List of all vulnerabilities

Report a vulnerability
CVE-2025-59465
1/20/2026
Affected packages: conf-npm
High severity
CVE-2025-59465
1/20/2026
Affected packages: conf-npm
High severity
CVE-2025-15281 – wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
1/20/2026
Affected packages: gettext-stub
High severity
CVE-2025-15281 – wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
1/20/2026
Affected packages: gettext-stub
High severity
CVE-2026-23876 – Heap buffer overflow with attacker-controlled data in XBM parser
1/20/2026
Affected packages: conf-libMagickCore • ocsigen-start
High severity
CVE-2026-23876 – Heap buffer overflow with attacker-controlled data in XBM parser
1/20/2026
Affected packages: conf-libMagickCore • ocsigen-start
High severity
CVE-2026-23874 – ImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScript
1/20/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-23874 – ImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScript
1/20/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-22770 – ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails
1/20/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-22770 – ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails
1/20/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2025-15538 – Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free
1/18/2026
Affected packages: assimp • conf-assimp
Low severity
CVE-2025-15538 – Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free
1/18/2026
Affected packages: assimp • conf-assimp
Low severity
CVE-2026-0915 – getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
1/15/2026
Affected packages: gettext-stub
High severity
CVE-2026-0915 – getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
1/15/2026
Affected packages: gettext-stub
High severity
CVE-2026-0861 – Integer overflow in memalign leads to heap corruption
1/14/2026
Affected packages: gettext-stub
High severity
CVE-2026-0861 – Integer overflow in memalign leads to heap corruption
1/14/2026
Affected packages: gettext-stub
High severity
CVE-2025-71144 – mptcp: ensure context reset on disconnect()
1/14/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2025-71144 – mptcp: ensure context reset on disconnect()
1/14/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2025-56226
1/14/2026
Affected packages: conf-sndfile
Medium severity
CVE-2025-71089 – iommu: disable SVA when CONFIG_X86 is set
1/13/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity