List of all vulnerabilities

Report a vulnerability
CVE-2026-21714
3/30/2026
Affected packages: conf-npm
Medium severity
CVE-2026-34714
3/30/2026
Affected packages: conf-vim
Critical severity
CVE-2026-4046 – iconv crash due to assertion failure with untrusted input
3/30/2026
Affected packages: gettext-stub
High severity
CVE-2026-21712
3/30/2026
Affected packages: conf-npm
Medium severity
CVE-2026-4176 – Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
3/29/2026
Affected packages: bap-std • conf-perl • goblint-cil
Critical severity
CVE-2026-23400 – rust_binder: call set_notification_done() without proc lock
3/29/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23399 – nf_tables: nft_dynset: fix possible stateful expression memleak in error path
3/28/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-34353
3/27/2026
Affected packages: camlp4 • pcre
Medium severity
CVE-2026-0965 – Libssh: libssh: denial of service via improper configuration file handling
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0967 – Libssh: libssh: denial of service via inefficient regular expression processing
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0968 – Libssh: libssh: denial of service due to malformed sftp message
3/26/2026
Affected packages: libssh
Low severity
CVE-2026-0964 – Libssh: improper sanitation of paths received from scp servers
3/26/2026
Affected packages: libssh
Medium severity
CVE-2026-0966 – Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()
3/26/2026
Affected packages: libssh
Medium severity
CVE-2026-33536 – ImageMagick has an Out-of-bounds Write via InterpretImageFilename
3/26/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-33535 – ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction
3/26/2026
Affected packages: conf-libMagickCore • ocsigen-start
Medium severity
CVE-2026-33636 – LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64
3/26/2026
Affected packages: conf-gd • conf-libpng • grib • qrencode
High severity
CVE-2026-33416 – LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
3/26/2026
Affected packages: conf-gd • conf-libpng • grib • qrencode
High severity
CVE-2026-23398 – icmp: fix NULL pointer dereference in icmp_tag_validation()
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23397 – nfnetlink_osf: validate individual option lengths in fingerprints
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-23396 – wifi: mac80211: fix NULL deref in mesh_matches_local()
3/26/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity