CVE-2026-109829undici7.29.1 7.30.1, 8.12.2undici: undici: Cache poisoning and information disclosure via improper cross-origin redirect caching — Node.js
HIGH CVE-2026-109383undici7.29.1 6.29.1, 7.30.1, 8.12.2undici: undici: Certificate validation bypass via dropped TLS options in Agent — Node.js
HIGH CVE-2026-87018undici6.28.1 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via TLS renegotiation with mismatched certificate — Node.js
HIGH CVE-2026-109869undici6.28.1 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unhandled stream error on excessive content encodings — Node.js
HIGH CVE-2026-92392curl8.22.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
HIGH CVE-2026-92392libcurl8.22.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
MEDIUM CVE-2026-109932undici6.28.1 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unbounded WebSocket PONG buffering — Node.js
MEDIUM CVE-2026-118764minimatch9.0.9 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-118764minimatch5.1.9 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-118764minimatch3.1.5 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-118764minimatch10.2.5 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-118764minimatch10.2.5 11.0.1minimatch: minimatch: Denial of Service via crafted glob pattern expansion — Node.js
MEDIUM CVE-2026-111997ip-address10.5.0 10.7.4ip-address: ip-address: Denial of Service via excessive percent characters in IPv6 address input — Node.js
MEDIUM CVE-2026-101913ip-address10.5.0 10.5.1ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation — Node.js
MEDIUM CVE-2026-101912ip-address10.5.0 10.7.1ip-address: ip-address: Access control bypass via cross-family subnet comparison — Node.js
MEDIUM CVE-2026-101911ip-address10.5.0 10.7.1ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing — Node.js
MEDIUM CVE-2026-101910ip-address10.5.0 10.5.1ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address range — Node.js
MEDIUM CVE-2026-69198ip-address10.2.0 10.2.2ip-address: ip-address: Server-Side Request Forgery (SSRF) and trust-boundary bypass — Node.js
MEDIUM CVE-2026-54272ip-address10.2.0 10.2.1ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification — Node.js
MEDIUM CVE-2026-111997ip-address10.2.0 10.7.4ip-address: ip-address: Denial of Service via excessive percent characters in IPv6 address input — Node.js
MEDIUM CVE-2026-101913ip-address10.2.0 10.5.1ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation — Node.js
MEDIUM CVE-2026-101912ip-address10.2.0 10.7.1ip-address: ip-address: Access control bypass via cross-family subnet comparison — Node.js
MEDIUM CVE-2026-101911ip-address10.2.0 10.7.1ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing — Node.js
MEDIUM CVE-2026-101910ip-address10.2.0 10.5.1ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address range — Node.js
MEDIUM CVE-2026-109924undici6.28.1 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via memory exhaustion in EventSource client — Node.js
MEDIUM CVE-2026-85024undici6.28.0 6.28.1, 7.29.1, 8.10.2undici: undici: Denial of Service via unhandled error in WebSocket permessage-deflate decompression — Node.js
MEDIUM CVE-2026-109932undici6.28.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unbounded WebSocket PONG buffering — Node.js
MEDIUM CVE-2026-109924undici6.28.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via memory exhaustion in EventSource client — Node.js
MEDIUM CVE-2026-109841undici7.29.1 7.30.1, 8.12.2undici: undici: Subresource Integrity bypass via non-lowercase algorithm tokens — Node.js
MEDIUM CVE-2026-109924undici7.29.1 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via memory exhaustion in EventSource client — Node.js
MEDIUM CVE-2026-92388libcurl8.22.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
MEDIUM CVE-2026-109932undici7.29.1 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unbounded WebSocket PONG buffering — Node.js
MEDIUM CVE-2026-85024undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: Denial of Service via unhandled error in WebSocket permessage-deflate decompression — Node.js
MEDIUM CVE-2026-16729undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: Undici: Cookie attribute injection allows bypassing security protections — Node.js
MEDIUM CVE-2026-16728undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length — Node.js
MEDIUM CVE-2026-15157undici6.27.0 6.28.0, 7.29.0, 8.9.0undici: undici: HTTP header injection via unvalidated blob-like body type property — Node.js
MEDIUM CVE-2026-109932undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via unbounded WebSocket PONG buffering — Node.js
MEDIUM CVE-2026-109924undici6.27.0 6.29.1, 7.30.1, 8.12.2undici: undici: Denial of Service via memory exhaustion in EventSource client — Node.js
MEDIUM CVE-2026-87029undici7.29.1 7.30.1, 8.12.2undici: undici: Denial of Service via unhandled exception in decompress interceptor — Node.js
MEDIUM CVE-2026-104844postcss-selector-parser7.1.4 7.1.6, 6.1.5postcss-selector-parser: postcss-selector-parser: Denial of Service via crafted CSS selectors — Node.js
MEDIUM CVE-2026-104844postcss-selector-parser7.1.4 7.1.6, 6.1.5postcss-selector-parser: postcss-selector-parser: Denial of Service via crafted CSS selectors — Node.js
MEDIUM CVE-2026-102633libexpat2.8.4-r0 2.9.0-r0expat: expat: Denial of Service via integer overflow in expat_realloc — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
MEDIUM CVE-2026-56866stdlibv1.26.4 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-42505stdlibv1.26.4 1.25.12, 1.26.5, 1.27.0-rc.2crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 1.70.0-r0nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
MEDIUM CVE-2026-85091zlib1.3.2-r0 1.3.2-r1zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
MEDIUM CVE-2025-25288@octokit/plugin-paginate-rest2.21.3 11.4.1, 9.2.2octokit/plugin-paginate-rest: @octokit/plugin-paginate-rest has a Regular Expression in iterator that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — Node.js
MEDIUM CVE-2025-25288@octokit/plugin-paginate-rest6.1.2 11.4.1, 9.2.2octokit/plugin-paginate-rest: @octokit/plugin-paginate-rest has a Regular Expression in iterator that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — Node.js
MEDIUM CVE-2025-25290@octokit/request5.6.3 9.2.1, 8.4.1octokit/request: @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — Node.js
MEDIUM CVE-2026-78659stdlibv1.26.4 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-78660stdlibv1.26.4 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-78663stdlibv1.26.4 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-94439stdlibv1.26.4 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2025-25290@octokit/request6.2.8 9.2.1, 8.4.1octokit/request: @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — Node.js
MEDIUM CVE-2025-25289@octokit/request-error2.1.0 5.1.1, 6.1.7@octokit/request-error: @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — Node.js
MEDIUM CVE-2025-25289@octokit/request-error3.0.3 5.1.1, 6.1.7@octokit/request-error: @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — Node.js
MEDIUM CVE-2026-92388curl8.22.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
MEDIUM CVE-2026-94440stdlibv1.26.4 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-94448stdlibv1.26.4 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-97030stdlibv1.26.4 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-102277brace-expansion5.0.7 5.0.12, 3.0.9, 2.1.7, 1.1.21brace-expansion: brace-expansion: Denial of Service via crafted brace patterns — Node.js
MEDIUM CVE-2026-102277brace-expansion5.0.9 5.0.12, 3.0.9, 2.1.7, 1.1.21brace-expansion: brace-expansion: Denial of Service via crafted brace patterns — Node.js
MEDIUM CVE-2026-110180fast-uri3.1.8 2.4.8, 3.1.9, 4.2.3fast-uri: fast-uri: Security policy bypass via improper host canonicalization — Node.js
MEDIUM CVE-2026-110306fast-uri3.1.8 2.4.8, 3.1.9, 4.2.3fast-uri: fast-uri: Cross-Site Scripting via improper URI scheme decoding — Node.js
MEDIUM CVE-2026-97032stdlibv1.26.4 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
MEDIUM CVE-2026-118773glob13.0.6 14.0.2glob: glob: Denial of Service (DoS) via incomplete traversal cancellation — Node.js
MEDIUM CVE-2026-118773glob13.0.6 14.0.2glob: glob: Denial of Service (DoS) via incomplete traversal cancellation — Node.js
