squidfunk/mkdocs-material:latest (alpine 3.21.5) - Trivy Report - 2026-11-08 04:03:24.986804889 +0100 CET m=+0.036574093

alpine
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
brotli	CVE-2026-111497	CRITICAL	1.1.0-r2	1.1.1-r0	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 http://www.openwall.com/lists/oss-security/2026/11/03/2 https://access.redhat.com/errata/RHSA-2026:90495 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90495 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
brotli-dev	CVE-2026-111497	CRITICAL	1.1.0-r2	1.1.1-r0	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 http://www.openwall.com/lists/oss-security/2026/11/03/2 https://access.redhat.com/errata/RHSA-2026:90495 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90495 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
brotli-libs	CVE-2026-111497	CRITICAL	1.1.0-r2	1.1.1-r0	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 http://www.openwall.com/lists/oss-security/2026/11/03/2 https://access.redhat.com/errata/RHSA-2026:90495 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90495 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
c-ares	CVE-2026-33630	HIGH	1.34.6-r0	1.34.8-r0	https://access.redhat.com/errata/RHSA-2026:42096 https://access.redhat.com/security/cve/CVE-2026-33630 https://bugzilla.redhat.com/2497686 https://bugzilla.redhat.com/show_bug.cgi?id=2497686 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33630 https://errata.almalinux.org/10/ALSA-2026-42096.html https://errata.rockylinux.org/RLSA-2026:42096 https://github.com/c-ares/c-ares/commit/1fa3b86a0b8d18fe7b60f3228a01d770feb026bc https://github.com/c-ares/c-ares/commit/d823199b688052dcdc1646f2ab4cb8c16b1c644a https://github.com/c-ares/c-ares/pull/1237 https://github.com/c-ares/c-ares/releases/tag/v1.34.7 https://github.com/c-ares/c-ares/security/advisories/GHSA-6wfj-rwm7-3542 https://linux.oracle.com/cve/CVE-2026-33630.html https://linux.oracle.com/errata/ELSA-2026-42096.html https://nvd.nist.gov/vuln/detail/CVE-2026-33630 https://ubuntu.com/security/notices/USN-8844-1 https://www.cve.org/CVERecord?id=CVE-2026-33630 https://www.openwall.com/lists/oss-security/2026/07/06/8
lcms2	CVE-2026-41254	HIGH	2.16-r0	2.19-r0	https://abhinavagarwal07.github.io/posts/lcms2-cubesize-overflow/ https://access.redhat.com/errata/RHSA-2026:42899 https://access.redhat.com/security/cve/CVE-2026-41254 https://bugzilla.redhat.com/2459420 https://bugzilla.redhat.com/2502751 https://bugzilla.redhat.com/2502782 https://bugzilla.redhat.com/2502783 https://bugzilla.redhat.com/2502784 https://bugzilla.redhat.com/2502791 https://bugzilla.redhat.com/2502792 https://bugzilla.redhat.com/2502793 https://bugzilla.redhat.com/2503636 https://bugzilla.redhat.com/show_bug.cgi?id=2459420 https://bugzilla.redhat.com/show_bug.cgi?id=2502751 https://bugzilla.redhat.com/show_bug.cgi?id=2502782 https://bugzilla.redhat.com/show_bug.cgi?id=2502783 https://bugzilla.redhat.com/show_bug.cgi?id=2502784 https://bugzilla.redhat.com/show_bug.cgi?id=2502791 https://bugzilla.redhat.com/show_bug.cgi?id=2502792 https://bugzilla.redhat.com/show_bug.cgi?id=2502793 https://bugzilla.redhat.com/show_bug.cgi?id=2503636 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41254 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46917 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46968 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47010 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47021 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47027 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47059 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47063 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60147 https://errata.almalinux.org/9/ALSA-2026-42899.html https://errata.rockylinux.org/RLSA-2026:42899 https://github.com/mm2/Little-CMS/commit/da6110b1d14abc394633a388209abd5ebedd7ab0 https://github.com/mm2/Little-CMS/commit/e0641b1828d0a1af5ecb1b11fe22f24fceefd4bc https://github.com/mm2/Little-CMS/commit/e0641b1828d0a1af5ecb1b11fe22f24fceefd4bc#commitcomment-183284136 https://github.com/mm2/Little-CMS/security/advisories/GHSA-4xp6-rcgg-m9qq https://linux.oracle.com/cve/CVE-2026-41254.html https://linux.oracle.com/errata/ELSA-2026-42899.html https://lists.debian.org/debian-lts-announce/2026/05/msg00014.html https://nvd.nist.gov/vuln/detail/CVE-2026-41254 https://openjdk.org/groups/vulnerability/advisories/2026-07-21 https://ubuntu.com/security/notices/USN-8209-1 https://ubuntu.com/security/notices/USN-8209-2 https://www.cve.org/CVERecord?id=CVE-2026-41254 https://www.openwall.com/lists/oss-security/2026/04/17/16
libcrypto3	CVE-2026-31789	CRITICAL	3.3.5-r0	3.3.7-r0	https://access.redhat.com/security/cve/CVE-2026-31789 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://github.com/advisories/GHSA-j79m-9jxq-788r https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49 https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9 https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521 https://nvd.nist.gov/vuln/detail/CVE-2026-31789 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://www.cve.org/CVERecord?id=CVE-2026-31789 https://www.openwall.com/lists/oss-security/2026/04/07/11
libcrypto3	CVE-2025-15467	HIGH	3.3.5-r0	3.3.6-r0	http://www.openwall.com/lists/oss-security/2026/01/27/10 http://www.openwall.com/lists/oss-security/2026/02/25/6 https://access.redhat.com/errata/RHSA-2026:1472 https://access.redhat.com/errata/RHSA-2026:1473 https://access.redhat.com/errata/RHSA-2026:1496 https://access.redhat.com/errata/RHSA-2026:1503 https://access.redhat.com/errata/RHSA-2026:1519 https://access.redhat.com/errata/RHSA-2026:1594 https://access.redhat.com/errata/RHSA-2026:1733 https://access.redhat.com/errata/RHSA-2026:1736 https://access.redhat.com/errata/RHSA-2026:2072 https://access.redhat.com/errata/RHSA-2026:2077 https://access.redhat.com/errata/RHSA-2026:2485 https://access.redhat.com/errata/RHSA-2026:2563 https://access.redhat.com/errata/RHSA-2026:2633 https://access.redhat.com/errata/RHSA-2026:2659 https://access.redhat.com/errata/RHSA-2026:2671 https://access.redhat.com/errata/RHSA-2026:2844 https://access.redhat.com/errata/RHSA-2026:2974 https://access.redhat.com/errata/RHSA-2026:2995 https://access.redhat.com/errata/RHSA-2026:3228 https://access.redhat.com/errata/RHSA-2026:3415 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:4419 https://access.redhat.com/errata/RHSA-2026:4943 https://access.redhat.com/errata/RHSA-2026:6481 https://access.redhat.com/errata/RHSA-2026:7261 https://access.redhat.com/security/cve/CVE-2025-15467 https://bugzilla.redhat.com/2430375 https://bugzilla.redhat.com/2430376 https://bugzilla.redhat.com/2430377 https://bugzilla.redhat.com/2430378 https://bugzilla.redhat.com/2430379 https://bugzilla.redhat.com/2430380 https://bugzilla.redhat.com/2430381 https://bugzilla.redhat.com/2430386 https://bugzilla.redhat.com/2430387 https://bugzilla.redhat.com/2430388 https://bugzilla.redhat.com/2430389 https://bugzilla.redhat.com/2430390 https://bugzilla.redhat.com/show_bug.cgi?id=2430375 https://bugzilla.redhat.com/show_bug.cgi?id=2430376 https://bugzilla.redhat.com/show_bug.cgi?id=2430377 https://bugzilla.redhat.com/show_bug.cgi?id=2430378 https://bugzilla.redhat.com/show_bug.cgi?id=2430379 https://bugzilla.redhat.com/show_bug.cgi?id=2430380 https://bugzilla.redhat.com/show_bug.cgi?id=2430381 https://bugzilla.redhat.com/show_bug.cgi?id=2430386 https://bugzilla.redhat.com/show_bug.cgi?id=2430387 https://bugzilla.redhat.com/show_bug.cgi?id=2430388 https://bugzilla.redhat.com/show_bug.cgi?id=2430389 https://bugzilla.redhat.com/show_bug.cgi?id=2430390 https://cert-portal.siemens.com/productcert/html/ssa-434797.html https://cert-portal.siemens.com/productcert/html/ssa-734552.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796 https://errata.almalinux.org/9/ALSA-2026-1473.html https://errata.rockylinux.org/RLSA-2026:1473 https://github.com/advisories/GHSA-wvhq-3h88-rf6g https://github.com/guiimoraes/CVE-2025-15467 https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703 https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9 https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3 https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc https://linux.oracle.com/cve/CVE-2025-15467.html https://linux.oracle.com/errata/ELSA-2026-50081.html https://nvd.nist.gov/vuln/detail/CVE-2025-15467 https://openssl-library.org/news/secadv/20260127.txt https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json https://ubuntu.com/security/notices/USN-7980-1 https://www.cve.org/CVERecord?id=CVE-2025-15467
libcrypto3	CVE-2025-69421	HIGH	3.3.5-r0	3.3.6-r0	https://access.redhat.com/errata/RHSA-2026:1473 https://access.redhat.com/security/cve/CVE-2025-69421 https://bugzilla.redhat.com/2430375 https://bugzilla.redhat.com/2430376 https://bugzilla.redhat.com/2430377 https://bugzilla.redhat.com/2430378 https://bugzilla.redhat.com/2430379 https://bugzilla.redhat.com/2430380 https://bugzilla.redhat.com/2430381 https://bugzilla.redhat.com/2430386 https://bugzilla.redhat.com/2430387 https://bugzilla.redhat.com/2430388 https://bugzilla.redhat.com/2430389 https://bugzilla.redhat.com/2430390 https://bugzilla.redhat.com/show_bug.cgi?id=2430375 https://bugzilla.redhat.com/show_bug.cgi?id=2430376 https://bugzilla.redhat.com/show_bug.cgi?id=2430377 https://bugzilla.redhat.com/show_bug.cgi?id=2430378 https://bugzilla.redhat.com/show_bug.cgi?id=2430379 https://bugzilla.redhat.com/show_bug.cgi?id=2430380 https://bugzilla.redhat.com/show_bug.cgi?id=2430381 https://bugzilla.redhat.com/show_bug.cgi?id=2430386 https://bugzilla.redhat.com/show_bug.cgi?id=2430387 https://bugzilla.redhat.com/show_bug.cgi?id=2430388 https://bugzilla.redhat.com/show_bug.cgi?id=2430389 https://bugzilla.redhat.com/show_bug.cgi?id=2430390 https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796 https://errata.almalinux.org/9/ALSA-2026-1473.html https://errata.rockylinux.org/RLSA-2026:1473 https://github.com/advisories/GHSA-w9rv-xc8m-cmqp https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7 https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3 https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c https://linux.oracle.com/cve/CVE-2025-69421.html https://linux.oracle.com/errata/ELSA-2026-50081.html https://nvd.nist.gov/vuln/detail/CVE-2025-69421 https://openssl-library.org/news/secadv/20260127.txt https://ubuntu.com/security/notices/USN-7980-1 https://ubuntu.com/security/notices/USN-7980-2 https://www.cve.org/CVERecord?id=CVE-2025-69421
libcrypto3	CVE-2026-28387	HIGH	3.3.5-r0	3.3.7-r0	https://access.redhat.com/security/cve/CVE-2026-28387 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3 https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7 https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177 https://nvd.nist.gov/vuln/detail/CVE-2026-28387 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://ubuntu.com/security/notices/USN-8155-2 https://www.cve.org/CVERecord?id=CVE-2026-28387 https://www.openwall.com/lists/oss-security/2026/04/07/11
libcrypto3	CVE-2026-28388	HIGH	3.3.5-r0	3.3.7-r0	https://access.redhat.com/security/cve/CVE-2026-28388 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139 https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3 https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8 https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726 https://nvd.nist.gov/vuln/detail/CVE-2026-28388 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://ubuntu.com/security/notices/USN-8155-2 https://www.cve.org/CVERecord?id=CVE-2026-28388 https://www.openwall.com/lists/oss-security/2026/04/07/11
