← All tracked CVEs
Updated 12:00
972 in progress
| CVE | Status | Severity | Summary | Distribution |
|---|---|---|---|---|
| In progress | Low | ECDSA/SM2 scalar multiplication timing leak on generic curves enables nonce exposure, key recovery | secure-packages-26.05 | |
| In progress | Low | Timing leak in generic ECC scalar multiplication exposes ECDSA/SM2 nonces, risking private key recovery | secure-packages-rolling | |
| In progress | High | QUIC packet buffer retention allows remote peers to force unbounded memory overhead | secure-packages-rolling | |
| In progress | High | QUIC retains packet buffers too long, enabling remote memory over-allocation via crafted packets | secure-packages-26.05 | |
| In progress | Low | OpenSSL: Non-constant-time SM2 scalar multiplication leaks timing/cache on ARM64 and RISC-V | secure-packages-26.05 | |
| In progress | Low | Non-constant-time SM2 scalar multiplication leaks secrets on ARM64/RISC-V in OpenSSL | secure-packages-rolling | |
| In progress | High | Apache Thrift Node.js bindings vulnerable: unbounded resource allocation, inefficient complexity pre-0.24.0 | secure-packages-rolling | |
| In progress | High | Apache Thrift pre-0.24.0 integer overflow/wraparound vulnerability in C++, c_glib, Go, netstd, Delphi, Haxe | secure-packages-rolling | |
| In progress | Medium | Buffer over-read vulnerability in Apache Thrift C++ bindings prior to 0.24.0 | secure-packages-rolling | |
| In progress | Critical | Heap-based buffer overflow in Apache Thrift C++ bindings prior to version 0.24.0 | secure-packages-rolling | |
| In progress | Medium | GNU coreutils uniq out-of-bounds read with -w multibyte input causing crash and heap exposure | secure-packages-25.11 | |
| In progress | Low | JRuby Nokogiri XML::Schema ignores NONET, allows external fetches; SSRF/XXE before 1.19.4. | secure-packages-rolling | |
| In progress | High | Nokogiri NodeSet#[] 32-bit index truncation causes out-of-bounds read prior to 1.19.4 | secure-packages-rolling | |
| In progress | High | Nokogiri pre-1.19.4 CRuby: invalid Document#encoding= frees encoding, causing segfault or memory leak | secure-packages-rolling | |
| In progress | High | Perl ≤5.43.10 pack/unpack S_measure_struct overflow allows out-of-bounds heap read via large repeat counts | secure-packages-rolling | |
| In progress | High | Nokogiri <1.19.4 vulnerability: NULL deref via uninitialized XML::Node wrapper methods | secure-packages-rolling | |
| In progress | High | Nokogiri <1.19.4: use-after-free when setting XML attribute value causes invalid read/segfault | secure-packages-rolling | |
| In progress | Medium | Nokogiri <1.19.4: DTD allowed as root causing heap use-after-free/segfault | secure-packages-rolling | |
| In progress | Medium | Nokogiri pre-1.19.4 XPathContext doesn't retain document; GC can cause segfault on evaluation | secure-packages-rolling | |
| In progress | Medium | Nokogiri <1.19.4: XInclude do_xinclude frees nodes, causing Ruby object use-after-free | secure-packages-rolling | |
| In progress | Critical | Out-of-bounds read vulnerability in Apache Thrift c_glib bindings before 0.24.0 | secure-packages-rolling | |
| In progress | Medium | nghttpx <=1.69.0 forwards ambiguous Upgrade+Content-Length on keep-alive, enabling smuggling and queue poisoning. | secure-packages-26.05 | |
| In progress | Medium | pydantic-settings symlink traversal with secrets_nested_subdir reads outside secrets_dir, bypasses secrets_dir_max_size (2.12.0–2.14.2) | secure-packages-rolling | |
| In progress | Medium | pydantic-settings 2.12.0–2.14.2 symlink traversal with secrets_nested_subdir=True reads outside secrets_dir, bypasses secrets_dir_max_size | secure-packages-26.05 | |