LOW CVE-2026-87865curl8.22.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87866curl8.22.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92386curl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92387curl8.22.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-56857stdlibv1.26.4 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
LOW CVE-2026-87864curl8.22.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87863curl8.22.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87862curl8.22.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87861curl8.22.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-107928curl8.22.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-107929curl8.22.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86409curl8.22.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86410curl8.22.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86411curl8.22.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86412curl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86413curl8.22.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86414curl8.22.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86415curl8.22.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92386libcurl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92387libcurl8.22.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92389libcurl8.22.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92390libcurl8.22.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92391libcurl8.22.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-94265libcurl8.22.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-94266libcurl8.22.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87866libcurl8.22.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87865libcurl8.22.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87864libcurl8.22.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87863libcurl8.22.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87862libcurl8.22.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-87861libcurl8.22.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86415libcurl8.22.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86414libcurl8.22.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86413libcurl8.22.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92389curl8.22.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92390curl8.22.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-92391curl8.22.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-18540undici6.28.0 6.28.1, 7.29.1, 8.10.2undici: undici: HTTP response splitting via retry interceptor — Node.js
LOW CVE-2026-94265curl8.22.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-94266curl8.22.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-18540undici6.27.0 6.28.1, 7.29.1, 8.10.2undici: undici: HTTP response splitting via retry interceptor — Node.js
LOW CVE-2026-107928libcurl8.22.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-107929libcurl8.22.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86409libcurl8.22.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86410libcurl8.22.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86411libcurl8.22.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-86412libcurl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
LOW CVE-2026-110725fast-uri3.1.8 2.4.8, 3.1.9, 4.2.3fast-uri: fast-uri: Cross-site scripting via unescaped colon in relative URI paths — Node.js
LOW CVE-2026-110095fast-uri3.1.8 2.4.8, 3.1.9, 4.2.3fast-uri: fast-uri: Path traversal via improper relative URI normalization — Node.js
LOW CVE-2026-93753deepmerge4.3.1 deepmerge: deepmerge: Prototype Poisoning via mergeObject function — Node.js
UNKNOWN CVE-2026-107891musl1.2.6-r2 1.2.6-r3Title Not Available — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)
UNKNOWN CVE-2026-107891musl-utils1.2.6-r2 1.2.6-r3Title Not Available — ghcr.io/voxpupuli/semantic-release:latest (alpine 3.24.2)

Grype

CRITICAL 17 HIGH 74 MEDIUM 49 LOW 5 UNKNOWN 2 NVD/CPE filtered 37
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-86411libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL GO-2026-6612stdlibgo1.26.8 1.26.9The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/bin/git-lfs
CRITICAL GO-2026-6612golang.org/x/netv0.57.0 0.60.0The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control. — /usr/bin/git-lfs
CRITICAL CVE-2026-87861libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-111497brotli-libs1.2.0-r1 1.2.1-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-2m5v-pch6-74hxundici6.28.1 6.29.1undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent — /npm/node_modules/@actions/http-client/node_modules/undici/package.json
HIGH GHSA-2m5v-pch6-74hxundici7.29.1 7.30.1undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent — /npm/node_modules/undici/package.json
HIGH CVE-2026-93990libexpat2.8.4-r0 2.8.5-r0/lib/apk/db/installed
HIGH GHSA-6j4f-fj2g-mc7pbrace-expansion5.0.9 5.0.10brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion — /npm/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GHSA-6j4f-fj2g-mc7pbrace-expansion5.0.7 5.0.10brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GHSA-mwp4-54f8-5fhrip-address10.2.0 10.3.1ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
HIGH GO-2026-6605stdlibgo1.26.8 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/bin/git-lfs
HIGH GO-2026-5970golang.org/x/textv0.38.0 0.39.0A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. — /npm/node_modules/@typescript/typescript-linux-x64/lib/tsc
HIGH GO-2026-6617stdlibgo1.26.8 1.26.9HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/bin/git-lfs
HIGH GO-2026-6617golang.org/x/netv0.57.0 0.60.0HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/bin/git-lfs
HIGH GHSA-qhr7-859c-m2p7brace-expansion5.0.9 5.0.11brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion — /npm/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GHSA-qhr7-859c-m2p7brace-expansion5.0.7 5.0.11brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH CVE-2026-85091zlib1.3.2-r0 1.3.2-r1/lib/apk/db/installed
HIGH GO-2026-6608stdlibgo1.26.8 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/bin/git-lfs
HIGH GO-2026-6607stdlibgo1.26.8 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/bin/git-lfs
HIGH CVE-2026-92392curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GHSA-r292-9mhp-454mtar7.5.19 7.5.21node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection — /usr/local/lib/node_modules/npm/node_modules/tar/package.json
HIGH GHSA-4w7w-5xrc-9h26undici7.29.1 7.30.1undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects — /npm/node_modules/undici/package.json
HIGH CVE-2026-103111pcre210.48-r0 10.49-r0/lib/apk/db/installed
HIGH GHSA-qrxm-fqhp-jwvmundici6.27.0 6.29.1undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-qrxm-fqhp-jwvmundici6.28.0 6.29.1undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation — /npm/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-qrxm-fqhp-jwvmundici6.28.1 6.29.1undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation — /npm/node_modules/@actions/http-client/node_modules/undici/package.json
HIGH GHSA-qrxm-fqhp-jwvmundici7.29.1 7.30.1undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation — /npm/node_modules/undici/package.json
HIGH GHSA-2m5v-pch6-74hxundici6.27.0 6.29.1undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH CVE-2026-77214libexpat2.8.4-r0 2.9.0-r0/lib/apk/db/installed
HIGH GHSA-xjj6-f33q-929cundici7.29.1 7.30.1undici vulnerable to Denial of Service via unhandled error on excessive content-encodings — /npm/node_modules/undici/package.json
HIGH GHSA-xjj6-f33q-929cundici6.28.1 6.29.1undici vulnerable to Denial of Service via unhandled error on excessive content-encodings — /npm/node_modules/@actions/http-client/node_modules/undici/package.json
HIGH GHSA-xjj6-f33q-929cundici6.28.0 6.29.1undici vulnerable to Denial of Service via unhandled error on excessive content-encodings — /npm/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-xjj6-f33q-929cundici6.27.0 6.29.1undici vulnerable to Denial of Service via unhandled error on excessive content-encodings — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-2m5v-pch6-74hxundici6.28.0 6.29.1undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent — /npm/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-rfgv-xxqx-mfg5undici6.28.0 6.28.1undici vulnerable to Denial of Service via unrequested WebSocket subprotocol — /npm/node_modules/npm/node_modules/undici/package.json
