← All tracked CVEs
Updated 13:00
High severity
High15d SLAWe fix a high vulnerability within 15 days of publication, under our service-level agreement (SLA). We track 788 CVEs here: in progress, or fixed in the last 30 days.
| CVE | Status | Summary | Distribution | Fixed |
|---|---|---|---|---|
| Fixed | Linux cgroup iterators reference zero-refcount dying tasks, causing use-after-free race | secure-packages-25.11 | Oct 13, 2026 | |
| Fixed | NTFS $AttrDef table walk causes out-of-bounds read when table smaller than entry | secure-packages-25.11 | Oct 13, 2026 | |
| Fixed | btrfs_insert_one_raid_extent() prematurely ends transaction, causing use-after-free on error | secure-packages-25.11 | Oct 13, 2026 | |
| Fixed | Linux kernel bcmasp driver reuses descriptors with stale last flag, freeing SKB mid-transmit | secure-packages-25.11 | Oct 13, 2026 | |
| Fixed | mlxsw spectrum_ptp GC workqueue calls napi_gro_receive outside NAPI, corrupting GRO list, causing kernel panic | secure-packages-25.11 | Oct 13, 2026 | |
| Fixed | PYSEC-2026-4177: Malicious chunked responses cause urllib3 streaming API to buffer excessively, risking memory exhaustion | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | PYSEC-2026-4175: urllib3 1.26–2.7 conflates proxy and target TLS, disabling verification, exposing sensitive data | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | GHSA-vxq7-64xx-v4gw: urllib3 streaming chunked decoding buffers unbounded chunk-size lines, causing memory exhaustion. | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | GHSA-8988-9cw3-xx77: urllib3 1.26–2.7 misapplies target TLS settings to HTTPS proxy, risking verification bypass | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | cgroup iterator race resurrects zero-refcount tasks, triggering Linux kernel use-after-free | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | NTFS $AttrDef table walk reads out-of-bounds due to improper entry size bounds | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | btrfs: premature transaction end causes use-after-free after RAID stripe extent allocation failure | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | bcmasp: Stale txcb->last flag leads to premature SKB free on descriptor reuse | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | mlxsw spectrum_ptp calls napi_gro_receive() in GC context, causing GRO list corruption and kernel panic | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | urllib3 1.10.3–2.8.0 DoS via chunked transfer unterminated chunk-size line | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | urllib3 <2.8.0 mixes target and proxy TLS settings, enabling HTTPS proxy MITM | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | OpenSSL 4.0 X.509 extension cache race causes use-after-free DoS in multithreaded TLS | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | Hugo 0.162–0.165 GetRemote mixed-case scheme bypass of security.http.urls IP-literal deny rule | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | Hugo v0.124–0.165 theme/module symlinked mount roots bypass confinement, exposing external files | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | Hugo v0.161–0.165 Node.js tool symlink sandbox bypass exposes host files during build | secure-packages-26.05 | Oct 12, 2026 | |
| Fixed | PYSEC-2026-3984: Regex DoS in GitPython <3.1.60 parsing malformed commit author with unterminated bracket | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | PYSEC-2026-3982: GitPython <3.1.60 gitdir spoofing enables malicious pre-commit hook execution on index.commit() | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | PYSEC-2026-3926: Infinite loop vulnerability in Apache Thrift Python, Go, PHP, Java bindings before 0.24.0 | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | PYSEC-2026-3925: Data amplification vulnerability in Apache Thrift Python bindings before 0.24.0 | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | PYSEC-2026-3788: GitPython <3.1.59 unsafe_git_revision_options omits --contents/-S, enabling arbitrary file read via Repo.blame | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | PYSEC-2026-3787: GitPython <3.1.59 allows --separate-git-dir abuse, arbitrary directory creation and hook execution | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | PYSEC-2026-3785: GitPython <3.1.59 exposes sensitive files via .gitmodules [include] when accessing repo.submodules | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GHSA-g5vv-9gxw-82hx: GitPython catastrophic backtracking ReDoS in Actor.name_email_regex on malformed author header | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GHSA-8wv5-x4w7-5gww: Infinite loop vulnerability in Apache Thrift Python/Go/PHP/Java bindings prior to 0.24.0 | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GHSA-8mcc-hrx5-hvxc: GitPython clone options denylist omits --separate-git-dir, enabling .git escape to arbitrary path | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GHSA-7833-fr7j-v32q: GitPython repo.submodules reads .gitmodules includes, leaking arbitrary local file first line via exception | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GHSA-6pjx-3pjc-mrj8: Data amplification vulnerability in Apache Thrift Python bindings before 0.24.0 (compressed data) | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GHSA-239g-whfq-7xj9: GitPython git_dir discovery bug enables RCE via tracked hooks; config exfiltration (CVE-2026-87817) | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GitPython <3.1.60 ReDoS in Actor.name_email_regex on malformed commit author field | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GitPython 3.1.59 high-level diff API fails to restrict --no-index, enabling arbitrary filesystem read oracle | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GitPython <3.1.60 trusts tracked gitdir/commondir/HEAD, enabling RCE via pre-commit hook | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GitPython <3.1.59 TagReference.create() arbitrary file read via positional --file reference bypass | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GitPython <3.1.59 denylist omission allows arbitrary file read via Repo.blame --contents/-S | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Omission of --separate-git-dir in GitPython <3.1.59 enables arbitrary dir creation, hook execution | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | GitPython <3.1.59 local file disclosure via .gitmodules include parsing error | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Resource allocation without limits vulnerability in Apache Thrift Rust bindings before 0.24.0 | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Apache Thrift pre-0.24.0 integer overflow/wraparound vulnerability in C++, c_glib, Go, netstd, Delphi, Haxe | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Apache Thrift Node.js bindings vulnerable: unbounded resource allocation, inefficient complexity pre-0.24.0 | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Data amplification vulnerability in Apache Thrift Ruby bindings due to compressed data handling pre-0.24.0 | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Apache Thrift <0.24.0 data amplification vulnerability from improper handling of highly compressed data across bindings | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Improper certificate hostname validation in Apache Thrift C++ before 0.24.0 | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Allocation of Resources Without Limits vulnerability in Apache Thrift Java bindings 0.19.0–0.23.x | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Infinite loop vulnerability in Apache Thrift Python/Go/PHP/Java bindings before 0.24.0 | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Multiple vulnerabilities in Apache Thrift before 0.23.0: origin validation, path traversal, CRLF, DoS. | secure-packages-rolling | Oct 12, 2026 | |
| Fixed | Apache Thrift before 0.23.0: improper TLS certificate host mismatch validation | secure-packages-rolling | Oct 12, 2026 |