libcrypto3	CVE-2026-28389	HIGH	3.3.5-r0	3.3.7-r0	https://access.redhat.com/security/cve/CVE-2026-28389 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://github.com/advisories/GHSA-7x88-9hgc-69gf https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5 https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616 https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686 https://nvd.nist.gov/vuln/detail/CVE-2026-28389 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://ubuntu.com/security/notices/USN-8155-2 https://www.cve.org/CVERecord?id=CVE-2026-28389 https://www.openwall.com/lists/oss-security/2026/04/07/11
libcrypto3	CVE-2026-28390	HIGH	3.3.5-r0	3.3.7-r0	https://access.redhat.com/errata/RHSA-2026:22312 https://access.redhat.com/errata/RHSA-2026:22313 https://access.redhat.com/security/cve/CVE-2026-28390 https://bugzilla.redhat.com/2456314 https://bugzilla.redhat.com/show_bug.cgi?id=2456314 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28390 https://errata.almalinux.org/9/ALSA-2026-22313.html https://errata.rockylinux.org/RLSA-2026:22312 https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6 https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4 https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788 https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75 https://linux.oracle.com/cve/CVE-2026-28390.html https://linux.oracle.com/errata/ELSA-2026-50345.html https://nvd.nist.gov/vuln/detail/CVE-2026-28390 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://ubuntu.com/security/notices/USN-8155-2 https://www.cve.org/CVERecord?id=CVE-2026-28390 https://www.openwall.com/lists/oss-security/2026/04/07/11
libcrypto3	CVE-2026-45447	HIGH	3.3.5-r0	3.3.7-r1	https://access.redhat.com/errata/RHSA-2026:25237 https://access.redhat.com/errata/RHSA-2026:25239 https://access.redhat.com/errata/RHSA-2026:26275 https://access.redhat.com/errata/RHSA-2026:26319 https://access.redhat.com/errata/RHSA-2026:29197 https://access.redhat.com/errata/RHSA-2026:34102 https://access.redhat.com/errata/RHSA-2026:35869 https://access.redhat.com/errata/RHSA-2026:36215 https://access.redhat.com/errata/RHSA-2026:36217 https://access.redhat.com/errata/RHSA-2026:39009 https://access.redhat.com/errata/RHSA-2026:39012 https://access.redhat.com/errata/RHSA-2026:39981 https://access.redhat.com/errata/RHSA-2026:44438 https://access.redhat.com/errata/RHSA-2026:47735 https://access.redhat.com/errata/RHSA-2026:47737 https://access.redhat.com/errata/RHSA-2026:58563 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:59831 https://access.redhat.com/errata/RHSA-2026:66524 https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/2481898 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076 https://errata.almalinux.org/9/ALSA-2026-44438.html https://errata.rockylinux.org/RLSA-2026:25239 https://github.com/advisories/GHSA-f684-cpcq-j565 https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://linux.oracle.com/cve/CVE-2026-45447.html https://linux.oracle.com/errata/ELSA-2026-50379.html https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://openssl-library.org/news/secadv/20260609.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://ubuntu.com/security/notices/USN-8414-1 https://ubuntu.com/security/notices/USN-8414-2 https://www.cve.org/CVERecord?id=CVE-2026-45447
libcrypto3	CVE-2026-84782	HIGH	3.3.5-r0	3.3.7-r2	https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
libcurl	CVE-2026-5773	HIGH	8.14.1-r2	8.14.1-r3	http://www.openwall.com/lists/oss-security/2026/04/29/9 https://access.redhat.com/security/cve/CVE-2026-5773 https://curl.se/docs/CVE-2026-5773.html https://curl.se/docs/CVE-2026-5773.json https://github.com/advisories/GHSA-rp9q-8q5w-ch44 https://hackerone.com/reports/3650689 https://nvd.nist.gov/vuln/detail/CVE-2026-5773 https://ubuntu.com/security/notices/USN-8227-1 https://ubuntu.com/security/notices/USN-8525-1 https://www.cve.org/CVERecord?id=CVE-2026-5773
libcurl	CVE-2026-6276	HIGH	8.14.1-r2	8.14.1-r3	http://www.openwall.com/lists/oss-security/2026/04/29/13 https://access.redhat.com/security/cve/CVE-2026-6276 https://curl.se/docs/CVE-2026-6276.html https://curl.se/docs/CVE-2026-6276.json https://github.com/advisories/GHSA-2jc6-hc33-hv48 https://hackerone.com/reports/3671818 https://nvd.nist.gov/vuln/detail/CVE-2026-6276 https://ubuntu.com/security/notices/USN-8227-1 https://www.cve.org/CVERecord?id=CVE-2026-6276
libcurl	CVE-2026-8286	HIGH	8.14.1-r2	8.14.1-r3	https://access.redhat.com/errata/RHSA-2026:55439 https://access.redhat.com/security/cve/CVE-2026-8286 https://bugzilla.redhat.com/2446448 https://bugzilla.redhat.com/2446450 https://bugzilla.redhat.com/2496758 https://bugzilla.redhat.com/2496763 https://bugzilla.redhat.com/show_bug.cgi?id=2446448 https://bugzilla.redhat.com/show_bug.cgi?id=2446450 https://bugzilla.redhat.com/show_bug.cgi?id=2496758 https://bugzilla.redhat.com/show_bug.cgi?id=2496763 https://creativecommons.org/licenses/by/4.0/ https://curl.se/L7HzKXisfJ/CVE-2026-8286.md https://curl.se/docs/CVE-2026-8286.html https://curl.se/docs/CVE-2026-8286.json https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8286 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9547 https://errata.almalinux.org/9/ALSA-2026-55439.html https://errata.rockylinux.org/RLSA-2026:55439 https://github.com/advisories/GHSA-32xh-3x3c-6g6h https://hackerone.com/reports/3718195 https://linux.oracle.com/cve/CVE-2026-8286.html https://linux.oracle.com/errata/ELSA-2026-57462.html https://nvd.nist.gov/vuln/detail/CVE-2026-8286 https://ubuntu.com/security/notices/USN-8487-1 https://www.cve.org/CVERecord?id=CVE-2026-8286
libcurl	CVE-2026-8927	HIGH	8.14.1-r2	8.14.1-r3	https://access.redhat.com/errata/RHSA-2026:69126 https://access.redhat.com/security/cve/CVE-2026-8927 https://bugzilla.redhat.com/2496764 https://bugzilla.redhat.com/2496769 https://bugzilla.redhat.com/show_bug.cgi?id=2496764 https://bugzilla.redhat.com/show_bug.cgi?id=2496769 https://creativecommons.org/licenses/by/4.0/ https://curl.se/L7HzKXisfJ/CVE-2026-8927.md https://curl.se/docs/CVE-2026-8927.html https://curl.se/docs/CVE-2026-8927.json https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8458 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8927 https://errata.almalinux.org/9/ALSA-2026-69126.html https://errata.rockylinux.org/RLSA-2026:69126 https://github.com/advisories/GHSA-jr4f-4564-w3mr https://hackerone.com/reports/3744543 https://linux.oracle.com/cve/CVE-2026-8927.html https://linux.oracle.com/errata/ELSA-2026-92368.html https://nvd.nist.gov/vuln/detail/CVE-2026-8927 https://ubuntu.com/security/notices/USN-8487-1 https://ubuntu.com/security/notices/USN-8820-1 https://www.cve.org/CVERecord?id=CVE-2026-8927
libcurl	CVE-2026-92392	HIGH	8.14.1-r2	8.14.1-r3	http://www.openwall.com/lists/oss-security/2026/10/18/5 http://www.openwall.com/lists/oss-security/2026/10/18/6 https://access.redhat.com/security/cve/CVE-2026-92392 https://curl.se/docs/CVE-2026-92392.html https://curl.se/docs/CVE-2026-92392.json https://hackerone.com/reports/4030333 https://nvd.nist.gov/vuln/detail/CVE-2026-92392 https://ubuntu.com/security/notices/USN-8927-1 https://ubuntu.com/security/notices/USN-8927-2 https://www.cve.org/CVERecord?id=CVE-2026-92392
libexpat	CVE-2026-113351	HIGH	2.7.3-r0	2.10.0-r0	https://access.redhat.com/security/cve/CVE-2026-113351 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560 https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884 https://github.com/libexpat/libexpat/pull/1431 https://nvd.nist.gov/vuln/detail/CVE-2026-113351 https://www.cve.org/CVERecord?id=CVE-2026-113351 https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset
libexpat	CVE-2026-115506	HIGH	2.7.3-r0	2.10.0-r0	https://access.redhat.com/security/cve/CVE-2026-115506 https://github.com/hannob/lololol https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/issues/1160 https://github.com/libexpat/libexpat/pull/1433 https://nvd.nist.gov/vuln/detail/CVE-2026-115506 https://www.cve.org/CVERecord?id=CVE-2026-115506 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay
libexpat	CVE-2026-117610	HIGH	2.7.3-r0	2.10.0-r0	https://access.redhat.com/security/cve/CVE-2026-117610 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510 https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d https://github.com/libexpat/libexpat/pull/1444 https://nvd.nist.gov/vuln/detail/CVE-2026-117610 https://www.cve.org/CVERecord?id=CVE-2026-117610 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser
libexpat	CVE-2026-118370	HIGH	2.7.3-r0	2.10.0-r0	https://access.redhat.com/security/cve/CVE-2026-118370 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140 https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c https://github.com/libexpat/libexpat/pull/1450 https://nvd.nist.gov/vuln/detail/CVE-2026-118370 https://www.cve.org/CVERecord?id=CVE-2026-118370 https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes
libexpat	CVE-2026-25210	HIGH	2.7.3-r0	2.7.4-r0	https://access.redhat.com/security/cve/CVE-2026-25210 https://cert-portal.siemens.com/productcert/html/ssa-253495.html https://github.com/libexpat/libexpat/pull/1075 https://github.com/libexpat/libexpat/pull/1075/commits/9c2d990389e6abe2e44527eeaa8b39f16fe859c7 https://nvd.nist.gov/vuln/detail/CVE-2026-25210 https://ubuntu.com/security/notices/USN-8022-1 https://ubuntu.com/security/notices/USN-8022-2 https://ubuntu.com/security/notices/USN-8023-1 https://www.cve.org/CVERecord?id=CVE-2026-25210
libexpat	CVE-2026-45186	HIGH	2.7.3-r0	2.8.1-r0	http://www.openwall.com/lists/oss-security/2026/05/11/16 https://access.redhat.com/errata/RHSA-2026:22715 https://access.redhat.com/errata/RHSA-2026:22721 https://access.redhat.com/errata/RHSA-2026:23230 https://access.redhat.com/errata/RHSA-2026:26319 https://access.redhat.com/errata/RHSA-2026:27201 https://access.redhat.com/errata/RHSA-2026:29197 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:93443 https://access.redhat.com/security/cve/CVE-2026-45186 https://bugzilla.redhat.com/2468575 https://bugzilla.redhat.com/2550393 https://bugzilla.redhat.com/2550394 https://bugzilla.redhat.com/2550396 https://bugzilla.redhat.com/2550397 https://bugzilla.redhat.com/2550400 https://bugzilla.redhat.com/2550401 https://bugzilla.redhat.com/2550403 https://bugzilla.redhat.com/2550404 https://bugzilla.redhat.com/2550405 https://bugzilla.redhat.com/2550406 https://bugzilla.redhat.com/2550408 https://bugzilla.redhat.com/2550410 https://bugzilla.redhat.com/2550411 https://bugzilla.redhat.com/2550412 https://bugzilla.redhat.com/2550413 https://bugzilla.redhat.com/2550417 https://bugzilla.redhat.com/2550418 https://bugzilla.redhat.com/2550419 https://bugzilla.redhat.com/2550420 https://bugzilla.redhat.com/2550421 https://bugzilla.redhat.com/2550422 https://bugzilla.redhat.com/2550424 https://bugzilla.redhat.com/2550425 https://bugzilla.redhat.com/2550426 https://bugzilla.redhat.com/2550428 https://bugzilla.redhat.com/2550429 https://bugzilla.redhat.com/2550430 https://bugzilla.redhat.com/2550431 https://bugzilla.redhat.com/2550432 https://bugzilla.redhat.com/2550433 https://bugzilla.redhat.com/2550434 https://bugzilla.redhat.com/2550436 https://bugzilla.redhat.com/2550438 https://bugzilla.redhat.com/2550440 https://bugzilla.redhat.com/2550442 https://bugzilla.redhat.com/2550444 https://bugzilla.redhat.com/2550446 https://bugzilla.redhat.com/2550450 https://bugzilla.redhat.com/2550451 https://bugzilla.redhat.com/2550452 https://bugzilla.redhat.com/2550454 https://bugzilla.redhat.com/2550455 https://bugzilla.redhat.com/2550458 https://bugzilla.redhat.com/2550459 https://bugzilla.redhat.com/2550461 https://bugzilla.redhat.com/2550463 https://bugzilla.redhat.com/2550464 https://bugzilla.redhat.com/2550465 https://bugzilla.redhat.com/2550467 https://bugzilla.redhat.com/2550468 https://bugzilla.redhat.com/2550469 https://bugzilla.redhat.com/2550470 https://bugzilla.redhat.com/2550471 https://bugzilla.redhat.com/2550472 https://bugzilla.redhat.com/2550473 https://bugzilla.redhat.com/2550474 https://bugzilla.redhat.com/2550475 https://bugzilla.redhat.com/2550476 https://bugzilla.redhat.com/2550477 https://bugzilla.redhat.com/2550478 https://bugzilla.redhat.com/2550480 https://bugzilla.redhat.com/show_bug.cgi?id=2468575 https://cert-portal.siemens.com/productcert/html/ssa-082556.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45186 https://errata.almalinux.org/9/ALSA-2026-93443.html https://errata.rockylinux.org/RLSA-2026:23230 https://github.com/libexpat/libexpat/pull/1216 https://linux.oracle.com/cve/CVE-2026-45186.html https://linux.oracle.com/errata/ELSA-2026-93443.html https://nvd.nist.gov/vuln/detail/CVE-2026-45186 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45186.json https://ubuntu.com/security/notices/USN-8790-1 https://www.cve.org/CVERecord?id=CVE-2026-45186