HIGH GHSA-rfgv-xxqx-mfg5undici6.27.0 6.28.1undici vulnerable to Denial of Service via unrequested WebSocket subprotocol — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
HIGH GO-2026-6613stdlibgo1.26.8 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/bin/git-lfs
HIGH CVE-2026-86415libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86415curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6610stdlibgo1.26.8 1.26.9Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/bin/git-lfs
HIGH GO-2026-6610golang.org/x/netv0.57.0 0.60.0Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/bin/git-lfs
HIGH CVE-2026-107928curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6611stdlibgo1.26.8 1.26.9A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/bin/git-lfs
HIGH GO-2026-6611golang.org/x/netv0.57.0 0.60.0A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/bin/git-lfs
HIGH CVE-2026-92392libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6603stdlibgo1.26.8 1.26.9When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/bin/git-lfs
HIGH GO-2026-6603golang.org/x/netv0.57.0 0.60.0When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/bin/git-lfs
HIGH GHSA-mh99-v99m-4gvgbrace-expansion5.0.7 5.0.8brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH GHSA-rgw5-rvv9-x895brace-expansion5.0.7 5.0.9brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
HIGH CVE-2026-107929libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
MEDIUM GHSA-g3hv-75wg-m249minimatch10.2.5 11.0.1minimatch has potential denial of service via globparts amplification — /usr/local/lib/node_modules/npm/node_modules/minimatch/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch10.2.5 11.0.1minimatch has potential denial of service via globparts amplification — /npm/node_modules/npm/node_modules/minimatch/package.json
MEDIUM GHSA-9fm3-97px-rjf6undici7.29.1 7.30.1undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering — /npm/node_modules/undici/package.json
MEDIUM GHSA-4qv8-2p9j-2685undici7.29.1 7.30.1undici vulnerable to Denial of Service via unbounded memory in the EventSource parser — /npm/node_modules/undici/package.json
MEDIUM GHSA-9fm3-97px-rjf6undici6.28.1 6.29.1undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering — /npm/node_modules/@actions/http-client/node_modules/undici/package.json
MEDIUM GHSA-4qv8-2p9j-2685undici6.28.1 6.29.1undici vulnerable to Denial of Service via unbounded memory in the EventSource parser — /npm/node_modules/@actions/http-client/node_modules/undici/package.json
MEDIUM GHSA-9fm3-97px-rjf6undici6.28.0 6.29.1undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering — /npm/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-4qv8-2p9j-2685undici6.28.0 6.29.1undici vulnerable to Denial of Service via unbounded memory in the EventSource parser — /npm/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-9fm3-97px-rjf6undici6.27.0 6.29.1undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-rmvr-2pp2-xj38@octokit/request5.6.3 8.4.1@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — /npm/node_modules/@octokit/rest/node_modules/@octokit/request/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch3.1.5 11.0.1minimatch has potential denial of service via globparts amplification — /npm/node_modules/minimatch/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch5.1.9 11.0.1minimatch has potential denial of service via globparts amplification — /npm/node_modules/replace-in-file/node_modules/minimatch/package.json
MEDIUM GHSA-g3hv-75wg-m249minimatch9.0.9 11.0.1minimatch has potential denial of service via globparts amplification — /npm/node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch/package.json
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 1.70.0-r0/lib/apk/db/installed
MEDIUM GHSA-55wc-3pg8-jfw6undici7.29.1 7.30.1undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor — /npm/node_modules/undici/package.json
MEDIUM GHSA-8xcm-r25x-g524undici6.27.0 6.28.0undici vulnerable to downstream response desynchronization via retry interceptor — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-m8rv-5g2x-5cg5undici6.27.0 6.28.0undici vulnerable to CRLF Injection via blob-like body 'type' property — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-v3r7-h72x-cjcmundici6.27.0 6.28.0undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-wjr9-j795-jxcrfast-uri3.1.8 3.1.9fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization — /npm/node_modules/fast-uri/package.json
MEDIUM GHSA-w74x-v6f9-j3xgfast-uri3.1.8 3.1.9fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding — /npm/node_modules/fast-uri/package.json
MEDIUM GHSA-f72v-6w45-q472undici7.29.1 7.30.1undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens — /npm/node_modules/undici/package.json
MEDIUM GHSA-rmvr-2pp2-xj38@octokit/request6.2.8 8.4.1@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — /npm/node_modules/semantic-release-github-pullrequest/node_modules/@octokit/request/package.json
MEDIUM GHSA-h5c3-5r3r-rr8q@octokit/plugin-paginate-rest2.21.3 9.2.2@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — /npm/node_modules/@octokit/rest/node_modules/@octokit/plugin-paginate-rest/package.json
MEDIUM GHSA-h5c3-5r3r-rr8q@octokit/plugin-paginate-rest6.1.2 9.2.2@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — /npm/node_modules/semantic-release-github-pullrequest/node_modules/@octokit/plugin-paginate-rest/package.json
MEDIUM GHSA-xx4v-prfh-6cgc@octokit/request-error2.1.0 5.1.1@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — /npm/node_modules/@octokit/rest/node_modules/@octokit/request-error/package.json
MEDIUM GHSA-xx4v-prfh-6cgc@octokit/request-error3.0.3 5.1.1@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking — /npm/node_modules/semantic-release-github-pullrequest/node_modules/@octokit/request-error/package.json
MEDIUM GHSA-4xrf-jv44-h6hhip-address10.2.0 10.2.2ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-22jq-vg5j-6vggip-address10.2.0 10.2.1ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GO-2026-6809stdlibgo1.26.8 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/bin/git-lfs
MEDIUM GHSA-2vr4-cq9g-pvrcip-address10.2.0 10.5.1ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-2vr4-cq9g-pvrcip-address10.5.0 10.5.1ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass — /npm/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-3wwx-pv8p-q78vundici6.27.0 6.28.1undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-3wwx-pv8p-q78vundici6.28.0 6.28.1undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression — /npm/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-q2hr-2g5m-vwhrbrace-expansion5.0.7 5.0.12brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service — /usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json
MEDIUM GHSA-q2hr-2g5m-vwhrbrace-expansion5.0.9 5.0.12brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service — /npm/node_modules/npm/node_modules/brace-expansion/package.json
MEDIUM GHSA-4qv8-2p9j-2685undici6.27.0 6.29.1undici vulnerable to Denial of Service via unbounded memory in the EventSource parser — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
MEDIUM GHSA-rxp7-6hxx-x8q5ip-address10.5.0 10.7.4ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process — /npm/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-rxp7-6hxx-x8q5ip-address10.2.0 10.7.4ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-3g3m-2fjr-6pw4glob13.0.6 14.0.2Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal — /npm/node_modules/npm/node_modules/glob/package.json
MEDIUM GHSA-3g3m-2fjr-6pw4glob13.0.6 14.0.2Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal — /usr/local/lib/node_modules/npm/node_modules/glob/package.json
MEDIUM CVE-2026-102633libexpat2.8.4-r0 2.9.0-r0/lib/apk/db/installed
MEDIUM GHSA-j6r3-76f7-8jcvip-address10.5.0 10.7.1ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range — /npm/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-j6r3-76f7-8jcvip-address10.2.0 10.7.1ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-rj75-hqrm-r3gfpostcss-selector-parser7.1.4 7.1.6PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion — /npm/node_modules/npm/node_modules/postcss-selector-parser/package.json
MEDIUM GHSA-rj75-hqrm-r3gfpostcss-selector-parser7.1.4 7.1.6PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion — /usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json
