List of all vulnerabilities

Report a vulnerability
CVE-2026-34873
4/1/2026
Affected packages: conf-mbedtls
Critical severity
CVE-2026-34714
3/30/2026
Affected packages: conf-vim
Critical severity
CVE-2026-34714
3/30/2026
Affected packages: conf-vim
Critical severity
CVE-2026-4046 – iconv crash due to assertion failure with untrusted input
3/30/2026
Affected packages: gettext-stub
High severity
CVE-2026-4046 – iconv crash due to assertion failure with untrusted input
3/30/2026
Affected packages: gettext-stub
High severity
CVE-2026-4176 – Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
3/29/2026
Affected packages: bap-std • conf-perl • goblint-cil
Critical severity
CVE-2026-4176 – Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
3/29/2026
Affected packages: bap-std • conf-perl • goblint-cil
Critical severity
CVE-2026-23400 – rust_binder: call set_notification_done() without proc lock
3/29/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23400 – rust_binder: call set_notification_done() without proc lock
3/29/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23399 – nf_tables: nft_dynset: fix possible stateful expression memleak in error path
3/28/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23399 – nf_tables: nft_dynset: fix possible stateful expression memleak in error path
3/28/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-34353
3/27/2026
Affected packages: camlp4 • pcre
Medium severity
CVE-2026-0965 – Libssh: libssh: denial of service via improper configuration file handling
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0965 – Libssh: libssh: denial of service via improper configuration file handling
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0967 – Libssh: libssh: denial of service via inefficient regular expression processing
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0967 – Libssh: libssh: denial of service via inefficient regular expression processing
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0968 – Libssh: libssh: denial of service due to malformed sftp message
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0968 – Libssh: libssh: denial of service due to malformed sftp message
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0964 – Libssh: improper sanitation of paths received from scp servers
3/26/2026
Affected packages: libssh
Medium severity
CVE-2026-0964 – Libssh: improper sanitation of paths received from scp servers
3/26/2026
Affected packages: libssh
Medium severity