libexpat	CVE-2026-66046	HIGH	2.7.3-r0	2.8.4-r0	https://access.redhat.com/errata/RHSA-2026:72663 https://access.redhat.com/security/cve/CVE-2026-66046 https://bugzilla.redhat.com/2538967 https://bugzilla.redhat.com/show_bug.cgi?id=2517901 https://bugzilla.redhat.com/show_bug.cgi?id=2538967 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93990 https://errata.almalinux.org/9/ALSA-2026-72663.html https://errata.rockylinux.org/RLSA-2026:72663 https://github.com/libexpat/libexpat/pull/1321 https://linux.oracle.com/cve/CVE-2026-66046.html https://linux.oracle.com/errata/ELSA-2026-74001.html https://nvd.nist.gov/vuln/detail/CVE-2026-66046 https://ubuntu.com/security/notices/USN-8813-1 https://www.cve.org/CVERecord?id=CVE-2026-66046 https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity
libexpat	CVE-2026-76641	HIGH	2.7.3-r0	2.8.4-r0	https://access.redhat.com/security/cve/CVE-2026-76641 https://github.com/libexpat/libexpat/commit/98599f6dcc2b460410881fe420f5f55d6bec63bf https://github.com/libexpat/libexpat/pull/1331 https://nvd.nist.gov/vuln/detail/CVE-2026-76641 https://ubuntu.com/security/notices/USN-8813-1 https://www.cve.org/CVERecord?id=CVE-2026-76641 https://www.vulncheck.com/advisories/expat-out-of-bounds-read-via-dtdcopy
libexpat	CVE-2026-76956	HIGH	2.7.3-r0	2.8.4-r0	https://access.redhat.com/security/cve/CVE-2026-76956 https://github.com/libexpat/libexpat/pull/1326 https://github.com/libexpat/libexpat/pull/1329 https://nvd.nist.gov/vuln/detail/CVE-2026-76956 https://www.cve.org/CVERecord?id=CVE-2026-76956
libexpat	CVE-2026-76957	HIGH	2.7.3-r0	2.8.4-r0	https://access.redhat.com/security/cve/CVE-2026-76957 https://github.com/libexpat/libexpat/pull/1322 https://github.com/libexpat/libexpat/pull/1329 https://nvd.nist.gov/vuln/detail/CVE-2026-76957 https://ubuntu.com/security/notices/USN-8813-1 https://www.cve.org/CVERecord?id=CVE-2026-76957
libexpat	CVE-2026-77214	HIGH	2.7.3-r0	2.9.0-r0	https://access.redhat.com/errata/RHSA-2026:88247 https://access.redhat.com/security/cve/CVE-2026-77214 https://bugzilla.redhat.com/2543288 https://bugzilla.redhat.com/2547476 https://bugzilla.redhat.com/show_bug.cgi?id=2543288 https://bugzilla.redhat.com/show_bug.cgi?id=2547476 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102633 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77214 https://errata.almalinux.org/9/ALSA-2026-88247.html https://errata.rockylinux.org/RLSA-2026:88247 https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0 https://github.com/libexpat/libexpat/pull/1393 https://linux.oracle.com/cve/CVE-2026-77214.html https://linux.oracle.com/errata/ELSA-2026-92323.html https://nvd.nist.gov/vuln/detail/CVE-2026-77214 https://www.cve.org/CVERecord?id=CVE-2026-77214 https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer
libexpat	CVE-2026-93990	HIGH	2.7.3-r0	2.8.5-r0	https://access.redhat.com/errata/RHSA-2026:72663 https://access.redhat.com/security/cve/CVE-2026-93990 https://blog.hartwork.org/posts/expat-2-8-5-released/ https://bugzilla.redhat.com/2538967 https://bugzilla.redhat.com/show_bug.cgi?id=2517901 https://bugzilla.redhat.com/show_bug.cgi?id=2538967 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66046 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93990 https://errata.almalinux.org/9/ALSA-2026-72663.html https://errata.rockylinux.org/RLSA-2026:72663 https://github.com/libexpat/libexpat https://github.com/libexpat/libexpat/commit/ff6e1d7e750bbe245178f51a47a965dc8342861a https://github.com/libexpat/libexpat/pull/1282 https://github.com/libexpat/libexpat/releases/tag/R_2_8_5 https://linux.oracle.com/cve/CVE-2026-93990.html https://linux.oracle.com/errata/ELSA-2026-74001.html https://nvd.nist.gov/vuln/detail/CVE-2026-93990 https://www.cve.org/CVERecord?id=CVE-2026-93990 https://www.vulncheck.com/advisories/expat-through-2.8.4-malformed-utf-16-acceptance-via-unchecked-surrogate
libpng	CVE-2026-22695	HIGH	1.6.53-r0	1.6.54-r0	https://access.redhat.com/errata/RHSA-2026:3405 https://access.redhat.com/errata/RHSA-2026:9689 https://access.redhat.com/security/cve/CVE-2026-22695 https://bugzilla.redhat.com/show_bug.cgi?id=2428824 https://bugzilla.redhat.com/show_bug.cgi?id=2428825 https://bugzilla.redhat.com/show_bug.cgi?id=2438542 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22695 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22801 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646 https://errata.almalinux.org/9/ALSA-2026-9689.html https://errata.rockylinux.org/RLSA-2026:3405 https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea https://github.com/pnggroup/libpng/commit/e4f7ad4ea2 https://github.com/pnggroup/libpng/issues/778 https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp https://linux.oracle.com/cve/CVE-2026-22695.html https://linux.oracle.com/errata/ELSA-2026-4728.html https://nvd.nist.gov/vuln/detail/CVE-2026-22695 https://ubuntu.com/security/notices/USN-7963-1 https://ubuntu.com/security/notices/USN-8035-1 https://www.cve.org/CVERecord?id=CVE-2026-22695 https://www.openwall.com/lists/oss-security/2026/01/12/7
libpng	CVE-2026-22801	HIGH	1.6.53-r0	1.6.54-r0	https://access.redhat.com/errata/RHSA-2026:3405 https://access.redhat.com/errata/RHSA-2026:9689 https://access.redhat.com/security/cve/CVE-2026-22801 https://bugzilla.redhat.com/show_bug.cgi?id=2428824 https://bugzilla.redhat.com/show_bug.cgi?id=2428825 https://bugzilla.redhat.com/show_bug.cgi?id=2438542 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22695 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22801 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646 https://errata.almalinux.org/9/ALSA-2026-9689.html https://errata.rockylinux.org/RLSA-2026:3405 https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8 https://linux.oracle.com/cve/CVE-2026-22801.html https://linux.oracle.com/errata/ELSA-2026-4728.html https://nvd.nist.gov/vuln/detail/CVE-2026-22801 https://ubuntu.com/security/notices/USN-7963-1 https://ubuntu.com/security/notices/USN-8035-1 https://www.cve.org/CVERecord?id=CVE-2026-22801 https://www.openwall.com/lists/oss-security/2026/01/12/7
libpng	CVE-2026-25646	HIGH	1.6.53-r0	1.6.55-r0	http://www.openwall.com/lists/oss-security/2026/02/09/7 https://access.redhat.com/errata/RHSA-2026:10097 https://access.redhat.com/errata/RHSA-2026:12274 https://access.redhat.com/errata/RHSA-2026:14773 https://access.redhat.com/errata/RHSA-2026:15087 https://access.redhat.com/errata/RHSA-2026:16174 https://access.redhat.com/errata/RHSA-2026:17596 https://access.redhat.com/errata/RHSA-2026:3031 https://access.redhat.com/errata/RHSA-2026:3405 https://access.redhat.com/errata/RHSA-2026:3551 https://access.redhat.com/errata/RHSA-2026:3573 https://access.redhat.com/errata/RHSA-2026:3574 https://access.redhat.com/errata/RHSA-2026:3575 https://access.redhat.com/errata/RHSA-2026:3576 https://access.redhat.com/errata/RHSA-2026:3577 https://access.redhat.com/errata/RHSA-2026:3968 https://access.redhat.com/errata/RHSA-2026:3969 https://access.redhat.com/errata/RHSA-2026:4221 https://access.redhat.com/errata/RHSA-2026:4222 https://access.redhat.com/errata/RHSA-2026:4306 https://access.redhat.com/errata/RHSA-2026:4501 https://access.redhat.com/errata/RHSA-2026:4728 https://access.redhat.com/errata/RHSA-2026:4729 https://access.redhat.com/errata/RHSA-2026:4730 https://access.redhat.com/errata/RHSA-2026:4731 https://access.redhat.com/errata/RHSA-2026:4732 https://access.redhat.com/errata/RHSA-2026:4756 https://access.redhat.com/errata/RHSA-2026:5606 https://access.redhat.com/errata/RHSA-2026:6439 https://access.redhat.com/errata/RHSA-2026:6445 https://access.redhat.com/errata/RHSA-2026:6466 https://access.redhat.com/errata/RHSA-2026:6467 https://access.redhat.com/errata/RHSA-2026:6468 https://access.redhat.com/errata/RHSA-2026:6469 https://access.redhat.com/errata/RHSA-2026:6553 https://access.redhat.com/errata/RHSA-2026:6732 https://access.redhat.com/errata/RHSA-2026:7032 https://access.redhat.com/errata/RHSA-2026:7033 https://access.redhat.com/errata/RHSA-2026:7034 https://access.redhat.com/errata/RHSA-2026:7035 https://access.redhat.com/errata/RHSA-2026:7036 https://access.redhat.com/errata/RHSA-2026:7239 https://access.redhat.com/errata/RHSA-2026:7243 https://access.redhat.com/errata/RHSA-2026:8746 https://access.redhat.com/errata/RHSA-2026:8747 https://access.redhat.com/errata/RHSA-2026:8748 https://access.redhat.com/errata/RHSA-2026:9254 https://access.redhat.com/errata/RHSA-2026:9255 https://access.redhat.com/errata/RHSA-2026:9686 https://access.redhat.com/errata/RHSA-2026:9687 https://access.redhat.com/security/cve/CVE-2026-25646 https://bugzilla.redhat.com/2428824 https://bugzilla.redhat.com/2428825 https://bugzilla.redhat.com/2438542 https://bugzilla.redhat.com/show_bug.cgi?id=2428824 https://bugzilla.redhat.com/show_bug.cgi?id=2428825 https://bugzilla.redhat.com/show_bug.cgi?id=2438542 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22695 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22801 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646 https://errata.almalinux.org/9/ALSA-2026-3405.html https://errata.rockylinux.org/RLSA-2026:3405 https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88 https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3 https://linux.oracle.com/cve/CVE-2026-25646.html https://linux.oracle.com/errata/ELSA-2026-7032.html https://nvd.nist.gov/vuln/detail/CVE-2026-25646 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json https://ubuntu.com/security/notices/USN-8035-1 https://ubuntu.com/security/notices/USN-8039-1 https://ubuntu.com/security/notices/USN-8081-1 https://www.cve.org/CVERecord?id=CVE-2026-25646
libpng-dev	CVE-2026-22695	HIGH	1.6.53-r0	1.6.54-r0	https://access.redhat.com/errata/RHSA-2026:3405 https://access.redhat.com/errata/RHSA-2026:9689 https://access.redhat.com/security/cve/CVE-2026-22695 https://bugzilla.redhat.com/show_bug.cgi?id=2428824 https://bugzilla.redhat.com/show_bug.cgi?id=2428825 https://bugzilla.redhat.com/show_bug.cgi?id=2438542 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22695 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22801 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646 https://errata.almalinux.org/9/ALSA-2026-9689.html https://errata.rockylinux.org/RLSA-2026:3405 https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea https://github.com/pnggroup/libpng/commit/e4f7ad4ea2 https://github.com/pnggroup/libpng/issues/778 https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp https://linux.oracle.com/cve/CVE-2026-22695.html https://linux.oracle.com/errata/ELSA-2026-4728.html https://nvd.nist.gov/vuln/detail/CVE-2026-22695 https://ubuntu.com/security/notices/USN-7963-1 https://ubuntu.com/security/notices/USN-8035-1 https://www.cve.org/CVERecord?id=CVE-2026-22695 https://www.openwall.com/lists/oss-security/2026/01/12/7
libpng-dev	CVE-2026-22801	HIGH	1.6.53-r0	1.6.54-r0	https://access.redhat.com/errata/RHSA-2026:3405 https://access.redhat.com/errata/RHSA-2026:9689 https://access.redhat.com/security/cve/CVE-2026-22801 https://bugzilla.redhat.com/show_bug.cgi?id=2428824 https://bugzilla.redhat.com/show_bug.cgi?id=2428825 https://bugzilla.redhat.com/show_bug.cgi?id=2438542 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22695 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22801 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646 https://errata.almalinux.org/9/ALSA-2026-9689.html https://errata.rockylinux.org/RLSA-2026:3405 https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8 https://linux.oracle.com/cve/CVE-2026-22801.html https://linux.oracle.com/errata/ELSA-2026-4728.html https://nvd.nist.gov/vuln/detail/CVE-2026-22801 https://ubuntu.com/security/notices/USN-7963-1 https://ubuntu.com/security/notices/USN-8035-1 https://www.cve.org/CVERecord?id=CVE-2026-22801 https://www.openwall.com/lists/oss-security/2026/01/12/7