MEDIUM GHSA-h3mg-xc3c-68pwip-address10.5.0 10.7.1ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process — /npm/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-h3mg-xc3c-68pwip-address10.2.0 10.7.1ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-rpw4-54j3-4h4qip-address10.5.0 10.5.1ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts — /npm/node_modules/npm/node_modules/ip-address/package.json
MEDIUM GHSA-rpw4-54j3-4h4qip-address10.2.0 10.5.1ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts — /usr/local/lib/node_modules/npm/node_modules/ip-address/package.json
LOW GHSA-gcqx-w48m-w2h4deepmerge4.3.1 deepmerge mergeObject() allows prototype poisoning of returned objects — /npm/node_modules/deepmerge/package.json
LOW GHSA-r53p-7pc4-xj5rundici6.27.0 6.28.1undici vulnerable to downstream response splitting via retry interceptor — /usr/local/lib/node_modules/npm/node_modules/undici/package.json
LOW GHSA-r53p-7pc4-xj5rundici6.28.0 6.28.1undici vulnerable to downstream response splitting via retry interceptor — /npm/node_modules/npm/node_modules/undici/package.json
LOW GHSA-333x-w4r6-6crpfast-uri3.1.8 3.1.9fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references — /npm/node_modules/fast-uri/package.json
LOW GHSA-xhq7-xmqj-769hfast-uri3.1.8 3.1.9fast-uri vulnerable to improper path equivalence in relative reference normalization — /npm/node_modules/fast-uri/package.json
UNKNOWN CVE-2026-107891musl1.2.6-r2 1.2.6-r3/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl-utils1.2.6-r2 1.2.6-r3/lib/apk/db/installed
Filtered NVD/CPE matches (37)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-111497node24.21.0 11.0.0, 22.23.4, 24.22.1, 26.12.1A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. — /usr/local/bin/node
HIGH CVE-2026-106069node24.21.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as `0127.0.0.1`. `tls.checkServerIdentity()` normalizes the host following the WHATWG URL rules, which read a leading-zero octet as octal (`0127.0.0.1` becomes `87.0.0.1`), while the connection is made through the operating system resolver, which on some platforms such as macOS reads it as decimal (`127.0.0.1`). A server at the connected address can then be authenticated with a certificate issued for another IP address. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
HIGH CVE-2026-105483node24.21.0 24.22.1, 26.12.1A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (`１２７.0.0.1`). `tls.checkServerIdentity()` did not recognize such hosts as IP addresses, even though they normalize and resolve to a regular IPv4 address, and matched them against the certificate DNS names and Common Name instead. A certificate containing `DNS:127.0.0.1` or `DNS:*.0.0.1` could therefore be accepted for an IP endpoint it was not issued for. This is a regression introduced after the fix for CVE-2026-48618. This vulnerability affects Node.js **26.x** and **24.x**. — /usr/local/bin/node
HIGH CVE-2026-72897libssl33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-72897libcrypto33.5.8-r0 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created from. Applications which never call SSL_set_SSL_CTX() are not affected. Impact summary: A remote peer may be able to cause a small out-of-bounds read, and in some circumstances a fixed-value out-of-bounds write, on the server heap. This may lead to a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: A TLS connection records how many certificate slots it has when it is created, taken from the SSL_CTX that created it: the built-in certificate types plus one slot for each provider TLS-SIGALG entry that context was aware of. That count sizes an internal array of per-slot certificate validity flags. An application may replace a connection's SSL_CTX part way through the handshake by calling SSL_set_SSL_CTX(), most commonly from a servername callback in order to serve a different virtual host. Doing so did not refresh the recorded count. A provider signature algorithm's slot index is its position in the list of whichever context resolves it, so if the replacement context is aware of more of them than the original, an algorithm offered by the peer can resolve to an index beyond the end of the array. Processing the peer's signature algorithms then reads one four byte word past the end for each such algorithm and, where the word read is zero, writes a fixed value over it. A peer offering many of them can corrupt heap metadata and abort the process. Only provider signature algorithms which occupy one of the excess slots, and which the server also has configured, have this effect. Codepoints the replacement context does not recognise are discarded without being resolved to a slot, and provider signature algorithms are usable only from TLS 1.3. The two contexts must therefore be aware of different numbers of provider signature algorithms, which requires separate library contexts, a provider loaded between the two being created, or providers which differ in what they advertise - in 4.0, for example, the default provider advertises SM2 where the FIPS provider does not. A deployment meeting the condition is also unable to negotiate the affected algorithms with legitimate clients, since the same stale count hides the corresponding certificates, so the misconfiguration is likely to be noticed. For that reason, and because the configuration is not the default, this issue has been assessed as Low severity. FIPS impact: no No FIPS modules are affected by this issue as the affected code is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-105482node24.21.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup() and the net/tls host options. Because the name is passed to c-ares as a C string, resolving attacker.example\0.trusted.example queries attacker.example and returns its records without any error. Applications that validate a hostname, for example against a domain allowlist, and then resolve it with dns.resolve*() can act on records for a different name than the one they validated. This vulnerability affects Node.js 26.x, 24.x, and 22.x. — /usr/local/bin/node
HIGH CVE-2026-84784libssl33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84784libcrypto33.5.8-r0 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID frame is dispatched via the Control Frame Queue (CFQ). If the remote peer also withholds ACKs, then it can force the local stack to allocate ~400MB (depending on ACK delay). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism by which a remote peer can notify the local QUIC stack to change the destination connection ID (a.k.a. CID) the local stack uses to identify the connection at the remote peer. Each CID is associated with a sequence number. The sequence number is transmitted in NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID which is being either associated with a connection or retired. The remote peer sends a NEW_CONNECTION_ID frame to let the local stack know a new CID is being associated with an existing connection. The NEW_CONNECTION_ID frame carries the new CID, its sequence number, and the retire-prior-to number. The retire-prior-to identifies existing CIDs that are to be retired. The local QUIC stack must send a RETIRE_CONNECTION_ID for every destination CID whose sequence number is less than retire-prior-to. The CID becomes retired after the local stack receives an ACK for its RETIRE_CONNECTION_ID frame. Although the OpenSSL QUIC stack supports at most one destination CID for every connection, it can be tricked into processing more than one RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC stack currently retires the destination CID as soon as it receives the NEW_CONNECTION_ID, while in fact the destination CID must be retired after an ACK for the RETIRE_CONNECTION_ID frame is received. Correcting the flawed logic also fixes the backlog growth. [1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libssl33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-54873libcrypto33.5.8-r0 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for which the memory remains allocated is entirely under the control of the potentially malicious remote peer. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: To save copy operation from the packet buffer to the stream reassemble buffer the QUIC stack leaves the stream data on the packet buffer waiting to be copied to a buffer provided by the local receiving application. The QUIC stack releases a reference to the packet buffer only after the data are copied to the application buffer. This design is more efficient for legitimate data transfers but enables an attacker to allocate a lot more memory than actually required by the data kept in the receiving stream buffer. To mitigate the vulnerability, the QUIC stack now calculates and monitors memory overhead for every stream. The memory overhead for a single stream frame is calculated as a difference between the size of the whole packet that carries the stream frame and the size of the stream frame itself. The memory overhead for a single stream frame is added to the total (cumulative) memory overhead QUIC stack keeps for each stream. Once the cumulative memory overhead exceeds 64kB, the QUIC stack moves the stream frame data from the packet buffer to the stream buffer, starting with the next packet received. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libssl33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
