Skip to content
← All tracked CVEs

Updated 06:01

972 in progress

Severity
CVEStatusSeveritySummaryDistribution
In progressMediumLinux kernel BPF vulnerability: BPF_REFCOUNT not marked as a unique fieldsecure-packages-25.11
In progressMediumLinux kernel BPF: BPF_REFCOUNT field not marked unique, causing vulnerabilitysecure-packages-26.05
In progressCriticalRDMA/srpt: Stale n_rw_ctx/n_rdma after srpt_alloc_rw_ctxs() failure miscounts SQ creditssecure-packages-25.11
In progressCriticalsrpt_alloc_rw_ctxs unwind leaves stale n_rw_ctx/n_rdma and dangling rw_ctxs; wrong SQ creditssecure-packages-26.05
In progressMediumrtl8723bs: mgmt TX leaks in issue_beacon/probersp/asocrsp cause pool exhaustionsecure-packages-25.11
In progressMediumrtl8723bs mgmt-frame error paths leak xmit_frame/xmit_buf, exhausting TX poolssecure-packages-26.05
In progressMediumLinux drm/msm retires hung submit before GPU recovery, freeing BOs causing pagefaultssecure-packages-25.11
In progressMediumdrm/msm retires hung submit before GPU recovery, freeing BOs and causing GPU pagefaultssecure-packages-26.05
In progressMediumiwlwifi MEI bug: q_head passed instead of cldev to iwl_mei_write_cyclic_bufsecure-packages-25.11
In progressMediumIncorrect argument passed to iwl_mei_write_cyclic_buf in iwlwifi mei (q_head vs cldev)secure-packages-26.05
In progressMediumUCSI debugfs entries persist after unregister, causing duplicate directory errors on re-registrationsecure-packages-25.11
In progressMediumUCSI debugfs entries persist after unregister, causing duplicate directory errors on re-registrationsecure-packages-26.05
In progressHighHugo v0.161–0.165 Node.js tools symlink bypass allows arbitrary file disclosure during buildssecure-packages-25.11
In progressHighHugo v0.161–0.165 Node.js tool symlink sandbox bypass exposes host files during buildsecure-packages-26.05
In progressMediumHugo 0.75–0.165.x stored XSS via unescaped lineAnchors in Chroma code highlightingsecure-packages-25.11
In progressMediumHugo 0.75.0-0.165.x syntax highlighter stored XSS via unescaped lineAnchors in Chromasecure-packages-26.05
In progressHighHugo 0.123.1–0.165: symlinked theme/module mount roots bypass confinement, expose external filessecure-packages-25.11
In progressHighHugo v0.124–0.165 theme/module symlinked mount roots bypass confinement, exposing external filessecure-packages-26.05
In progressHighHugo v0.162–0.165 mixed-case schemes bypass security.http.urls IP-literal deny rulesecure-packages-25.11
In progressHighHugo 0.162–0.165 GetRemote mixed-case scheme bypass of security.http.urls IP-literal deny rulesecure-packages-26.05
In progressMediumHugo v0.56.0-0.165.x text/org renders unescaped HTML, enabling XSS via content/adapterssecure-packages-25.11
In progressMediumHugo text/org content renders unescaped HTML enabling XSS in v0.56.0–v0.165.xsecure-packages-26.05
In progressHighPyJWT pre-2.14.0: Unknown kid forces repeated JWKS refresh, amplifying outbound requestssecure-packages-26.05
In progressHighPyJWT pre-2.15.0 unhandled RecursionError in get_signing_key_from_jwt via nested payload causes 500ssecure-packages-rolling
In progressHighPyJWT PyJWKClient.get_signing_key_from_jwt unhandled RecursionError causes HTTP 500 (<2.15.0)secure-packages-26.05
In progressMediumPyJWT <2.14.0 uncaught RecursionError on deeply nested JWT header causes HTTP 500ssecure-packages-26.05
In progressCriticalPyJWT accepts HMAC tokens signed with zero-length JWK 'oct' key, enabling forged claimssecure-packages-26.05
In progressCriticalBefore 2.14.0 PyJWT PyJWKClient follows unvalidated JWKS redirects, enabling credential disclosure and key substitutionsecure-packages-26.05
In progressCriticalPyJWT pre-2.14.0 PEM detection flaw lets attackers forge HMAC tokens with public keysecure-packages-26.05
In progressMediumPyJWT <2.14.0 signature decoding accepts non-Base64URL chars, bypassing raw-token revocationsecure-packages-26.05
In progressMediumPyJWT pre-2.14.0 is_pem_format ReDoS: unbounded regex backtracking on malformed PEMsecure-packages-26.05
In progressHighPyJWT <2.14.0 treats DER public keys as HMAC secrets, enabling JWT forgerysecure-packages-26.05
In progressHighPyJWT 2.13.x BOM in JWK enables HMAC key misuse and token forgerysecure-packages-26.05
In progressHighPyJWT 2.13.x accepts public JWK as HMAC secret, enabling JWT forgerysecure-packages-26.05
In progressHighPyJWT 2.9–2.13: PyJWKSet fails on malformed RSA JWK, causing auth failures/DoSsecure-packages-26.05
In progressHighPyJWT <2.15.0 OKPAlgorithm.from_jwk doesn't verify x matches d; token replay risksecure-packages-rolling
In progressHighPyJWT <2.15.0 OKP JWK x/d mismatch allows sender-constrained token misusesecure-packages-26.05
In progressCriticalIncorrect authorization in Chrome Site Isolation pre-155.0.8059.39 enables RCE via crafted HTMLsecure-packages-rolling
In progressMediumPre-3.1.9 Werkzeug safe_join allows NUL: ADS paths on Windows, causing read hangssecure-packages-rolling
In progressMediumsend_from_directory NUL: ADS path hang on Windows NTFS due to safe_join bug (<3.1.9)secure-packages-26.05
In progressMediumWindows NTFS: Werkzeug safe_join before 3.1.9 allows NUL: ADS path causing hangsecure-packages-25.11
In progressMediumJupyterLab/JupyterLite language pack Plural-Forms regex flaw enables injected JS executionsecure-packages-26.05
In progressHighClipboard cell paste trusts metadata.trusted, enabling XSS without execution in JupyterLab/Notebook/JupyterLitesecure-packages-26.05
In progressMediumJupyterLab PyPI Extension Manager uninstall allows pip option injection, enabling SSRF and local file leaksecure-packages-26.05
In progressHighvirtualenv pre-21.7.13 activation scripts command injection due to surplus quotingsecure-packages-rolling
In progressHighvirtualenv pre-21.7.13 activation scripts over-quote, enabling command injection via crafted paths in bash/zsh/fishsecure-packages-26.05
In progressHighvirtualenv pre-21.7.13 activation scripts vulnerable to command injection from crafted environment pathssecure-packages-25.11
In progressHighvirtualenv <21.7.12 fails to verify seed wheel digests, enabling malicious wheel injectionsecure-packages-rolling
In progressHighvirtualenv <21.7.12 lacks digest verification for pip/setuptools seed wheels, enabling substitutionsecure-packages-26.05
In progressHighvirtualenv <21.7.12 skips digest verification for pip/setuptools seed wheels, risking cache poisoningsecure-packages-25.11

Contact sales

Provide us with some basic details and we'll follow up with you about , usually within one business day.

We'll only use this to get back to you. See our privacy policy (opens in a new tab). This site is protected by reCAPTCHA and the Google Privacy Policy (opens in a new tab) and Terms of Service (opens in a new tab) apply.