libpng-dev	CVE-2026-25646	HIGH	1.6.53-r0	1.6.55-r0	http://www.openwall.com/lists/oss-security/2026/02/09/7 https://access.redhat.com/errata/RHSA-2026:10097 https://access.redhat.com/errata/RHSA-2026:12274 https://access.redhat.com/errata/RHSA-2026:14773 https://access.redhat.com/errata/RHSA-2026:15087 https://access.redhat.com/errata/RHSA-2026:16174 https://access.redhat.com/errata/RHSA-2026:17596 https://access.redhat.com/errata/RHSA-2026:3031 https://access.redhat.com/errata/RHSA-2026:3405 https://access.redhat.com/errata/RHSA-2026:3551 https://access.redhat.com/errata/RHSA-2026:3573 https://access.redhat.com/errata/RHSA-2026:3574 https://access.redhat.com/errata/RHSA-2026:3575 https://access.redhat.com/errata/RHSA-2026:3576 https://access.redhat.com/errata/RHSA-2026:3577 https://access.redhat.com/errata/RHSA-2026:3968 https://access.redhat.com/errata/RHSA-2026:3969 https://access.redhat.com/errata/RHSA-2026:4221 https://access.redhat.com/errata/RHSA-2026:4222 https://access.redhat.com/errata/RHSA-2026:4306 https://access.redhat.com/errata/RHSA-2026:4501 https://access.redhat.com/errata/RHSA-2026:4728 https://access.redhat.com/errata/RHSA-2026:4729 https://access.redhat.com/errata/RHSA-2026:4730 https://access.redhat.com/errata/RHSA-2026:4731 https://access.redhat.com/errata/RHSA-2026:4732 https://access.redhat.com/errata/RHSA-2026:4756 https://access.redhat.com/errata/RHSA-2026:5606 https://access.redhat.com/errata/RHSA-2026:6439 https://access.redhat.com/errata/RHSA-2026:6445 https://access.redhat.com/errata/RHSA-2026:6466 https://access.redhat.com/errata/RHSA-2026:6467 https://access.redhat.com/errata/RHSA-2026:6468 https://access.redhat.com/errata/RHSA-2026:6469 https://access.redhat.com/errata/RHSA-2026:6553 https://access.redhat.com/errata/RHSA-2026:6732 https://access.redhat.com/errata/RHSA-2026:7032 https://access.redhat.com/errata/RHSA-2026:7033 https://access.redhat.com/errata/RHSA-2026:7034 https://access.redhat.com/errata/RHSA-2026:7035 https://access.redhat.com/errata/RHSA-2026:7036 https://access.redhat.com/errata/RHSA-2026:7239 https://access.redhat.com/errata/RHSA-2026:7243 https://access.redhat.com/errata/RHSA-2026:8746 https://access.redhat.com/errata/RHSA-2026:8747 https://access.redhat.com/errata/RHSA-2026:8748 https://access.redhat.com/errata/RHSA-2026:9254 https://access.redhat.com/errata/RHSA-2026:9255 https://access.redhat.com/errata/RHSA-2026:9686 https://access.redhat.com/errata/RHSA-2026:9687 https://access.redhat.com/security/cve/CVE-2026-25646 https://bugzilla.redhat.com/2428824 https://bugzilla.redhat.com/2428825 https://bugzilla.redhat.com/2438542 https://bugzilla.redhat.com/show_bug.cgi?id=2428824 https://bugzilla.redhat.com/show_bug.cgi?id=2428825 https://bugzilla.redhat.com/show_bug.cgi?id=2438542 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22695 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22801 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646 https://errata.almalinux.org/9/ALSA-2026-3405.html https://errata.rockylinux.org/RLSA-2026:3405 https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88 https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3 https://linux.oracle.com/cve/CVE-2026-25646.html https://linux.oracle.com/errata/ELSA-2026-7032.html https://nvd.nist.gov/vuln/detail/CVE-2026-25646 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json https://ubuntu.com/security/notices/USN-8035-1 https://ubuntu.com/security/notices/USN-8039-1 https://ubuntu.com/security/notices/USN-8081-1 https://www.cve.org/CVERecord?id=CVE-2026-25646
libssl3	CVE-2026-31789	CRITICAL	3.3.5-r0	3.3.7-r0	https://access.redhat.com/security/cve/CVE-2026-31789 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://github.com/advisories/GHSA-j79m-9jxq-788r https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49 https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9 https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521 https://nvd.nist.gov/vuln/detail/CVE-2026-31789 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://www.cve.org/CVERecord?id=CVE-2026-31789 https://www.openwall.com/lists/oss-security/2026/04/07/11
libssl3	CVE-2025-15467	HIGH	3.3.5-r0	3.3.6-r0	http://www.openwall.com/lists/oss-security/2026/01/27/10 http://www.openwall.com/lists/oss-security/2026/02/25/6 https://access.redhat.com/errata/RHSA-2026:1472 https://access.redhat.com/errata/RHSA-2026:1473 https://access.redhat.com/errata/RHSA-2026:1496 https://access.redhat.com/errata/RHSA-2026:1503 https://access.redhat.com/errata/RHSA-2026:1519 https://access.redhat.com/errata/RHSA-2026:1594 https://access.redhat.com/errata/RHSA-2026:1733 https://access.redhat.com/errata/RHSA-2026:1736 https://access.redhat.com/errata/RHSA-2026:2072 https://access.redhat.com/errata/RHSA-2026:2077 https://access.redhat.com/errata/RHSA-2026:2485 https://access.redhat.com/errata/RHSA-2026:2563 https://access.redhat.com/errata/RHSA-2026:2633 https://access.redhat.com/errata/RHSA-2026:2659 https://access.redhat.com/errata/RHSA-2026:2671 https://access.redhat.com/errata/RHSA-2026:2844 https://access.redhat.com/errata/RHSA-2026:2974 https://access.redhat.com/errata/RHSA-2026:2995 https://access.redhat.com/errata/RHSA-2026:3228 https://access.redhat.com/errata/RHSA-2026:3415 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:4419 https://access.redhat.com/errata/RHSA-2026:4943 https://access.redhat.com/errata/RHSA-2026:6481 https://access.redhat.com/errata/RHSA-2026:7261 https://access.redhat.com/security/cve/CVE-2025-15467 https://bugzilla.redhat.com/2430375 https://bugzilla.redhat.com/2430376 https://bugzilla.redhat.com/2430377 https://bugzilla.redhat.com/2430378 https://bugzilla.redhat.com/2430379 https://bugzilla.redhat.com/2430380 https://bugzilla.redhat.com/2430381 https://bugzilla.redhat.com/2430386 https://bugzilla.redhat.com/2430387 https://bugzilla.redhat.com/2430388 https://bugzilla.redhat.com/2430389 https://bugzilla.redhat.com/2430390 https://bugzilla.redhat.com/show_bug.cgi?id=2430375 https://bugzilla.redhat.com/show_bug.cgi?id=2430376 https://bugzilla.redhat.com/show_bug.cgi?id=2430377 https://bugzilla.redhat.com/show_bug.cgi?id=2430378 https://bugzilla.redhat.com/show_bug.cgi?id=2430379 https://bugzilla.redhat.com/show_bug.cgi?id=2430380 https://bugzilla.redhat.com/show_bug.cgi?id=2430381 https://bugzilla.redhat.com/show_bug.cgi?id=2430386 https://bugzilla.redhat.com/show_bug.cgi?id=2430387 https://bugzilla.redhat.com/show_bug.cgi?id=2430388 https://bugzilla.redhat.com/show_bug.cgi?id=2430389 https://bugzilla.redhat.com/show_bug.cgi?id=2430390 https://cert-portal.siemens.com/productcert/html/ssa-434797.html https://cert-portal.siemens.com/productcert/html/ssa-734552.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796 https://errata.almalinux.org/9/ALSA-2026-1473.html https://errata.rockylinux.org/RLSA-2026:1473 https://github.com/advisories/GHSA-wvhq-3h88-rf6g https://github.com/guiimoraes/CVE-2025-15467 https://github.com/openssl/openssl/commit/2c8f0e5fa9b6ee5508a0349e4572ddb74db5a703 https://github.com/openssl/openssl/commit/5f26d4202f5b89664c5c3f3c62086276026ba9a9 https://github.com/openssl/openssl/commit/6ced0fe6b10faa560e410e3ee8d6c82f06c65ea3 https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e https://github.com/openssl/openssl/commit/d0071a0799f20cc8101730145349ed4487c268dc https://linux.oracle.com/cve/CVE-2025-15467.html https://linux.oracle.com/errata/ELSA-2026-50081.html https://nvd.nist.gov/vuln/detail/CVE-2025-15467 https://openssl-library.org/news/secadv/20260127.txt https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15467.json https://ubuntu.com/security/notices/USN-7980-1 https://www.cve.org/CVERecord?id=CVE-2025-15467
libssl3	CVE-2025-69421	HIGH	3.3.5-r0	3.3.6-r0	https://access.redhat.com/errata/RHSA-2026:1473 https://access.redhat.com/security/cve/CVE-2025-69421 https://bugzilla.redhat.com/2430375 https://bugzilla.redhat.com/2430376 https://bugzilla.redhat.com/2430377 https://bugzilla.redhat.com/2430378 https://bugzilla.redhat.com/2430379 https://bugzilla.redhat.com/2430380 https://bugzilla.redhat.com/2430381 https://bugzilla.redhat.com/2430386 https://bugzilla.redhat.com/2430387 https://bugzilla.redhat.com/2430388 https://bugzilla.redhat.com/2430389 https://bugzilla.redhat.com/2430390 https://bugzilla.redhat.com/show_bug.cgi?id=2430375 https://bugzilla.redhat.com/show_bug.cgi?id=2430376 https://bugzilla.redhat.com/show_bug.cgi?id=2430377 https://bugzilla.redhat.com/show_bug.cgi?id=2430378 https://bugzilla.redhat.com/show_bug.cgi?id=2430379 https://bugzilla.redhat.com/show_bug.cgi?id=2430380 https://bugzilla.redhat.com/show_bug.cgi?id=2430381 https://bugzilla.redhat.com/show_bug.cgi?id=2430386 https://bugzilla.redhat.com/show_bug.cgi?id=2430387 https://bugzilla.redhat.com/show_bug.cgi?id=2430388 https://bugzilla.redhat.com/show_bug.cgi?id=2430389 https://bugzilla.redhat.com/show_bug.cgi?id=2430390 https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11187 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15468 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15469 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66199 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796 https://errata.almalinux.org/9/ALSA-2026-1473.html https://errata.rockylinux.org/RLSA-2026:1473 https://github.com/advisories/GHSA-w9rv-xc8m-cmqp https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7 https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3 https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c https://linux.oracle.com/cve/CVE-2025-69421.html https://linux.oracle.com/errata/ELSA-2026-50081.html https://nvd.nist.gov/vuln/detail/CVE-2025-69421 https://openssl-library.org/news/secadv/20260127.txt https://ubuntu.com/security/notices/USN-7980-1 https://ubuntu.com/security/notices/USN-7980-2 https://www.cve.org/CVERecord?id=CVE-2025-69421
libssl3	CVE-2026-28387	HIGH	3.3.5-r0	3.3.7-r0	https://access.redhat.com/security/cve/CVE-2026-28387 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3 https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7 https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177 https://nvd.nist.gov/vuln/detail/CVE-2026-28387 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://ubuntu.com/security/notices/USN-8155-2 https://www.cve.org/CVERecord?id=CVE-2026-28387 https://www.openwall.com/lists/oss-security/2026/04/07/11
libssl3	CVE-2026-28388	HIGH	3.3.5-r0	3.3.7-r0	https://access.redhat.com/security/cve/CVE-2026-28388 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139 https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3 https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8 https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726 https://nvd.nist.gov/vuln/detail/CVE-2026-28388 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://ubuntu.com/security/notices/USN-8155-2 https://www.cve.org/CVERecord?id=CVE-2026-28388 https://www.openwall.com/lists/oss-security/2026/04/07/11
libssl3	CVE-2026-28389	HIGH	3.3.5-r0	3.3.7-r0	https://access.redhat.com/security/cve/CVE-2026-28389 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://github.com/advisories/GHSA-7x88-9hgc-69gf https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5 https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616 https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686 https://nvd.nist.gov/vuln/detail/CVE-2026-28389 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://ubuntu.com/security/notices/USN-8155-2 https://www.cve.org/CVERecord?id=CVE-2026-28389 https://www.openwall.com/lists/oss-security/2026/04/07/11