HIGH CVE-2026-84782libcrypto33.5.8-r0 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-106074node24.21.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`. If any of these functions, or an API that relies on them such as `URL.createObjectURL()`, is called while the snapshot is built, every process started from that snapshot returns the same values until the cache is refilled: up to 127 UUIDs and about 1,000 `randomInt()` values. Identifiers expected to be unique can collide across processes, and values issued by one process can be predicted by observing another. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
MEDIUM CVE-2026-35189libcrypto33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-35189libssl33.5.8-r0 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Service in clients or in servers that solicit client certificates. CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: A certificate or a set of certificates that fits under the limit for size of certificates accepted from the peer (~100 KiB) can result in allocation of several hundred MiB of resident memory on the receiving side during a normal TLS handshake. This may be enough to crash the client or server, if multiple concurrent connections lead to similarly large memory allocations. The fix postpones processing of the CRL distribution points extensions in certificates to the time when the processed value is required for CRL processing. This avoids keeping large memory allocations for a long time when such certificates are received. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libssl33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75805libcrypto33.5.8-r0 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial of Service for the affected client application. CWE: CWE-476: NULL-pointer dereference Description: A CMP client revoking a certificate has to tell the server which certificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the certificate itself or its issuer name and serial number. This is 'openssl cmp -cmd rr -csr <file>' on the command line, or OSSL_CMP_exec_RR_ses() with the certificate supplied via OSSL_CMP_CTX_set1_p10CSR() through the API. A CSR does not contain the issuer name and serial number of the certificate, so the client does not send them. A server may optionally name the certificate it revoked in its response, and the client then compares that name against what it sent. Having sent neither an issuer name nor a serial number, it has nothing to compare against, and a server returning a specially crafted name causes the client to read from a NULL pointer and crash. The revocation response is checked for valid message protection before the affected code is reached, so an attacker must be a malicious or compromised CMP server, or a man-in-the-middle in possession of the secret used for message protection. Clients that identify the certificate to be revoked by a certificate or by issuer and serial number rather than by a PKCS#10 CSR are not affected. FIPS impact: no No FIPS modules are affected by this issue, as the CMP protocol implementation is outside the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r31 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2026-105481node24.21.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931. The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when the event loop polls for I/O. If an unsolicited response has already reached the socket but has not been read yet when the socket is handed to a new request, for example because the event loop was busy with synchronous work, the guard is removed without seeing it and the data is parsed as the response to the new request. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
MEDIUM CVE-2026-42772libssl33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-42772libcrypto33.5.8-r0 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer that completes the handshake can create a connection-scoped CPU pressure and potentially a Denial of Service using compliant STREAM frames inside the advertised receive window, with low attacker bandwidth. CWE: CWE-407: Inefficient Algorithmic Complexity Description: OpenSSL manages received QUIC stream fragments using a doubly-linked list. While it optimizes for append operations (at the end of the list), it falls back to a head-to-tail linear search for any fragment that does not immediately follow the current `tail`. By manipulating the sequence of offsets, an attacker can force the server to perform O(n^2) operations, consuming excessive CPU time for the QUIC process. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libssl33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75804libcrypto33.5.8-r0 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the QUIC stack receive ~100MB of memory instead of 768 KiB (default flow control window size). CWE: CWE-770: Allocation of Resources Without Limits or Throttling Description: The local QUIC stack advertises two flow control limits to its remote peer: stream flow control limit and connection flow control limit. The remote peer must follow both limits when transmitting stream data. Whenever the local QUIC stack receives a stream frame, it validates that the size of the received stream frame stays within flow control limits. If either limit is exceeded (stream level or connection level), then the QUIC stack must close the connection with a flow control error. The vulnerable OpenSSL QUIC stack enforces the stream-level but not the connection-level limit. To exploit the issue, three conditions must be met: - the remote peer opens several streams - each stream must stay within the stream-level flow control limit - there must be no zero-offset byte sent on any of the streams (to prevent the vulnerable QUIC stack from consuming data). By meeting the conditions above, the remote peer may make the local stack allocate 2 x MAX_STREAMS x (stream flow control limit) bytes of memory. MAX_STREAMS defaults to 100, and the limit applies to both bidirectional and unidirectional streams, making it 200 in total. The default flow control window for a stream is 512kB. The remote peer may force the vulnerable QUIC stack to allocate 100MB of heap per connection. FIPS impact: no The FIPS module is not affected as the QUIC implementation is outside of the OpenSSL FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-106072node24.21.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as `0177.0.0.1`, `0x7f.0.0.1`, `2130706433` or `127.1`. `tls.checkServerIdentity()` did not classify these hosts as IP addresses, but normalized them to their canonical form and matched the result against the certificate DNS names. A certificate containing `DNS:127.0.0.1` and no `IP Address:127.0.0.1` SAN was therefore accepted, while the same certificate is correctly rejected for `127.0.0.1`. Exploitation requires a certificate with a numeric DNS SAN issued by a CA trusted by the client, and a platform resolver that accepts these spellings, such as glibc. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
MEDIUM CVE-2026-75806libssl33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