| In progress | High | Resource allocation without limits vulnerability in Apache Thrift Rust bindings before 0.24.0 | secure-packages-rolling | |
| In progress | Medium | Zeep <4.3.3 ignores forbid_external, allowing SSRF via WSDL/XSD imports and XML entities | secure-packages-26.05 | |
| In progress | Critical | Out-of-bounds read due to improper input quantity validation in Apache Thrift C++ <0.24.0 | secure-packages-rolling | |
| In progress | Medium | libssh OpenSSL backend AES-GCM finalization bug allows undetected MITM plaintext modification | secure-packages-25.11 | |
| In progress | Low | libssh logic error: cert-based auth loop causes client DoS on missing/rejected certs | secure-packages-25.11 | |
| In progress | Medium | AIOHTTP <3.14.2 WebSocket decompresses RSV1 without permessage-deflate, enabling malicious server CPU/memory consumption | secure-packages-26.05 | |
| In progress | Medium | setuptools <83.0.0: FileList ignores Unicode normalization; macOS NFD files bypass MANIFEST.in excludes | secure-packages-26.05 | |
| In progress | High | sqlparse <0.6.0 quadratic CPU from scanning unmatched dollar-quote/comment delimiters in parse/format/split | secure-packages-rolling | |
| In progress | Medium | sqlparse <0.6.0 improper backslash escaping enables code injection in Python/PHP outputs | secure-packages-rolling | |
| In progress | Medium | hpack pre-4.2.0: malformed input triggers quadratic-time varint decoding, causing denial-of-service | secure-packages-26.05 | |
| In progress | Medium | glibc 2.0.1–2.43 ns_printrr/ns_printrrf/fp_nquery mishandle A6/CERT/LOC/TKEY/TSIG RDATA; crash/uninitialized read | secure-packages-26.05 | |
| In progress | Medium | secure-packages-rolling | ||
| In progress | Medium | AsyncSSH zero send_pktsize triggers infinite send loop, freezing all connections pre-2.24.0 | secure-packages-26.05 | |
| In progress | Critical | AnyIO <4.14.2 validates IDNs via IDNA 2003, enabling TLS certificate spoofing | secure-packages-26.05 | |
| In progress | Medium | pip <26.1 self-update runs post-wheel install, importing newly installed modules. | secure-packages-26.05 | |
| In progress | Low | ONNX version_converter Gemm_7_6 OOB read with <2D inputs during opset 7→6 downgrade (<1.22.0) | secure-packages-26.05 | |
| In progress | Medium | Linux kernel ethtool RSS: indir_table and hkey memory leak on get_rxfh failure | secure-packages-25.11 | |
| In progress | Medium | cachefiles returns NULL on vfs_mkdir() failure due to missing error code extraction | secure-packages-rolling | |
| In progress | Medium | cachefiles: Improper error extraction on vfs_mkdir() failure returns NULL instead of error pointer | secure-packages-26.05 | |
| In progress | Medium | netfilter x_tables race: table visible with NULL ops; nf_unregister_net_hooks NULL deref | secure-packages-26.05 | |
| In progress | Medium | Concurrent pernet exit sees NULL ops in x_tables table, causing nf_unregister_net_hooks crash | secure-packages-rolling | |
| In progress | Medium | mt76 mt7921/mt7925 CSA beacon NULL dereference when new_ctx cleared after disconnect | secure-packages-rolling | |
| In progress | Medium | mt76 mt7921/mt7925 NULL dereference in CSA beacon handling when new_ctx cleared after disconnect | secure-packages-26.05 | |
| In progress | Medium | AnyIO pre-4.14.2: undrained worker stderr pipe blocks process-pool call on large output | secure-packages-26.05 | |
| In progress | High | FFmpeg 2.7–8.1.2 TDSC decoder OOB write causing heap corruption and potential RCE | secure-packages-rolling | |
| In progress | High | FFmpeg <=8.1.2 heap corruption via TY demuxer OOB write using crafted ffconcat with -safe 0 | secure-packages-rolling |