libssl3	CVE-2026-28390	HIGH	3.3.5-r0	3.3.7-r0	https://access.redhat.com/errata/RHSA-2026:22312 https://access.redhat.com/errata/RHSA-2026:22313 https://access.redhat.com/security/cve/CVE-2026-28390 https://bugzilla.redhat.com/2456314 https://bugzilla.redhat.com/show_bug.cgi?id=2456314 https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-265688.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28390 https://errata.almalinux.org/9/ALSA-2026-22313.html https://errata.rockylinux.org/RLSA-2026:22312 https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6 https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4 https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788 https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75 https://linux.oracle.com/cve/CVE-2026-28390.html https://linux.oracle.com/errata/ELSA-2026-50345.html https://nvd.nist.gov/vuln/detail/CVE-2026-28390 https://openssl-library.org/news/secadv/20260407.txt https://ubuntu.com/security/notices/USN-8155-1 https://ubuntu.com/security/notices/USN-8155-2 https://www.cve.org/CVERecord?id=CVE-2026-28390 https://www.openwall.com/lists/oss-security/2026/04/07/11
libssl3	CVE-2026-45447	HIGH	3.3.5-r0	3.3.7-r1	https://access.redhat.com/errata/RHSA-2026:25237 https://access.redhat.com/errata/RHSA-2026:25239 https://access.redhat.com/errata/RHSA-2026:26275 https://access.redhat.com/errata/RHSA-2026:26319 https://access.redhat.com/errata/RHSA-2026:29197 https://access.redhat.com/errata/RHSA-2026:34102 https://access.redhat.com/errata/RHSA-2026:35869 https://access.redhat.com/errata/RHSA-2026:36215 https://access.redhat.com/errata/RHSA-2026:36217 https://access.redhat.com/errata/RHSA-2026:39009 https://access.redhat.com/errata/RHSA-2026:39012 https://access.redhat.com/errata/RHSA-2026:39981 https://access.redhat.com/errata/RHSA-2026:44438 https://access.redhat.com/errata/RHSA-2026:47735 https://access.redhat.com/errata/RHSA-2026:47737 https://access.redhat.com/errata/RHSA-2026:58563 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:59831 https://access.redhat.com/errata/RHSA-2026:66524 https://access.redhat.com/security/cve/CVE-2026-45447 https://bugzilla.redhat.com/2481898 https://bugzilla.redhat.com/show_bug.cgi?id=2481879 https://bugzilla.redhat.com/show_bug.cgi?id=2481880 https://bugzilla.redhat.com/show_bug.cgi?id=2481881 https://bugzilla.redhat.com/show_bug.cgi?id=2481882 https://bugzilla.redhat.com/show_bug.cgi?id=2481884 https://bugzilla.redhat.com/show_bug.cgi?id=2481885 https://bugzilla.redhat.com/show_bug.cgi?id=2481887 https://bugzilla.redhat.com/show_bug.cgi?id=2481890 https://bugzilla.redhat.com/show_bug.cgi?id=2481891 https://bugzilla.redhat.com/show_bug.cgi?id=2481892 https://bugzilla.redhat.com/show_bug.cgi?id=2481893 https://bugzilla.redhat.com/show_bug.cgi?id=2481894 https://bugzilla.redhat.com/show_bug.cgi?id=2481896 https://bugzilla.redhat.com/show_bug.cgi?id=2481897 https://bugzilla.redhat.com/show_bug.cgi?id=2481898 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076 https://errata.almalinux.org/9/ALSA-2026-44438.html https://errata.rockylinux.org/RLSA-2026:25239 https://github.com/advisories/GHSA-f684-cpcq-j565 https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8 https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54 https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e https://linux.oracle.com/cve/CVE-2026-45447.html https://linux.oracle.com/errata/ELSA-2026-50379.html https://nvd.nist.gov/vuln/detail/CVE-2026-45447 https://openssl-library.org/news/secadv/20260609.txt https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json https://ubuntu.com/security/notices/USN-8414-1 https://ubuntu.com/security/notices/USN-8414-2 https://www.cve.org/CVERecord?id=CVE-2026-45447
libssl3	CVE-2026-84782	HIGH	3.3.5-r0	3.3.7-r2	https://access.redhat.com/errata/RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:80514 https://access.redhat.com/security/cve/CVE-2026-84782 https://bugzilla.redhat.com/2517560 https://bugzilla.redhat.com/2537080 https://bugzilla.redhat.com/show_bug.cgi?id=2537080 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782 https://errata.almalinux.org/9/ALSA-2026-80514.html https://errata.rockylinux.org/RLSA-2026:77396 https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943 https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628 https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58 https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c https://linux.oracle.com/cve/CVE-2026-84782.html https://linux.oracle.com/errata/ELSA-2026-85968.html https://nvd.nist.gov/vuln/detail/CVE-2026-84782 https://openssl-library.org/news/secadv/20260929.txt https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 https://ubuntu.com/security/notices/USN-8847-1 https://ubuntu.com/security/notices/USN-8847-2 https://www.cve.org/CVERecord?id=CVE-2026-84782
musl	CVE-2026-107891	HIGH	1.2.5-r9	1.2.5-r12	http://www.openwall.com/lists/oss-security/2026/10/21/18 https://access.redhat.com/security/cve/CVE-2026-107891 https://git.musl-libc.org/cgit/musl/commit/?id=7813e9119eb5fe681b6750b8a033a0490bca0941 https://musl.libc.org https://nvd.nist.gov/vuln/detail/CVE-2026-107891 https://www.cve.org/CVERecord?id=CVE-2026-107891 https://www.openwall.com/lists/musl/2026/10/21/1
musl	CVE-2026-40200	HIGH	1.2.5-r9	1.2.5-r11	http://www.openwall.com/lists/oss-security/2026/04/10/13 https://access.redhat.com/security/cve/CVE-2026-40200 https://musl.libc.org/releases.html https://nvd.nist.gov/vuln/detail/CVE-2026-40200 https://www.cve.org/CVERecord?id=CVE-2026-40200 https://www.openwall.com/lists/oss-security/2026/04/10/13
musl-utils	CVE-2026-107891	HIGH	1.2.5-r9	1.2.5-r12	http://www.openwall.com/lists/oss-security/2026/10/21/18 https://access.redhat.com/security/cve/CVE-2026-107891 https://git.musl-libc.org/cgit/musl/commit/?id=7813e9119eb5fe681b6750b8a033a0490bca0941 https://musl.libc.org https://nvd.nist.gov/vuln/detail/CVE-2026-107891 https://www.cve.org/CVERecord?id=CVE-2026-107891 https://www.openwall.com/lists/musl/2026/10/21/1
musl-utils	CVE-2026-40200	HIGH	1.2.5-r9	1.2.5-r11	http://www.openwall.com/lists/oss-security/2026/04/10/13 https://access.redhat.com/security/cve/CVE-2026-40200 https://musl.libc.org/releases.html https://nvd.nist.gov/vuln/detail/CVE-2026-40200 https://www.cve.org/CVERecord?id=CVE-2026-40200 https://www.openwall.com/lists/oss-security/2026/04/10/13
nghttp2-libs	CVE-2026-27135	HIGH	1.64.0-r0	1.68.1	http://www.openwall.com/lists/oss-security/2026/03/20/3 https://access.redhat.com/errata/RHSA-2026:10065 https://access.redhat.com/errata/RHSA-2026:11768 https://access.redhat.com/errata/RHSA-2026:13812 https://access.redhat.com/errata/RHSA-2026:14773 https://access.redhat.com/errata/RHSA-2026:14937 https://access.redhat.com/errata/RHSA-2026:15087 https://access.redhat.com/errata/RHSA-2026:16008 https://access.redhat.com/errata/RHSA-2026:16009 https://access.redhat.com/errata/RHSA-2026:16030 https://access.redhat.com/errata/RHSA-2026:16174 https://access.redhat.com/errata/RHSA-2026:17596 https://access.redhat.com/errata/RHSA-2026:19724 https://access.redhat.com/errata/RHSA-2026:19725 https://access.redhat.com/errata/RHSA-2026:20040 https://access.redhat.com/errata/RHSA-2026:20087 https://access.redhat.com/errata/RHSA-2026:21656 https://access.redhat.com/errata/RHSA-2026:21690 https://access.redhat.com/errata/RHSA-2026:21695 https://access.redhat.com/errata/RHSA-2026:25096 https://access.redhat.com/errata/RHSA-2026:27200 https://access.redhat.com/errata/RHSA-2026:27201 https://access.redhat.com/errata/RHSA-2026:6190 https://access.redhat.com/errata/RHSA-2026:7080 https://access.redhat.com/errata/RHSA-2026:7123 https://access.redhat.com/errata/RHSA-2026:7302 https://access.redhat.com/errata/RHSA-2026:7310 https://access.redhat.com/errata/RHSA-2026:7350 https://access.redhat.com/errata/RHSA-2026:7666 https://access.redhat.com/errata/RHSA-2026:7667 https://access.redhat.com/errata/RHSA-2026:7668 https://access.redhat.com/errata/RHSA-2026:7670 https://access.redhat.com/errata/RHSA-2026:7675 https://access.redhat.com/errata/RHSA-2026:7896 https://access.redhat.com/errata/RHSA-2026:7983 https://access.redhat.com/errata/RHSA-2026:8339 https://access.redhat.com/errata/RHSA-2026:8538 https://access.redhat.com/errata/RHSA-2026:8539 https://access.redhat.com/errata/RHSA-2026:8540 https://access.redhat.com/errata/RHSA-2026:8541 https://access.redhat.com/errata/RHSA-2026:8545 https://access.redhat.com/errata/RHSA-2026:8546 https://access.redhat.com/errata/RHSA-2026:8547 https://access.redhat.com/errata/RHSA-2026:8548 https://access.redhat.com/errata/RHSA-2026:8868 https://access.redhat.com/errata/RHSA-2026:9711 https://access.redhat.com/errata/RHSA-2026:9832 https://access.redhat.com/errata/RHSA-2026:9874 https://access.redhat.com/security/cve/CVE-2026-27135 https://bugzilla.redhat.com/2441268 https://bugzilla.redhat.com/2442922 https://bugzilla.redhat.com/2448754 https://bugzilla.redhat.com/2453151 https://bugzilla.redhat.com/show_bug.cgi?id=2448754 https://cert-portal.siemens.com/productcert/html/ssa-019113.html https://cert-portal.siemens.com/productcert/html/ssa-457936.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135 https://errata.almalinux.org/9/ALSA-2026-7896.html https://errata.rockylinux.org/RLSA-2026:7668 https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1 https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 https://linux.oracle.com/cve/CVE-2026-27135.html https://linux.oracle.com/errata/ELSA-2026-8339.html https://lists.debian.org/debian-lts-announce/2026/05/msg00025.html https://nvd.nist.gov/vuln/detail/CVE-2026-27135 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json https://ubuntu.com/security/notices/USN-8233-1 https://ubuntu.com/security/notices/USN-8233-2 https://www.cve.org/CVERecord?id=CVE-2026-27135
openssh	CVE-2026-123158	HIGH	9.9_p2-r0	9.9_p2-r1	https://access.redhat.com/security/cve/CVE-2026-123158 https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/ https://github.com/google/goonami-scanner/pull/277 https://github.com/leonjza/sshhole-lab https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482 https://github.com/predkambrij/sshhole-repro https://hachyderm.io/@damienmiller/117563026759098135 https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2 https://news.ycombinator.com/item?id=50377976 https://news.ycombinator.com/item?id=50378228 https://news.ycombinator.com/item?id=50379704 https://nvd.nist.gov/vuln/detail/CVE-2026-123158 https://sshhole.com https://www.cve.org/CVERecord?id=CVE-2026-123158 https://www.openssh.org/releasenotes.html#10.6p2
openssh-client-common	CVE-2026-123158	HIGH	9.9_p2-r0	9.9_p2-r1	https://access.redhat.com/security/cve/CVE-2026-123158 https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/ https://github.com/google/goonami-scanner/pull/277 https://github.com/leonjza/sshhole-lab https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482 https://github.com/predkambrij/sshhole-repro https://hachyderm.io/@damienmiller/117563026759098135 https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2 https://news.ycombinator.com/item?id=50377976 https://news.ycombinator.com/item?id=50378228 https://news.ycombinator.com/item?id=50379704 https://nvd.nist.gov/vuln/detail/CVE-2026-123158 https://sshhole.com https://www.cve.org/CVERecord?id=CVE-2026-123158 https://www.openssh.org/releasenotes.html#10.6p2
openssh-client-default	CVE-2026-123158	HIGH	9.9_p2-r0	9.9_p2-r1	https://access.redhat.com/security/cve/CVE-2026-123158 https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/ https://github.com/google/goonami-scanner/pull/277 https://github.com/leonjza/sshhole-lab https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482 https://github.com/predkambrij/sshhole-repro https://hachyderm.io/@damienmiller/117563026759098135 https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2 https://news.ycombinator.com/item?id=50377976 https://news.ycombinator.com/item?id=50378228 https://news.ycombinator.com/item?id=50379704 https://nvd.nist.gov/vuln/detail/CVE-2026-123158 https://sshhole.com https://www.cve.org/CVERecord?id=CVE-2026-123158 https://www.openssh.org/releasenotes.html#10.6p2