MEDIUM CVE-2026-75806libcrypto33.5.8-r0 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an existing DTLS 1.2 association can tear that association down without knowing any key material. This is a Denial of Service limited to the targeted association. There is no memory safety or confidentiality impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and an authentication tag. When decrypting such a record the record layer passed the record length to the cipher implementation before checking that the record was long enough to contain the explicit IV and the tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and the record layer treated this as an internal failure and raised a fatal internal_error alert instead of treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The fix validates the record length against the explicit IV and tag length before any AEAD processing, so that TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is outside the FIPS module boundary. — /lib/apk/db/installed
LOW CVE-2026-77696libssl33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-106073node24.21.0 22.23.4, 24.22.1, 26.12.1A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered `fs.realpathSync.native()`. As a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync()` to check file existence, resolve symlink targets, and enumerate filesystem paths outside of permitted directories. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. — /usr/local/bin/node
LOW CVE-2026-77696libcrypto33.5.8-r0 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: SM2 signature generation computes the signature value using variable-time BIGNUM operations on the secret nonce and the private key, so the time taken to produce an SM2 signature depends on these secret values, forming a timing side-channel. Applications performing SM2 signature generation are affected on all platforms. FIPS Impact: no SM2 is not a FIPS algorithm. — /lib/apk/db/installed
LOW CVE-2026-54872libssl33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54872libcrypto33.5.8-r0 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidden Number Problem attack, lead to recovery of the private key. CWE: CWE-208: Observable Timing Discrepancy Description: The generic elliptic-curve scalar multiplication used for curves that do not have a dedicated constant-time implementation pads the secret scalar with non-constant-time BIGNUM operations, so the time taken depends on the value of the secret scalar derived from the ECDSA and SM2 nonce. The leak is very small; observing it requires a large number of measurements. The effect is largest for curves whose group order lies on a machine-word boundary, such as brainpoolP384r1. Applications using ECDSA signing over the Brainpool and other generic prime curves, and SM2 signing on platforms that use the generic implementation, are vulnerable to this issue. The NIST curves P-256, P-384 and P-521 use dedicated constant-time implementations and are not affected. FIPS Impact: no The FIPS modules are not affected: the approved NIST curves used in the FIPS provider have dedicated constant-time implementations and do not use the affected code path. — /lib/apk/db/installed
LOW CVE-2026-54875libssl33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-54875libcrypto33.5.8-r0 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption on an affected platform can learn information about the secret scalar. CWE: CWE-208: Observable Timing Discrepancy Description: On ARM64 and RISC-V processors, the SM2 curve uses an optimized scalar multiplication implementation whose conditional branches and table look ups are chosen according to the bits of the secret scalar. The execution time and the cache-access pattern therefore depend on the long-term private key (during SM2 decryption) or the per-signature nonce (during SM2 signature generation), forming a timing and cache side-channel. FIPS Impact: no SM2 is not a FIPS algorithm and the optimized SM2 implementation is not part of the FIPS module. OpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and RISC-V. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue. OpenSSL 4.0 users should upgrade to OpenSSL 4.0.3. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.5. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.9. OpenSSL 3.4 users should upgrade to OpenSSL 3.4.8. This issue was reported on 2 May 2026 by Abhinav Agarwal. It was independently reported on 6 June 2026 by Feng Xue. The fix was developed by Igor Ustinov. -- cut (non-publishing metadata for internal use) -- Reported by: Abhinav Agarwal, Feng Xue Fixed by: Igor Ustinov — /lib/apk/db/installed
LOW CVE-2026-35191libssl33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed
LOW CVE-2026-35191libcrypto33.5.8-r0 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data received. Impact summary: A remote attacker able to spoof packets to a server using the OpenSSL QUIC implementation might use the server for an amplification of a DDoS attack. CWE: CWE-440: Expected Behavior Violation Description: OpenSSL's QUIC stack, when operating as a server, enforces client address validation (RFC 9000, Section 8), to confirm the peer address is not used for a traffic amplification attack. If this feature is disabled on the server, the QUIC stack limits the amount of server data that can be sent to 3 times the amount of data received from the peer address, until such time as the TLS handshake is completed. The OpenSSL QUIC server, when operating in non-validation mode, adds the length of the whole datagram received to the unvalidated credit limit when processing each QUIC packet in the datagram. A remote peer may, after establishing a connection with an initial client hello frame, send a subsequent datagram containing multiple QUIC packets, leading the server to account the entire datagram length for each packet in the datagram, resulting in the server believing that the peer has sent more data than it actually has, thereby violating the 3x amplification limit mandated by the RFC. FIPS impact: no As the QUIC stack lives outside the FIPS module boundary, no FIPS modules are affected by this CVE. — /lib/apk/db/installed

ghcr.io/voxpupuli/voxbox

GitHub Container Registry

Downloads

165,533 downloads

ghcr.io/voxpupuli/voxbox:latest (2026-10-08)

Trivy

CRITICAL 1 HIGH 9 MEDIUM 31 LOW 50 UNKNOWN 5
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-111497brotli-libs1.2.0-r0 1.2.1-r0brotli: Out-of-Bounds Write in Google Brotli Decoder — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
HIGH CVE-2026-92392libcurl8.22.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
HIGH CVE-2026-77214libexpat2.8.5-r0 2.9.0-r0expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
HIGH CVE-2026-80212resolv0.2.3 ~> 0.3.2, >= 0.7.2resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses — Ruby
HIGH CVE-2026-78669golang.org/x/netv0.57.0 0.60.0net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/local/bin/jig
HIGH CVE-2026-111943stdlibv1.27.1 1.26.10, 1.27.3crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates — usr/local/bin/jig
HIGH CVE-2026-78667stdlibv1.27.1 1.26.9, 1.27.2net/http: golang: golang: Denial of Service via crafted HTTP Range headers — usr/local/bin/jig
HIGH CVE-2026-78669stdlibv1.27.1 1.26.9, 1.27.2net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames — usr/local/bin/jig
HIGH CVE-2026-97031stdlibv1.27.1 1.26.9, 1.27.2crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references — usr/local/bin/jig
HIGH CVE-2026-92392curl8.22.0-r0 8.23.0-r0curl: curl: HTTP/2 upload Use-After-Free — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-92388libcurl8.22.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM GHSA-qq38-m9mg-xjj5addressable2.9.0 >= 2.9.1Denial of service in Addressable URI path normalization — Ruby
MEDIUM GHSA-j82w-28jv-3pmjaddressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with certain exploded expressions — Ruby
MEDIUM GHSA-9f42-57jx-vpp3addressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with multiple variables — Ruby
MEDIUM GHSA-9crm-g4mf-wc5jaddressable2.9.0 >= 2.9.1Addressable display_uri can show misleading hosts with invalid Punycode A-labels — Ruby
MEDIUM GHSA-8gmh-2hhj-2hv9addressable2.9.0 >= 2.9.1Addressable URI normalization resolves some dotted path segments to the wrong path — Ruby
MEDIUM GHSA-4w5q-wg7v-w6gpaddressable2.9.0 >= 2.9.1Regular Expression Denial of Service in Addressable templates with several exploded variables — Ruby
