List of all vulnerabilities

Report a vulnerability
CVE-2026-41636 – Apache Thrift: Node.js skip() recursion
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41607 – Apache Thrift: C++ JSON OOB read
4/28/2026
Affected packages: thrift
Medium severity
CVE-2026-41606 – Apache Thrift: c_glib dispatch stack overflow
4/28/2026
Affected packages: thrift
Medium severity
CVE-2026-41605 – Apache Thrift: Swift Compact Protocol integer overflow
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41604 – Apache Thrift: Swift Range crash in skip()
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41603 – Apache Thrift: Java TSSLTransportFactory hostname verification
4/28/2026
Affected packages: thrift
High severity
CVE-2026-41602 – Apache Thrift: Go TFramedTransport uint32 overflow
4/28/2026
Affected packages: thrift
High severity
CVE-2025-48431 – Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.
4/28/2026
Affected packages: thrift
High severity
CVE-2026-3087 – shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs
4/27/2026
Affected packages: conf-python-2-7 • conf-python-2-7-dev • conf-python-3 • conf-python-3-7 • conf-python-3-dev • py • termbox ... (7)
Medium severity
CVE-2026-3087 – shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs
4/27/2026
Affected packages: conf-python-2-7 • conf-python-2-7-dev • conf-python-3 • conf-python-3-7 • conf-python-3-dev • py • termbox ... (7)
Medium severity
CVE-2026-31691 – igb: remove napi_synchronize() in igb_down()
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31691 – igb: remove napi_synchronize() in igb_down()
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31690 – firmware: thead: Fix buffer overflow and use standard endian macros
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31690 – firmware: thead: Fix buffer overflow and use standard endian macros
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31689 – EDAC/mc: Fix error path ordering in edac_mc_alloc()
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31689 – EDAC/mc: Fix error path ordering in edac_mc_alloc()
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31688 – driver core: enforce device_lock for driver_match_device()
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31688 – driver core: enforce device_lock for driver_match_device()
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31687 – gpio: omap: do not register driver in probe()
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity
CVE-2026-31687 – gpio: omap: do not register driver in probe()
4/27/2026
Affected packages: albatross • cdrom • conf-bpftool • conf-libbpf • conf-linux-libc-dev • core • core_unix • hvsock • mirage-block-unix • mm ... (29)
Unknown severity