openssh-keygen	CVE-2026-123158	HIGH	9.9_p2-r0	9.9_p2-r1	https://access.redhat.com/security/cve/CVE-2026-123158 https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/ https://github.com/google/goonami-scanner/pull/277 https://github.com/leonjza/sshhole-lab https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482 https://github.com/predkambrij/sshhole-repro https://hachyderm.io/@damienmiller/117563026759098135 https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2 https://news.ycombinator.com/item?id=50377976 https://news.ycombinator.com/item?id=50378228 https://news.ycombinator.com/item?id=50379704 https://nvd.nist.gov/vuln/detail/CVE-2026-123158 https://sshhole.com https://www.cve.org/CVERecord?id=CVE-2026-123158 https://www.openssh.org/releasenotes.html#10.6p2
openssh-server	CVE-2026-123158	HIGH	9.9_p2-r0	9.9_p2-r1	https://access.redhat.com/security/cve/CVE-2026-123158 https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/ https://github.com/google/goonami-scanner/pull/277 https://github.com/leonjza/sshhole-lab https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482 https://github.com/predkambrij/sshhole-repro https://hachyderm.io/@damienmiller/117563026759098135 https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2 https://news.ycombinator.com/item?id=50377976 https://news.ycombinator.com/item?id=50378228 https://news.ycombinator.com/item?id=50379704 https://nvd.nist.gov/vuln/detail/CVE-2026-123158 https://sshhole.com https://www.cve.org/CVERecord?id=CVE-2026-123158 https://www.openssh.org/releasenotes.html#10.6p2
openssh-server-common	CVE-2026-123158	HIGH	9.9_p2-r0	9.9_p2-r1	https://access.redhat.com/security/cve/CVE-2026-123158 https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/ https://github.com/google/goonami-scanner/pull/277 https://github.com/leonjza/sshhole-lab https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482 https://github.com/predkambrij/sshhole-repro https://hachyderm.io/@damienmiller/117563026759098135 https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2 https://news.ycombinator.com/item?id=50377976 https://news.ycombinator.com/item?id=50378228 https://news.ycombinator.com/item?id=50379704 https://nvd.nist.gov/vuln/detail/CVE-2026-123158 https://sshhole.com https://www.cve.org/CVERecord?id=CVE-2026-123158 https://www.openssh.org/releasenotes.html#10.6p2
openssh-sftp-server	CVE-2026-123158	HIGH	9.9_p2-r0	9.9_p2-r1	https://access.redhat.com/security/cve/CVE-2026-123158 https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/ https://github.com/google/goonami-scanner/pull/277 https://github.com/leonjza/sshhole-lab https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482 https://github.com/predkambrij/sshhole-repro https://hachyderm.io/@damienmiller/117563026759098135 https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2 https://news.ycombinator.com/item?id=50377976 https://news.ycombinator.com/item?id=50378228 https://news.ycombinator.com/item?id=50379704 https://nvd.nist.gov/vuln/detail/CVE-2026-123158 https://sshhole.com https://www.cve.org/CVERecord?id=CVE-2026-123158 https://www.openssh.org/releasenotes.html#10.6p2
pcre2	CVE-2026-103111	HIGH	10.43-r0	10.43-r1	https://access.redhat.com/errata/RHSA-2026:81532 https://access.redhat.com/security/cve/CVE-2026-103111 https://bugzilla.redhat.com/2528993 https://bugzilla.redhat.com/2531743 https://bugzilla.redhat.com/2531744 https://bugzilla.redhat.com/2531745 https://bugzilla.redhat.com/2531746 https://bugzilla.redhat.com/2531747 https://bugzilla.redhat.com/2543797 https://bugzilla.redhat.com/show_bug.cgi?id=2528993 https://bugzilla.redhat.com/show_bug.cgi?id=2531743 https://bugzilla.redhat.com/show_bug.cgi?id=2531744 https://bugzilla.redhat.com/show_bug.cgi?id=2531745 https://bugzilla.redhat.com/show_bug.cgi?id=2531746 https://bugzilla.redhat.com/show_bug.cgi?id=2531747 https://bugzilla.redhat.com/show_bug.cgi?id=2543797 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161 https://errata.almalinux.org/9/ALSA-2026-81532.html https://errata.rockylinux.org/RLSA-2026:81532 https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m https://linux.oracle.com/cve/CVE-2026-103111.html https://linux.oracle.com/errata/ELSA-2026-84799.html https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html https://nvd.nist.gov/vuln/detail/CVE-2026-103111 https://ubuntu.com/security/notices/USN-8974-1 https://www.cve.org/CVERecord?id=CVE-2026-103111
pcre2	CVE-2026-86145	HIGH	10.43-r0	10.43-r1	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145 http://www.openwall.com/lists/oss-security/2026/09/05/3 https://access.redhat.com/errata/RHSA-2026:81532 https://access.redhat.com/security/cve/CVE-2026-86145 https://bugzilla.redhat.com/2528993 https://bugzilla.redhat.com/2531743 https://bugzilla.redhat.com/2531744 https://bugzilla.redhat.com/2531745 https://bugzilla.redhat.com/2531746 https://bugzilla.redhat.com/2531747 https://bugzilla.redhat.com/2543797 https://bugzilla.redhat.com/show_bug.cgi?id=2528993 https://bugzilla.redhat.com/show_bug.cgi?id=2531743 https://bugzilla.redhat.com/show_bug.cgi?id=2531744 https://bugzilla.redhat.com/show_bug.cgi?id=2531745 https://bugzilla.redhat.com/show_bug.cgi?id=2531746 https://bugzilla.redhat.com/show_bug.cgi?id=2531747 https://bugzilla.redhat.com/show_bug.cgi?id=2543797 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161 https://errata.almalinux.org/9/ALSA-2026-81532.html https://errata.rockylinux.org/RLSA-2026:81532 https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48 https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/17.1.0/BRSA-xqvt0yt0g9rb.toml https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-3r4p-g7gg-ppmf https://linux.oracle.com/cve/CVE-2026-86145.html https://linux.oracle.com/errata/ELSA-2026-84799.html https://nvd.nist.gov/vuln/detail/CVE-2026-86145 https://ubuntu.com/security/notices/USN-8974-1 https://www.cve.org/CVERecord?id=CVE-2026-86145
pcre2	CVE-2026-89157	HIGH	10.43-r0	10.43-r1	https://access.redhat.com/errata/RHSA-2026:81532 https://access.redhat.com/security/cve/CVE-2026-89157 https://bugzilla.redhat.com/2528993 https://bugzilla.redhat.com/2531743 https://bugzilla.redhat.com/2531744 https://bugzilla.redhat.com/2531745 https://bugzilla.redhat.com/2531746 https://bugzilla.redhat.com/2531747 https://bugzilla.redhat.com/2543797 https://bugzilla.redhat.com/show_bug.cgi?id=2528993 https://bugzilla.redhat.com/show_bug.cgi?id=2531743 https://bugzilla.redhat.com/show_bug.cgi?id=2531744 https://bugzilla.redhat.com/show_bug.cgi?id=2531745 https://bugzilla.redhat.com/show_bug.cgi?id=2531746 https://bugzilla.redhat.com/show_bug.cgi?id=2531747 https://bugzilla.redhat.com/show_bug.cgi?id=2543797 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161 https://errata.almalinux.org/9/ALSA-2026-81532.html https://errata.rockylinux.org/RLSA-2026:81532 https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48 https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9 https://linux.oracle.com/cve/CVE-2026-89157.html https://linux.oracle.com/errata/ELSA-2026-81613.html https://nvd.nist.gov/vuln/detail/CVE-2026-89157 https://ubuntu.com/security/notices/USN-8974-1 https://www.cve.org/CVERecord?id=CVE-2026-89157
pcre2	CVE-2026-89161	HIGH	10.43-r0	10.43-r1	https://access.redhat.com/errata/RHSA-2026:81532 https://access.redhat.com/security/cve/CVE-2026-89161 https://bugzilla.redhat.com/2528993 https://bugzilla.redhat.com/2531743 https://bugzilla.redhat.com/2531744 https://bugzilla.redhat.com/2531745 https://bugzilla.redhat.com/2531746 https://bugzilla.redhat.com/2531747 https://bugzilla.redhat.com/2543797 https://bugzilla.redhat.com/show_bug.cgi?id=2528993 https://bugzilla.redhat.com/show_bug.cgi?id=2531743 https://bugzilla.redhat.com/show_bug.cgi?id=2531744 https://bugzilla.redhat.com/show_bug.cgi?id=2531745 https://bugzilla.redhat.com/show_bug.cgi?id=2531746 https://bugzilla.redhat.com/show_bug.cgi?id=2531747 https://bugzilla.redhat.com/show_bug.cgi?id=2543797 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161 https://errata.almalinux.org/9/ALSA-2026-81532.html https://errata.rockylinux.org/RLSA-2026:81532 https://github.com/PCRE2Project/pcre2/commit/1dcd0cf42a6a7cb62cc9a7c024196733abcfda95%20%28pcre2-10.48-RC1%29 https://github.com/PCRE2Project/pcre2/pull/937 https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48 https://linux.oracle.com/cve/CVE-2026-89161.html https://linux.oracle.com/errata/ELSA-2026-84799.html https://nvd.nist.gov/vuln/detail/CVE-2026-89161 https://ubuntu.com/security/notices/USN-8974-1 https://www.cve.org/CVERecord?id=CVE-2026-89161
zlib	CVE-2026-22184	HIGH	1.3.1-r2	1.3.2-r0	https://access.redhat.com/security/cve/CVE-2026-22184 https://bugzilla.redhat.com/show_bug.cgi?id=2427688 https://cert-portal.siemens.com/productcert/html/ssa-470355.html https://github.com/madler/zlib https://github.com/madler/zlib/issues/1142 https://nvd.nist.gov/vuln/detail/CVE-2026-22184 https://seclists.org/fulldisclosure/2026/Jan/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22184.json https://www.cve.org/CVERecord?id=CVE-2026-22184 https://www.vulncheck.com/advisories/zlib-untgz-global-buffer-overflow-in-tgzfname https://zlib.net/
zlib	CVE-2026-85091	HIGH	1.3.1-r2	1.3.2-r1	https://access.redhat.com/security/cve/CVE-2026-85091 https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 https://github.com/madler/zlib https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393 https://nvd.nist.gov/vuln/detail/CVE-2026-85091 https://ubuntu.com/security/notices/USN-8954-1 https://www.cve.org/CVERecord?id=CVE-2026-85091 https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate
zlib-dev	CVE-2026-22184	HIGH	1.3.1-r2	1.3.2-r0	https://access.redhat.com/security/cve/CVE-2026-22184 https://bugzilla.redhat.com/show_bug.cgi?id=2427688 https://cert-portal.siemens.com/productcert/html/ssa-470355.html https://github.com/madler/zlib https://github.com/madler/zlib/issues/1142 https://nvd.nist.gov/vuln/detail/CVE-2026-22184 https://seclists.org/fulldisclosure/2026/Jan/3 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22184.json https://www.cve.org/CVERecord?id=CVE-2026-22184 https://www.vulncheck.com/advisories/zlib-untgz-global-buffer-overflow-in-tgzfname https://zlib.net/
zlib-dev	CVE-2026-85091	HIGH	1.3.1-r2	1.3.2-r1	https://access.redhat.com/security/cve/CVE-2026-85091 https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 https://github.com/madler/zlib https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393 https://nvd.nist.gov/vuln/detail/CVE-2026-85091 https://ubuntu.com/security/notices/USN-8954-1 https://www.cve.org/CVERecord?id=CVE-2026-85091 https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate
No Misconfigurations found
python-pkg
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
CairoSVG	CVE-2026-107378	HIGH	2.8.2	2.9.1	https://access.redhat.com/security/cve/CVE-2026-107378 https://github.com/Kozea/CairoSVG https://github.com/Kozea/CairoSVG/commit/9d63f049f9988d0ddda3eb94564ac3a50a286523 https://github.com/Kozea/CairoSVG/commit/a4d585eb374724b79676e9cceaa9e9a1a4358565 https://github.com/Kozea/CairoSVG/releases/tag/2.9.1 https://github.com/Kozea/CairoSVG/security/advisories/GHSA-c3jg-qh8m-j3h2 https://nvd.nist.gov/vuln/detail/CVE-2026-107378 https://www.cve.org/CVERecord?id=CVE-2026-107378
CairoSVG	CVE-2026-31899	HIGH	2.8.2	2.9.0	https://access.redhat.com/security/cve/CVE-2026-31899 https://github.com/Kozea/CairoSVG https://github.com/Kozea/CairoSVG/commit/6dde8685ed3f19837767bce7a13a5491e3d0e0bf https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c https://nvd.nist.gov/vuln/detail/CVE-2026-31899 https://www.cve.org/CVERecord?id=CVE-2026-31899