MEDIUM CVE-2026-102633libexpat2.8.5-r0 2.9.0-r0expat: expat: Denial of Service via integer overflow in expat_realloc — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-115557python3-pycache-pyc03.12.15-r0 3.12.16-r0Python has added a denylist for known compromised certificates to the ... — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-114583python3-pycache-pyc03.12.15-r0 3.12.16-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ... — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-114583pyc3.12.15-r0 3.12.16-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ... — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-115557python3-pyc3.12.15-r0 3.12.16-r0Python has added a denylist for known compromised certificates to the ... — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-114583python3-pyc3.12.15-r0 3.12.16-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ... — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-115557pyc3.12.15-r0 3.12.16-r0Python has added a denylist for known compromised certificates to the ... — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-115557python33.12.15-r0 3.12.16-r0Python has added a denylist for known compromised certificates to the ... — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-114583python33.12.15-r0 3.12.16-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ... — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
MEDIUM CVE-2026-78663stdlibv1.27.1 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/local/bin/jig
MEDIUM CVE-2026-78660stdlibv1.27.1 1.26.9, 1.27.2net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/local/bin/jig
MEDIUM CVE-2026-78659stdlibv1.27.1 1.26.9, 1.27.2net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/local/bin/jig
MEDIUM CVE-2026-56866stdlibv1.27.1 1.26.9, 1.27.2net/http: golang: golang: Cross-user response poisoning via desynchronized HTTP CONNECT connections — usr/local/bin/jig
MEDIUM CVE-2026-94439stdlibv1.27.1 1.26.9, 1.27.2net/http: golang: net/http: HTTP request smuggling via improper handling of HTTP/1 CONNECT responses — usr/local/bin/jig
MEDIUM CVE-2026-94440stdlibv1.27.1 1.26.9, 1.27.2net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing — usr/local/bin/jig
MEDIUM CVE-2026-94448stdlibv1.27.1 1.26.9, 1.27.2html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals — usr/local/bin/jig
MEDIUM CVE-2026-97030stdlibv1.27.1 1.26.9, 1.27.2html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword — usr/local/bin/jig
MEDIUM CVE-2026-97032golang.org/x/netv0.57.0 0.60.0net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/local/bin/jig
MEDIUM CVE-2026-78663golang.org/x/netv0.57.0 0.60.0net/http: net/http/internal/http2: golang: golang.org/x/net/http2: golang: flow control limit bypass via double refund in HTTP/2 server — usr/local/bin/jig
MEDIUM CVE-2026-78660golang.org/x/netv0.57.0 0.60.0net/http: golang: golang.org/x/net/http2: net/http: HTTP response smuggling via malformed HTTP/2 framing headers — usr/local/bin/jig
MEDIUM CVE-2026-78659golang.org/x/netv0.57.0 0.60.0net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion — usr/local/bin/jig
MEDIUM CVE-2026-97032stdlibv1.27.1 1.26.9, 1.27.2net/http: net/http/internal/http2: golang: golang.org/x/net/http2: net/http: Denial of Service via concurrent HPACK encoder modification — usr/local/bin/jig
MEDIUM CVE-2026-80213resolv0.2.3 ~> 0.3.2, >= 0.7.2resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames — Ruby
MEDIUM CVE-2026-92388curl8.22.0-r0 8.23.0-r0curl: curl: FTP wildcard write callback mixup — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-94266libcurl8.22.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2024-3220pyc3.12.15-r0 3.12.16-r0python: Default mimetype known files writeable on Windows — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2024-3220python33.12.15-r0 3.12.16-r0python: Default mimetype known files writeable on Windows — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2024-3220python3-pyc3.12.15-r0 3.12.16-r0python: Default mimetype known files writeable on Windows — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2024-3220python3-pycache-pyc03.12.15-r0 3.12.16-r0python: Default mimetype known files writeable on Windows — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW GHSA-539f-xcgw-2gjgaddressable2.9.0 >= 2.9.1Addressable display_uri can show misleading hosts containing bidi and invisible characters — Ruby
LOW CVE-2026-56857stdlibv1.27.1 1.26.9, 1.27.2os: golang: golang: Directory traversal via Windows junction handling — usr/local/bin/jig
LOW CVE-2026-94265libcurl8.22.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-94266curl8.22.0-r0 8.23.0-r0curl: curl: password leak in CURLINFO_EFFECTIVE_URL — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-94265curl8.22.0-r0 8.23.0-r0curl: curl: Authorization: Negotiate sent to foreign origin — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92391curl8.22.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92390curl8.22.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92389curl8.22.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92387curl8.22.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92386curl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87866curl8.22.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87865curl8.22.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87864curl8.22.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87863curl8.22.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87862curl8.22.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87861curl8.22.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86415curl8.22.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86414curl8.22.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86413curl8.22.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86412curl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86411curl8.22.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86410curl8.22.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86409curl8.22.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-107929curl8.22.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-107928curl8.22.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92391libcurl8.22.0-r0 8.23.0-r0curl: curl: curl_mime_free stack overflow by recursion — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92390libcurl8.22.0-r0 8.23.0-r0curl: curl: -J no-clobber guarantee bypassed with 103 early hints — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92389libcurl8.22.0-r0 8.23.0-r0curl: curl: TFTP direction confusion — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92387libcurl8.22.0-r0 8.23.0-r0curl: curl: never-ending loop via server response omission — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-92386libcurl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie aborts cookie jar load — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87866libcurl8.22.0-r0 8.23.0-r0curl: curl: wolfSSL public-key pinning bypass — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87865libcurl8.22.0-r0 8.23.0-r0curl: curl: knownhost callback mismatches key as missing — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87864libcurl8.22.0-r0 8.23.0-r0curl: IMAP APPEND plus CRLF conversion command injection — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87863libcurl8.22.0-r0 8.23.0-r0curl: curl: Hsts Response Erases Persisted Entries — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87862libcurl8.22.0-r0 8.23.0-r0curl: curl: HSTS cache import drops longer-lived child — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-87861libcurl8.22.0-r0 8.23.0-r0curl: curl: cross-origin reuse of a Negotiate connection — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86415libcurl8.22.0-r0 8.23.0-r0curl: curl: auto client cert connection reuse mixup — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86414libcurl8.22.0-r0 8.23.0-r0curl: curl: leaking host credentials to HTTP proxy — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86413libcurl8.22.0-r0 8.23.0-r0curl: curl: Negotiate credentials sent to redirected origin — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86412libcurl8.22.0-r0 8.23.0-r0curl: curl: server-set cookie erases cookie jar — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86411libcurl8.22.0-r0 8.23.0-r0curl: curl: FTP connection reuse inherits client-certificate — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86410libcurl8.22.0-r0 8.23.0-r0curl: curl: redirect to SFTP or SCP bypasses host verification — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-86409libcurl8.22.0-r0 8.23.0-r0curl: curl: stale SigV4 headers sent unintended — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-107929libcurl8.22.0-r0 8.23.0-r0curl: curl: local interface connection reuse mixup — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
