Skip to contentLinuxfoundation vulnerabilities
Products
Show 5 moreShow less
Newest
- linuxfoundation nats-serverNATS Server: MQTT partial CONNECT packets can exhaust pre-auth memoryCVE-2026-58210Fix available7.5 High
- linuxfoundation nats-serverNATS Server: MQTT retained and QoS replay bypass subscribe deny filtersCVE-2026-58209Fix available4.3 Medium
- linuxfoundation nats-serverNATS Server: MQTT subscribe ACL bypass via $MQTT.deliver.pubrel prefix (incomplete fix for CVE-2026-33217)CVE-2026-58214Fix available4.3 Medium
- linuxfoundation nats-serverNATS Server: Incomplete fix for CVE-2026-33249: Leaf node connections bypass Nats-Trace-Dest permission checkCVE-2026-58254Fix available5.3 Medium
- linuxfoundation nats-serverNATS Server: MQTT SUBSCRIBE Protocol Injection via Leaf Node/Route Forwarding allows arbitrary NATS command injectionCVE-2026-58213Fix available7.1 High
- linuxfoundation nats-serverNATS Server: Pre-auth server crash via double INFO in leafnode handshakeCVE-2026-58250Fix available7.5 High
- linuxfoundation nats-serverNATS Server: Subscribe Authz Bypass via Wildcard-OverlapCVE-2026-58252Fix available6.5 Medium
- linuxfoundation nats-serverNATS Server: Route API Auth BypassCVE-2026-58253Fix available8.8 High
- linuxfoundation nats-serverNATS Server: Queue Subscribe Authz BypassCVE-2026-58251Fix available6.5 Medium
- linuxfoundation onnxONNX: Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)CVE-2026-44512Fix available5.5 Medium
- linuxfoundation oras, oras-project oras-go +1 moreoras-go: credential forwarding via unvalidated Location header in blob uploadCVE-2026-50151Fix available7.5 High
- linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation +1 moreOpenTelemetry Javaagent RMI context propagation allows resource exhaustionCVE-2026-54712Fix available5.3 Medium
- linuxfoundation opentelemetry instrumentation for java, open-telemetry opentelemetry-java-instrumentation +1 moreOpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text PasswordsCVE-2026-54704Fix available6.5 Medium
- linuxfoundation sigstore timestamp authority, sigstore timestamp-authority +1 moreSigstore Timestamp Authority: OOM due to unbounded metric label cardinalityCVE-2026-49835Fix available5.9 Medium
- linuxfoundation spinnakerSpinnaker: Non-safe yaml deserialization allowing RCE when using specific typesCVE-2026-44795Fix available8.8 High
- containerdcontainerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pullCVE-2026-53488Fix available9.4 Critical
- containerdcontainerd: CRI checkpoint import allows local image tag poisoningCVE-2026-50195Fix available5.6 Medium
- containerdcontainerd image-triggered runtime DoS via unbounded group parsingCVE-2026-47262Fix available5.3 Medium
- containerdcontainerd CRI checkpoint restore CDI annotation smugglingCVE-2026-53492Fix available8.4 High
- containerdcontainerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restoreCVE-2026-53489Fix available8.2 High
- linuxfoundation runcrunc: Malicious image with /dev symlink can trigger limited host filesystem integrity violationsCVE-2026-41579Fix available3.3 Low
- kedro-org kedro-org/kedro, linuxfoundation kedro +1 morePath Traversal in kedro-org/kedroCVE-2026-38407.1 High
- containerdcontainerd user ID handling bypass allows runAsNonRoot evasionCVE-2026-46680Public exploitFix available7.3 High
- tanstack, @tanstack arktype-adapter, eslint-plugin-router +211 more +213 moreMalware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keysCVE-2026-45321In KEVPublic exploitFix available9.6 Critical
- linuxfoundation cloudnativepg, cloudnative-pg, red hat openshift data foundation 4 +2 moreCloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCECVE-2026-44477Fix available9.4 Critical
- linuxfoundation volcanoVolcano: Webhook server vulnerable to OOM due to unbounded HTTP request body sizeCVE-2026-44247Fix available6.8 Medium
- @backstage plugin-catalog-backend-module-unprocessed, plugin-catalog-unprocessed-entities, plugin-catalog-unprocessed-entities-common +3 more +5 moreBackstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checksCVE-2026-44374Fix available4.3 Medium
- linuxfoundation automotive grade linuxAGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c...CVE-2026-375327.1 High
- linuxfoundation automotive grade linuxAGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22)...CVE-2026-375319.8 Critical
- linuxfoundation automotive grade linuxAGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library....CVE-2026-375307.5 High
- linuxfoundation automotive grade linuxAGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute...CVE-2026-375267.8 High
- linuxfoundation automotive grade linuxAGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation...CVE-2026-375257.8 High
- linuxfoundation tekton pipelines, tektoncd pipeline, red hat openshift lightspeed +8 more +10 moreTekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCECVE-2026-40938Fix available7.5 High
- linuxfoundation tekton pipelines, tektoncd pipeline +1 moreTekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory ExhaustionCVE-2026-40924Fix available6.5 Medium
- linuxfoundation tekton pipelines, tektoncd pipeline +1 moreTekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ checkCVE-2026-40923Fix available5.4 Medium
- linuxfoundation tekton pipelines, tektoncd pipeline +1 moreTekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURLCVE-2026-40161Fix available7.7 High
- linuxfoundation tekton pipelines, tektoncd pipeline +1 moreTekton Pipelines: VerificationPolicy regex pattern bypass via substring matchingCVE-2026-25542Fix available6.5 Medium
- linuxfoundation spinnakerSpinnaker vulnerable to RCE via expression parsing due to unrestricted context handlingCVE-2026-32613Fix available10.0 Critical
- linuxfoundation spinnakerSpinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and pathsCVE-2026-32604Public exploitFix available10.0 Critical
- daprDapr: Service Invocation path traversal ACL bypassCVE-2026-41491Fix available8.1 High
- linuxfoundation sigstore timestamp authority, sigstore timestamp-authority +1 moreSigstore Timestamp Authority has Improper Certificate Validation in verifierCVE-2026-39984Fix available5.5 Medium
- linuxfoundation podman desktop, podman-desktop, red hat build of podman desktop +2 more +4 morePodman Desktop WebView Server ExposedCVE-2026-34045Fix available8.2 High
- antrea-io antreaMissing Encryption of Sensitive Data in antrea.io/antreaCVE-2026-34992Fix available7.1 High
- kedro-org kedroArbitrary Code Execution via Malicious Logging Configuration in KedroCVE-2026-35171Fix available9.8 Critical
- kedro-org kedroKedro has a path traversal in versioned dataset loading via unsanitized version stringCVE-2026-35167Fix available7.1 High
- linuxfoundation onnxONNX symlink-following and path-traversal arbitrary file writeCVE-2026-49114Fix available6.8 Medium
- linuxfoundation onnxONNX: External Data Symlink TraversalCVE-2026-34447Fix available5.5 Medium
- linuxfoundation onnxONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX loadCVE-2026-34446Fix available4.7 Medium
- linuxfoundation onnxONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.CVE-2026-34445Fix available8.6 High
- linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreONNX: Path Traversal via SymlinkCVE-2026-27489Fix available8.7 High
- Show moreLoading…