GitPython	CVE-2026-78676	CRITICAL	3.1.45	3.1.59	https://access.redhat.com/security/cve/CVE-2026-78676 https://advisory.echohq.com/cve/CVE-2026-78676 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-284h-m62q-gf8w https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3786.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-78676 https://www.cve.org/CVERecord?id=CVE-2026-78676 https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-config-injection
GitPython	CVE-2026-114145	HIGH	3.1.45	3.2.1	https://access.redhat.com/security/cve/CVE-2026-114145 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/97eadb888d2f99567e3113f4e455be4ca128f697 https://github.com/gitpython-developers/GitPython/pull/2264 https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7 https://nvd.nist.gov/vuln/detail/CVE-2026-114145 https://www.cve.org/CVERecord?id=CVE-2026-114145
GitPython	CVE-2026-42215	HIGH	3.1.45	3.1.47	https://access.redhat.com/security/cve/CVE-2026-42215 https://advisory.echohq.com/cve/CVE-2026-42215 https://github.com/advisories/GHSA-rpm5-65cw-6hj4 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4 https://nvd.nist.gov/vuln/detail/CVE-2026-42215 https://ubuntu.com/security/notices/USN-8303-1 https://www.cve.org/CVERecord?id=CVE-2026-42215
GitPython	CVE-2026-42284	HIGH	3.1.45	3.1.47	https://access.redhat.com/security/cve/CVE-2026-42284 https://advisory.echohq.com/cve/CVE-2026-42284 https://github.com/advisories/GHSA-x2qx-6953-8485 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485 https://nvd.nist.gov/vuln/detail/CVE-2026-42284 https://ubuntu.com/security/notices/USN-8303-1 https://www.cve.org/CVERecord?id=CVE-2026-42284 https://www.tenable.com/cve/CVE-2026-32686
GitPython	CVE-2026-44243	HIGH	3.1.45	3.1.48	https://access.redhat.com/security/cve/CVE-2026-44243 https://advisory.echohq.com/cve/CVE-2026-44243 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/releases/tag/3.1.48 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7545-fcxq-7j24 https://nvd.nist.gov/vuln/detail/CVE-2026-44243 https://ubuntu.com/security/notices/USN-8303-1 https://www.cve.org/CVERecord?id=CVE-2026-44243
GitPython	CVE-2026-44244	HIGH	3.1.45	3.1.49	https://access.redhat.com/security/cve/CVE-2026-44244 https://advisory.echohq.com/cve/CVE-2026-44244 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67 https://nvd.nist.gov/vuln/detail/CVE-2026-44244 https://ubuntu.com/security/notices/USN-8303-1 https://www.cve.org/CVERecord?id=CVE-2026-44244
GitPython	CVE-2026-67322	HIGH	3.1.45	3.1.52	https://access.redhat.com/security/cve/CVE-2026-67322 https://advisory.echohq.com/cve/CVE-2026-67322 https://github.com/advisories/GHSA-rwj8-pgh3-r573 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2 https://github.com/gitpython-developers/GitPython/pull/2172 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.52 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573 https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3842.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-67322 https://pypi.org/project/gitpython https://www.cve.org/CVERecord?id=CVE-2026-67322 https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-clone-from
GitPython	CVE-2026-67323	HIGH	3.1.45	3.1.51	https://access.redhat.com/security/cve/CVE-2026-67323 https://advisory.echohq.com/cve/CVE-2026-67323 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/701ce32fe5ba8cb622c0e0342a376a6beb47d738 https://github.com/gitpython-developers/GitPython/pull/2163 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.51 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v https://nvd.nist.gov/vuln/detail/CVE-2026-67323 https://www.cve.org/CVERecord?id=CVE-2026-67323 https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-unguarded-git-options
GitPython	CVE-2026-67325	HIGH	3.1.45	3.1.51	https://access.redhat.com/security/cve/CVE-2026-67325 https://advisory.echohq.com/cve/CVE-2026-67325 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/56806080c1348749b07daa4a2024ce47b3cad285 https://github.com/gitpython-developers/GitPython/pull/2161 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.51 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx https://nvd.nist.gov/vuln/detail/CVE-2026-67325 https://www.cve.org/CVERecord?id=CVE-2026-67325 https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-option-prefix-abbreviation
GitPython	CVE-2026-69097	HIGH	3.1.45	3.1.53	https://access.redhat.com/security/cve/CVE-2026-69097 https://advisory.echohq.com/cve/GHSA-3rp5-jjmw-4wv2 https://github.com/advisories/GHSA-3rp5-jjmw-4wv2 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/1ed1b924f4e2d2ee7bab296df77b978af21853f1 https://github.com/gitpython-developers/GitPython/pull/2176 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.53 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3rp5-jjmw-4wv2 https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3981.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-69097 https://www.cve.org/CVERecord?id=CVE-2026-69097 https://www.vulncheck.com/advisories/gitpython-before-config-injection-via-submodule-names
GitPython	CVE-2026-76218	HIGH	3.1.45	3.1.58	https://access.redhat.com/security/cve/CVE-2026-76218 https://advisory.echohq.com/cve/CVE-2026-76218 https://github.com/advisories/GHSA-9rj7-rf2p-w77r https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/d9ddb55bdc66 https://github.com/gitpython-developers/GitPython/pull/2204 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r https://nvd.nist.gov/vuln/detail/CVE-2026-76218 https://www.cve.org/CVERecord?id=CVE-2026-76218 https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-repo-init
GitPython	CVE-2026-76219	HIGH	3.1.45	3.1.58	https://access.redhat.com/security/cve/CVE-2026-76219 https://advisory.echohq.com/cve/CVE-2026-76219 https://github.com/advisories/GHSA-4gmw-gg2m-w46p https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/9b5dcaf85da5946dbf69dcd53f9edba08f760b32 https://github.com/gitpython-developers/GitPython/pull/2204 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p https://nvd.nist.gov/vuln/detail/CVE-2026-76219 https://www.cve.org/CVERecord?id=CVE-2026-76219 https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-read-tree
GitPython	CVE-2026-76220	HIGH	3.1.45	3.1.58	https://access.redhat.com/security/cve/CVE-2026-76220 https://advisory.echohq.com/cve/CVE-2026-76220 https://github.com/advisories/GHSA-wvpp-8hx9-p66j https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/96a888f4d782cb2f80452148e48e60ce4af6d541 https://github.com/gitpython-developers/GitPython/pull/2204 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j https://nvd.nist.gov/vuln/detail/CVE-2026-76220 https://www.cve.org/CVERecord?id=CVE-2026-76220 https://www.vulncheck.com/advisories/gitpython-before-command-execution-via-split-single-char-options
GitPython	CVE-2026-76222	HIGH	3.1.45	3.1.58	https://access.redhat.com/security/cve/CVE-2026-76222 https://advisory.echohq.com/cve/CVE-2026-76222 https://github.com/advisories/GHSA-hmq2-w58f-27jc https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/4299c990e1ca21896f9485277caf7bb0ae5b404c https://github.com/gitpython-developers/GitPython/commit/e4b8e7d026ca6abb4cf604f8e77093432ce23c06 https://github.com/gitpython-developers/GitPython/pull/2202 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3784.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-76222 https://www.cve.org/CVERecord?id=CVE-2026-76222 https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-gitmodules-submodule-name
GitPython	CVE-2026-78675	HIGH	3.1.45	3.1.59	https://access.redhat.com/security/cve/CVE-2026-78675 https://advisory.echohq.com/cve/CVE-2026-78675 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/ef7568e3b317ce617eacda39b8b54dcdff8c3b5c https://github.com/gitpython-developers/GitPython/pull/2211 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.59 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-7833-fr7j-v32q https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3785.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-78675 https://www.cve.org/CVERecord?id=CVE-2026-78675 https://www.vulncheck.com/advisories/gitpython-before-local-file-content-disclosure-via-gitmodules
GitPython	CVE-2026-78677	HIGH	3.1.45	3.1.59	https://access.redhat.com/security/cve/CVE-2026-78677 https://advisory.echohq.com/cve/CVE-2026-78677 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/b68afff45af0f49e79a3e2d2162018986b37ad5d https://github.com/gitpython-developers/GitPython/pull/2210 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.59 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-8mcc-hrx5-hvxc https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3787.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-78677 https://www.cve.org/CVERecord?id=CVE-2026-78677 https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-separate-git-dir
GitPython	CVE-2026-87817	HIGH	3.1.45	3.1.60	https://access.redhat.com/security/cve/CVE-2026-87817 https://advisory.echohq.com/cve/CVE-2026-87817 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/c7cf4d13b1ed0a2e70f2a1f3c6b4fc6c2652cf0b https://github.com/gitpython-developers/GitPython/pull/2218 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.60 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-239g-whfq-7xj9 https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3982.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-87817 https://www.cve.org/CVERecord?id=CVE-2026-87817 https://www.vulncheck.com/advisories/gitpython-before-3.1.60-remote-code-execution-via-git-directory-impersonation
GitPython	CVE-2026-87819	HIGH	3.1.45	3.1.60	https://access.redhat.com/security/cve/CVE-2026-87819 https://advisory.echohq.com/cve/CVE-2026-87819 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/751473a5f3221d6f989291cbebcc404353fd3ba8 https://github.com/gitpython-developers/GitPython/pull/2215 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.60 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3984.yaml https://nvd.nist.gov/vuln/detail/CVE-2026-87819 https://www.cve.org/CVERecord?id=CVE-2026-87819 https://www.vulncheck.com/advisories/gitpython-before-3.1.60-denial-of-service-via-redos
GitPython	GHSA-23mf-xhv8-69c2	HIGH	3.1.45	3.2.0	https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/8da65080849a56a2fc9f3e7817bbf0524e8397d5 https://github.com/gitpython-developers/GitPython/pull/2233 https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
GitPython	GHSA-3f7w-8rr8-f37f	HIGH	3.1.45	3.1.57	https://advisory.echohq.com/cve/GHSA-3f7w-8rr8-f37f https://github.com/advisories/GHSA-3f7w-8rr8-f37f https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/3af0c2516c5e18c829da30338614688f6b69b49c https://github.com/gitpython-developers/GitPython/pull/2193 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.57 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f
GitPython	GHSA-6p8h-3wgx-97gf	HIGH	3.1.45	3.1.54	https://advisory.echohq.com/cve/GHSA-6p8h-3wgx-97gf https://github.com/advisories/GHSA-6p8h-3wgx-97gf https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/ffcb5359e87619f4fe4a70a4aff5f08c5580ba97 https://github.com/gitpython-developers/GitPython/pull/2180 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.54 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf
GitPython	GHSA-94p4-4cq8-9g67	HIGH	3.1.45	3.1.55	https://advisory.echohq.com/cve/GHSA-94p4-4cq8-9g67 https://github.com/advisories/GHSA-94p4-4cq8-9g67 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/863417457a0633db7ea5aed4fd01e0b291a41162 https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.55 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67 https://github.com/pypa/advisory-database/tree/main/vulns/gitpython/PYSEC-2026-3951.yaml https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-remote-add
GitPython	GHSA-f9j4-qggq-h239	HIGH	3.1.45	3.2.0	https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/790bb3164948625ffb043d2a162425d55923fe9a https://github.com/gitpython-developers/GitPython/pull/2247 https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