LOW CVE-2026-107928libcurl8.22.0-r0 8.23.0-r0curl: curl: info leak uploading over WebSockets with GnuTLS — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
UNKNOWN CVE-2026-97045golang.org/x/netv0.57.0 0.62.0In childTextNodesAreLiteral, walking up the tree previously stopped at ... — usr/local/bin/jig
UNKNOWN CVE-2026-78661golang.org/x/netv0.57.0 0.62.0When coalescing adjacent text nodes in addText and fosterParent, appen ... — usr/local/bin/jig
UNKNOWN GO-2026-5932golang.org/x/cryptov0.56.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues — usr/local/bin/jig
UNKNOWN CVE-2026-107891musl-utils1.2.5-r23 1.2.5-r24Title Not Available — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)
UNKNOWN CVE-2026-107891musl1.2.5-r23 1.2.5-r24Title Not Available — ghcr.io/voxpupuli/voxbox:latest (alpine 3.23.4)

Grype

CRITICAL 19 HIGH 43 MEDIUM 6 LOW 4 UNKNOWN 2 NVD/CPE filtered 15
SeverityIDPackageInstalledFixedTitle / target
CRITICAL CVE-2026-86411libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86411curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87866curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-115557python3-pycache-pyc03.12.15-r0 3.12.16-r0/lib/apk/db/installed
CRITICAL CVE-2026-115557python3-pyc3.12.15-r0 3.12.16-r0/lib/apk/db/installed
CRITICAL CVE-2026-115557python33.12.15-r0 3.12.16-r0/lib/apk/db/installed
CRITICAL CVE-2026-115557pyc3.12.15-r0 3.12.16-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-87861curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86414curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-92388curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-111497brotli-libs1.2.0-r0 1.2.1-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-94265libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
CRITICAL CVE-2026-86413libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92391libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6603stdlibgo1.27.1 1.27.2When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a "Trailer" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently. — /usr/local/bin/jig
HIGH CVE-2026-92391curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92392libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6611stdlibgo1.27.1 1.27.2A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. — /usr/local/bin/jig
HIGH CVE-2026-87865curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87865libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92390libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-94266libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92392curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6607stdlibgo1.27.1 1.26.9, 1.27.2Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result. — /usr/local/bin/jig
HIGH CVE-2026-77214libexpat2.8.5-r0 2.9.0-r0/lib/apk/db/installed
HIGH GO-2026-6613stdlibgo1.27.1 1.26.9, 1.27.2When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP. — /usr/local/bin/jig
HIGH CVE-2026-86415libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH GO-2026-6608stdlibgo1.27.1 1.26.9, 1.27.2Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. — /usr/local/bin/jig
HIGH GO-2026-6617stdlibgo1.27.1 1.27.2HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the other modifies the encoder's table size when handling a SETTINGS frame containing SETTINGS_HEADER_TABLE_SIZE that a client sends. A malicious client can repeatedly send a request while changing the header table size to crash the server. — /usr/local/bin/jig
HIGH GO-2026-6605stdlibgo1.27.1 1.26.9, 1.27.2When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning. — /usr/local/bin/jig
HIGH GO-2026-6610stdlibgo1.27.1 1.27.2Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling. — /usr/local/bin/jig
HIGH CVE-2026-86415curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86412libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87863libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87864libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92386libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-87862curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86410libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92389libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107928libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-107929libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-92387curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409libcurl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
HIGH CVE-2026-86409curl8.22.0-r0 8.23.0-r0/lib/apk/db/installed
MEDIUM CVE-2026-114583python3-pycache-pyc03.12.15-r0 3.12.16-r0/lib/apk/db/installed
MEDIUM CVE-2026-114583python3-pyc3.12.15-r0 3.12.16-r0/lib/apk/db/installed
MEDIUM CVE-2026-114583python33.12.15-r0 3.12.16-r0/lib/apk/db/installed
MEDIUM CVE-2026-114583pyc3.12.15-r0 3.12.16-r0/lib/apk/db/installed
MEDIUM CVE-2026-102633libexpat2.8.5-r0 2.9.0-r0/lib/apk/db/installed
MEDIUM GO-2026-6809stdlibgo1.27.1 1.26.10, 1.27.3On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy. — /usr/local/bin/jig
LOW CVE-2024-3220python3-pyc3.12.15-r0 3.12.16-r0/lib/apk/db/installed
LOW CVE-2024-3220python3-pycache-pyc03.12.15-r0 3.12.16-r0/lib/apk/db/installed
LOW CVE-2024-3220python33.12.15-r0 3.12.16-r0/lib/apk/db/installed
LOW CVE-2024-3220pyc3.12.15-r0 3.12.16-r0/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl1.2.5-r23 1.2.5-r24/lib/apk/db/installed
UNKNOWN CVE-2026-107891musl-utils1.2.5-r23 1.2.5-r24/lib/apk/db/installed
Filtered NVD/CPE matches (15)

These broad CPE matches are unconfirmed for the distribution package and excluded from scanner totals.

SeverityIDPackageInstalledFixedTitle / target
MEDIUM CVE-2025-12781python33.12.15-r0 When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the "base64" module the characters "+/" will always be accepted, regardless of the value of "altchars" parameter, typically used to establish an "alternative base64 alphabet" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues. This behavior can only be insecure if your application uses an alternate base64 alphabet (without "+/"). If your application does not use the "altchars" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet. The attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 alphabet they are expecting or verify that their application would not be affected if the b64decode() functions accepted "+" or "/" outside of altchars. — /lib/apk/db/installed
MEDIUM CVE-2025-15366python33.12.15-r0 The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters. — /lib/apk/db/installed
MEDIUM CVE-2025-15367python33.12.15-r0 The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters. — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876busybox-binsh1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2025-60876ssl_client1.37.0-r30 BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20). — /lib/apk/db/installed
MEDIUM CVE-2026-58055nghttp2-libs1.69.0-r0 nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning. — /lib/apk/db/installed
MEDIUM CVE-2026-3446python33.12.15-r0 When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data. — /lib/apk/db/installed
MEDIUM CVE-2026-6019python33.12.15-r0 http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value. — /lib/apk/db/installed
LOW CVE-2022-3219gnupg-dirmngr2.4.9-r0 GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB. — /lib/apk/db/installed
LOW CVE-2022-3219gnupg-gpgconf2.4.9-r0 GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB. — /lib/apk/db/installed
LOW CVE-2022-3219gnupg-keyboxd2.4.9-r0 GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB. — /lib/apk/db/installed
LOW CVE-2022-3219gpg2.4.9-r0 GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB. — /lib/apk/db/installed
LOW CVE-2026-103995python33.12.15-r0 Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents. — /lib/apk/db/installed
UNKNOWN CVE-2026-3479python33.12.15-r0 DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model. pkgutil.get_data() did not validate the resource argument as documented, allowing path traversals. — /lib/apk/db/installed