List of all vulnerabilities

Report a vulnerability
CVE-2026-50219
6/4/2026
Affected packages: conf-expat • conf-gtk2 • conf-gtk3 • ocaml-expat
Medium severity
CVE-2026-8643 – pip can extract console_scripts and gui_scripts outside installation directory
6/1/2026
Affected packages: catala
Medium severity
CVE-2026-8643 – pip can extract console_scripts and gui_scripts outside installation directory
6/1/2026
Affected packages: catala
Medium severity
CVE-2026-23679 – libusb < 1.0.30 NULL Pointer Dereference in parse_interface()
5/27/2026
Affected packages: conf-hidapi • usb
Medium severity
CVE-2026-23679 – libusb < 1.0.30 NULL Pointer Dereference in parse_interface()
5/27/2026
Affected packages: conf-hidapi • usb
Medium severity
CVE-2026-47104 – libusb < 1.0.30 Out-of-Bounds Read in parse_iad_array()
5/27/2026
Affected packages: conf-hidapi • usb
Medium severity
CVE-2026-49014
5/27/2026
Affected packages: gdal
High severity
CVE-2026-49014
5/27/2026
Affected packages: gdal
High severity
CVE-2026-8376 – Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
5/25/2026
Affected packages: bap-std • conf-perl • goblint-cil
High severity
CVE-2026-8376 – Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
5/25/2026
Affected packages: bap-std • conf-perl • goblint-cil
High severity
CVE-2026-46300 – net: skbuff: preserve shared-frag marker during coalescing
5/23/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
High severity
CVE-2026-46300 – net: skbuff: preserve shared-frag marker during coalescing
5/23/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
High severity
CVE-2026-46727
5/22/2026
Affected packages: conf-ruby
High severity
CVE-2026-8696 – radare2 6.1.5 Use-After-Free via gdbr_pids_list()
5/15/2026
Affected packages: conf-radare2 • radare2
High severity
CVE-2026-8696 – radare2 6.1.5 Use-After-Free via gdbr_pids_list()
5/15/2026
Affected packages: conf-radare2 • radare2
High severity
CVE-2026-8695 – radare2 6.1.5 Use-After-Free via gdbr_threads_list()
5/15/2026
Affected packages: conf-radare2 • radare2
High severity
CVE-2026-46483 – Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag
5/15/2026
Affected packages: conf-vim
Low severity
CVE-2026-6638 – PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
5/14/2026
Affected packages: conf-mingw-w64-postgresql-i686 • conf-mingw-w64-postgresql-x86_64 • conf-postgresql • ocsigen-start • postgresql
Low severity
CVE-2026-6637 – PostgreSQL refint allows stack buffer overflow and SQL injection
5/14/2026
Affected packages: conf-mingw-w64-postgresql-i686 • conf-mingw-w64-postgresql-x86_64 • conf-postgresql • ocsigen-start • postgresql
High severity
CVE-2026-6637 – PostgreSQL refint allows stack buffer overflow and SQL injection
5/14/2026
Affected packages: conf-mingw-w64-postgresql-i686 • conf-mingw-w64-postgresql-x86_64 • conf-postgresql • ocsigen-start • postgresql
High severity