Skip to contentLinuxfoundation vulnerabilities
Products
Show 5 moreShow less
Newest
- linuxfoundation strimzi kafka operator, red hat streams for apache kafka 2, streams for apache kafka 3 +1 more +3 moreStrimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autenticationCVE-2026-271348.1 High
- linuxfoundation strimzi, strimzi strimzi-kafka-operator +1 moreStrimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clustersCVE-2026-271335.9 Medium
- linuxfoundation inspektor gadget, inspektor-gadget +1 moreInspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output ModeCVE-2026-25996Fix available6.9 Medium
- antrea-io antreaAntrea has invalid enforcement order for network policy rules caused by integer overflowCVE-2026-25804Fix available8.0 High
- backstage@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local GeneratorCVE-2026-25152Fix available5.3 Medium
- backstage, red hat developer hub 1.8, developer hub 1.9 +1 more +3 more@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooksCVE-2026-25153Fix available7.7 High
- inspektor-gadget, linuxfoundation inspektor gadget +1 moreInspektor Gadget has a Command Injection vulnerability in Makefile.buildCVE-2026-24905Fix available6.6 Medium
- linuxfoundation podman desktop, podman-desktop +1 morePodman Desktop Extension System Vulnerable to Authentication BypassCVE-2026-248358.8 High
- linuxfoundation pytorch, red hat openshift ai (rhoai), openshift ai 2.25 +2 morePyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint FilesCVE-2026-24747Fix available8.8 High
- linuxfoundation everest, everest everest-core +1 moreEvseV2G has sequence state validation bypassCVE-2026-240034.3 Medium
- linuxfoundation sigstore-pythonsigstore has CSRF possibility in OIDC authentication during signingCVE-2026-24408Fix available0.0 None
- linuxfoundation rekorRekor affected by Server-Side Request Forgery (SSRF) via provided public key URLCVE-2026-24117Fix available5.3 Medium
- linuxfoundation rekorRekor COSE v0.0.1 Canonicalize crashes when passed empty MessageCVE-2026-23831Fix available5.3 Medium
- dragonflyoss dragonflyDragonfly Manager Job API Allows Unauthenticated AccessCVE-2026-24124Fix available8.9 High
- backstage, linuxfoundation backstage\/backend defaults +1 moreBackstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`CVE-2026-24048Fix available3.5 Low
- linuxfoundation everest, everest everest-core +1 moreEVerest vulnerable to null pointer dereference during DC_ChargeLoopRes document deserializationCVE-2025-681417.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest allows null session ID to bypass session ID verificationCVE-2025-681404.3 Medium
- linuxfoundation everest, everest everest-core +1 moreIn EVerest, by default, the EV is responsible for closing the connection if the module encounters an error during request processingCVE-2025-681394.3 Medium
- linuxfoundation libocpp, everest everest-core +1 moreEVerest affected by memory exhaustion in libocppCVE-2025-681384.7 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest vulnerable to concatenation of strings literal and integersCVE-2026-239554.2 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's Integer Overflow and Signed to Unsigned conversion lead to either stack buffer overflow or infinite loopCVE-2025-68137Public exploit8.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's inadequate session handling can lead to memory-related errors or exhaustion of the operating system’s file descriptors, resulting in a denial of serviceCVE-2025-681367.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest's inadequate exception handling leads to denial of serviceCVE-2025-681356.5 Medium
- linuxfoundation everest, everest everest-core +1 moreEVerest's use of assert functions can potentially lead to denial of serviceCVE-2025-681347.4 High
- linuxfoundation everest, everest everest-core +1 moreEVerest has out-of-bounds read in DZG_GSH01 SLIP CRC parser that can crash powermeter driverCVE-2025-681322.4 Low
- linuxfoundation everest, everest everest-core +1 moreEVerest's unlimited connections can lead to DoS through operating system resource exhaustionCVE-2025-681337.4 High
- linuxfoundation fulcioFulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex BypassCVE-2026-22772Fix available5.8 Medium
- linuxfoundation spinnakerSpinnaker vulnerable to SSRF due to improper restrictions on http from user inputCVE-2025-61916Fix available7.9 High
- linuxfoundation wasmedgeWasmEdge integer wrap in MemoryInstance::getSpan()'s memory size checkCVE-2025-69261Fix available5.5 Medium
- linuxfoundation upfA denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version...CVE-2025-655667.5 High
- linuxfoundation gardenctl, gardener gardenctl-v2 +1 moregardenctl is vulnerable to Command Injection when used with non‑POSIX shellsCVE-2025-67508Fix available8.0 High
- containernetworking plugins, linuxfoundation cni network plugins +1 moreCNI Plugins Portmap nftables backend intercepts non-local trafficCVE-2025-67499Fix available6.6 Medium
- linuxfoundation strimzi, strimzi strimzi-kafka-operator +1 moreStrimzi allows unrestricted access to all Secrets in the same Kubernetes namespace from Kafka Connect and MirrorMaker 2 operandsCVE-2025-66623Fix available7.4 High
- linuxfoundation sigstore timestamp authority, sigstore timestamp-authority +1 moreSigstore Timestamp Authority allocates excessive memory during request parsingCVE-2025-66564Fix available7.5 High
- linuxfoundation fulcioFulcio allocates excessive memory during token parsingCVE-2025-66506Fix available7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6899, mt6980d, mt6983, mt6985, mt6989, mt6990, mt6991, mt8113, mt8115, mt8139, mt8163, mt8168, mt8169, mt8183, mt8186, mt8188, mt8512, mt8516, mt8518, mt8519, mt8532, mt8676, mt8678, mt8695, mt8696, mt8698 +1 more +3 moreIn aee daemon, there is a possible system crash due to a race condition. This could lead to local...CVE-2025-207654.7 Medium
- linuxfoundation pytorchAn issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch...CVE-2025-63396Fix available3.3 Low
- containerdcontainerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329Fix available6.9 Medium
- containerdcontainerd affected by a local privilege escalation via wide permissions on CRI directoryCVE-2024-25621Fix available7.3 High
- linuxfoundation runcrunc: LSM labels can be bypassed with malicious config using dummy procfs filesCVE-2025-52881Public exploitFix available7.3 High
- linuxfoundation runccontainer escape due to /dev/console mount and related racesCVE-2025-52565Fix available8.4 High
- linuxfoundation runcrunc container escape via "masked path" abuse due to mount race conditionsCVE-2025-31133Public exploitFix available7.3 High
- google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 moreIn gnss service, there is a possible out of bounds write due to an incorrect bounds check. This...CVE-2025-207476.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 moreIn gnss service, there is a possible out of bounds write due to an incorrect bounds check. This...CVE-2025-207466.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8195, mt8676, mt8678, mt8696 +2 more +4 moreIn preloader, there is a possible escalation of privilege due to an insecure default value. This...CVE-2025-20730Public exploitFix available6.7 Medium
- linuxfoundation pytorchAn issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of...CVE-2025-55560Fix available7.5 High
- linuxfoundation pytorchA buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d,...CVE-2025-55558Fix available7.5 High
- linuxfoundation pytorchA Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is...CVE-2025-55557Fix available7.5 High
- linuxfoundation pytorchpytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-...CVE-2025-55554Fix available5.3 Medium
- linuxfoundation pytorchA syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a...CVE-2025-55553Fix available7.5 High
- Show moreLoading…