GitPython	GHSA-fjr4-x663-mwxc	HIGH	3.1.45	3.1.54	https://advisory.echohq.com/cve/GHSA-fjr4-x663-mwxc https://github.com/advisories/GHSA-fjr4-x663-mwxc https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/1d51b891d7f236044a6aa17498ec682b63dad6e6 https://github.com/gitpython-developers/GitPython/pull/2180 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.54 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc
GitPython	GHSA-jm78-9fvv-mhgr	HIGH	3.1.45	3.1.58	https://advisory.echohq.com/cve/GHSA-jm78-9fvv-mhgr https://github.com/advisories/GHSA-jm78-9fvv-mhgr https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/a495ccd3b547ccd60b2187215823b72a9c0188bf https://github.com/gitpython-developers/GitPython/pull/2204 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.58 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr
GitPython	GHSA-m64x-33q8-m5h7	HIGH	3.1.45	3.2.0	https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/8290c98d35465a38090cdcc1b17be69967092a15 https://github.com/gitpython-developers/GitPython/pull/2253 https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
GitPython	GHSA-mv93-w799-cj2w	HIGH	3.1.45	3.1.50	https://advisory.echohq.com/cve/GHSA-mv93-w799-cj2w https://github.com/advisories/GHSA-mv93-w799-cj2w https://github.com/advisories/GHSA-rpm5-65cw-6hj4 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-mv93-w799-cj2w
GitPython	GHSA-r9mr-m37c-5fr3	HIGH	3.1.45	3.1.54	https://advisory.echohq.com/cve/GHSA-r9mr-m37c-5fr3 https://github.com/advisories/GHSA-r9mr-m37c-5fr3 https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/e8d0fbf774d1f6baa3b481adfe48bd262e43b453 https://github.com/gitpython-developers/GitPython/pull/2180 https://github.com/gitpython-developers/GitPython/releases/tag/3.1.54 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3
GitPython	GHSA-w8jc-g24h-crhw	HIGH	3.1.45	3.2.0	https://github.com/gitpython-developers/GitPython https://github.com/gitpython-developers/GitPython/commit/9ad28cc4c7176d22cd6181d69805058a719dd03b https://github.com/gitpython-developers/GitPython/pull/2251 https://github.com/gitpython-developers/GitPython/releases/tag/3.2.0 https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
certifi	GHSA-6q48-6c7w-9gw2	CRITICAL	2025.11.12	2026.10.18	https://advisory.echohq.com/cve/GHSA-6q48-6c7w-9gw2 https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576 https://emudhra.we-have-a-problem.com https://github.com/advisories/GHSA-6q48-6c7w-9gw2 https://github.com/certifi/python-certifi https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2
jaraco.context	CVE-2026-23949	HIGH	5.3.0	6.1.0	https://access.redhat.com/security/cve/CVE-2026-23949 https://advisory.echohq.com/cve/CVE-2026-23949 https://github.com/jaraco/jaraco.context https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91 https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9 https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2 https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76 https://nvd.nist.gov/vuln/detail/CVE-2026-23949 https://ubuntu.com/security/notices/USN-7979-1 https://www.cve.org/CVERecord?id=CVE-2026-23949
msgpack	CVE-2026-114613	HIGH	1.1.2	1.2.3	https://access.redhat.com/security/cve/CVE-2026-114613 https://advisory.echohq.com/cve/CVE-2026-114613 https://github.com/msgpack/msgpack-python https://github.com/msgpack/msgpack-python/commit/620b0eb4c89cd72d4098564537624d9dbb2ce141 https://github.com/msgpack/msgpack-python/releases/tag/v1.2.3 https://github.com/msgpack/msgpack-python/security/advisories/GHSA-j586-36cw-2gc2 https://nvd.nist.gov/vuln/detail/CVE-2026-114613 https://www.cve.org/CVERecord?id=CVE-2026-114613
msgpack	GHSA-6v7p-g79w-8964	HIGH	1.1.2	1.2.1	https://advisory.echohq.com/cve/GHSA-6v7p-g79w-8964 https://github.com/advisories/GHSA-6v7p-g79w-8964 https://github.com/msgpack/msgpack-python https://github.com/msgpack/msgpack-python/commit/2c56ddb5d0025ed481d962c0f5d62d19dec7476d https://github.com/msgpack/msgpack-python/releases/tag/v1.2.1 https://github.com/msgpack/msgpack-python/security/advisories/GHSA-6v7p-g79w-8964
pillow	CVE-2026-112393	CRITICAL	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:93077 https://access.redhat.com/security/cve/CVE-2026-112393 https://advisory.echohq.com/cve/CVE-2026-112393 https://bugzilla.redhat.com/2555846 https://bugzilla.redhat.com/2555867 https://bugzilla.redhat.com/2555889 https://bugzilla.redhat.com/show_bug.cgi?id=2555846 https://bugzilla.redhat.com/show_bug.cgi?id=2555867 https://bugzilla.redhat.com/show_bug.cgi?id=2555889 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900 https://errata.almalinux.org/8/ALSA-2026-93077.html https://errata.rockylinux.org/RLSA-2026:93077 https://getsafety.com/v/SFTY-20261021-13350/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf https://linux.oracle.com/cve/CVE-2026-112393.html https://linux.oracle.com/errata/ELSA-2026-93077.html https://nvd.nist.gov/vuln/detail/CVE-2026-112393 https://www.cve.org/CVERecord?id=CVE-2026-112393
pillow	CVE-2026-112398	CRITICAL	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:93077 https://access.redhat.com/security/cve/CVE-2026-112398 https://advisory.echohq.com/cve/CVE-2026-112398 https://bugzilla.redhat.com/2555846 https://bugzilla.redhat.com/2555867 https://bugzilla.redhat.com/2555889 https://bugzilla.redhat.com/show_bug.cgi?id=2555846 https://bugzilla.redhat.com/show_bug.cgi?id=2555867 https://bugzilla.redhat.com/show_bug.cgi?id=2555889 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900 https://errata.almalinux.org/8/ALSA-2026-93077.html https://errata.rockylinux.org/RLSA-2026:93077 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h https://linux.oracle.com/cve/CVE-2026-112398.html https://linux.oracle.com/errata/ELSA-2026-93077.html https://nvd.nist.gov/vuln/detail/CVE-2026-112398 https://www.cve.org/CVERecord?id=CVE-2026-112398
pillow	CVE-2026-112403	CRITICAL	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112403 https://advisory.echohq.com/cve/CVE-2026-112403 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782 https://nvd.nist.gov/vuln/detail/CVE-2026-112403 https://www.cve.org/CVERecord?id=CVE-2026-112403
pillow	CVE-2026-112900	CRITICAL	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:93077 https://access.redhat.com/security/cve/CVE-2026-112900 https://advisory.echohq.com/cve/CVE-2026-112900 https://bugzilla.redhat.com/2555846 https://bugzilla.redhat.com/2555867 https://bugzilla.redhat.com/2555889 https://bugzilla.redhat.com/show_bug.cgi?id=2555846 https://bugzilla.redhat.com/show_bug.cgi?id=2555867 https://bugzilla.redhat.com/show_bug.cgi?id=2555889 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900 https://errata.almalinux.org/8/ALSA-2026-93077.html https://errata.rockylinux.org/RLSA-2026:93077 https://getsafety.com/v/SFTY-20261021-11431/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh https://linux.oracle.com/cve/CVE-2026-112900.html https://linux.oracle.com/errata/ELSA-2026-93077.html https://nvd.nist.gov/vuln/detail/CVE-2026-112900 https://www.cve.org/CVERecord?id=CVE-2026-112900
pillow	CVE-2026-96639	CRITICAL	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-96639 https://advisory.echohq.com/cve/CVE-2026-96639 https://github.com/advisories/GHSA-v9pv-5gc8-w2m6 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/78d97d994579aef81aafe123773d525f40f2522a https://github.com/python-pillow/Pillow/pull/10105 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-v9pv-5gc8-w2m6 https://nvd.nist.gov/vuln/detail/CVE-2026-96639 https://www.cve.org/CVERecord?id=CVE-2026-96639
pillow	CVE-2026-112390	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112390 https://advisory.echohq.com/cve/CVE-2026-112390 https://getsafety.com/v/SFTY-20261021-15476/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9 https://nvd.nist.gov/vuln/detail/CVE-2026-112390 https://www.cve.org/CVERecord?id=CVE-2026-112390
pillow	CVE-2026-112392	HIGH	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:92639 https://access.redhat.com/security/cve/CVE-2026-112392 https://advisory.echohq.com/cve/CVE-2026-112392 https://bugzilla.redhat.com/2555851 https://bugzilla.redhat.com/2555859 https://bugzilla.redhat.com/2555866 https://bugzilla.redhat.com/2555868 https://bugzilla.redhat.com/2555873 https://bugzilla.redhat.com/2555875 https://bugzilla.redhat.com/2555879 https://bugzilla.redhat.com/2556322 https://bugzilla.redhat.com/2558576 https://bugzilla.redhat.com/2559393 https://bugzilla.redhat.com/show_bug.cgi?id=2555851 https://bugzilla.redhat.com/show_bug.cgi?id=2555859 https://bugzilla.redhat.com/show_bug.cgi?id=2555866 https://bugzilla.redhat.com/show_bug.cgi?id=2555868 https://bugzilla.redhat.com/show_bug.cgi?id=2555873 https://bugzilla.redhat.com/show_bug.cgi?id=2555875 https://bugzilla.redhat.com/show_bug.cgi?id=2555879 https://bugzilla.redhat.com/show_bug.cgi?id=2556322 https://bugzilla.redhat.com/show_bug.cgi?id=2558576 https://bugzilla.redhat.com/show_bug.cgi?id=2559393 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640 https://errata.almalinux.org/8/ALSA-2026-92639.html https://errata.rockylinux.org/RLSA-2026:92639 https://getsafety.com/v/SFTY-20261021-39022/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc https://linux.oracle.com/cve/CVE-2026-112392.html https://linux.oracle.com/errata/ELSA-2026-92639.html https://nvd.nist.gov/vuln/detail/CVE-2026-112392 https://www.cve.org/CVERecord?id=CVE-2026-112392
pillow	CVE-2026-112397	HIGH	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:92639 https://access.redhat.com/security/cve/CVE-2026-112397 https://advisory.echohq.com/cve/CVE-2026-112397 https://bugzilla.redhat.com/2555851 https://bugzilla.redhat.com/2555859 https://bugzilla.redhat.com/2555866 https://bugzilla.redhat.com/2555868 https://bugzilla.redhat.com/2555873 https://bugzilla.redhat.com/2555875 https://bugzilla.redhat.com/2555879 https://bugzilla.redhat.com/2556322 https://bugzilla.redhat.com/2558576 https://bugzilla.redhat.com/2559393 https://bugzilla.redhat.com/show_bug.cgi?id=2555851 https://bugzilla.redhat.com/show_bug.cgi?id=2555859 https://bugzilla.redhat.com/show_bug.cgi?id=2555866 https://bugzilla.redhat.com/show_bug.cgi?id=2555868 https://bugzilla.redhat.com/show_bug.cgi?id=2555873 https://bugzilla.redhat.com/show_bug.cgi?id=2555875 https://bugzilla.redhat.com/show_bug.cgi?id=2555879 https://bugzilla.redhat.com/show_bug.cgi?id=2556322 https://bugzilla.redhat.com/show_bug.cgi?id=2558576 https://bugzilla.redhat.com/show_bug.cgi?id=2559393 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640 https://errata.almalinux.org/8/ALSA-2026-92639.html https://errata.rockylinux.org/RLSA-2026:92639 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8 https://linux.oracle.com/cve/CVE-2026-112397.html https://linux.oracle.com/errata/ELSA-2026-92639.html https://nvd.nist.gov/vuln/detail/CVE-2026-112397 https://www.cve.org/CVERecord?id=CVE-2026-112397
pillow	CVE-2026-112399	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112399 https://advisory.echohq.com/cve/CVE-2026-112399 https://getsafety.com/v/SFTY-20261021-76942/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9 https://nvd.nist.gov/vuln/detail/CVE-2026-112399 https://www.cve.org/CVERecord?id=CVE-2026-112399
pillow	CVE-2026-112400	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112400 https://advisory.echohq.com/cve/CVE-2026-112400 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg https://nvd.nist.gov/vuln/detail/CVE-2026-112400 https://www.cve.org/CVERecord?id=CVE-2026-112400
pillow	CVE-2026-112402	HIGH	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:92639 https://access.redhat.com/security/cve/CVE-2026-112402 https://advisory.echohq.com/cve/CVE-2026-112402 https://bugzilla.redhat.com/2555851 https://bugzilla.redhat.com/2555859 https://bugzilla.redhat.com/2555866 https://bugzilla.redhat.com/2555868 https://bugzilla.redhat.com/2555873 https://bugzilla.redhat.com/2555875 https://bugzilla.redhat.com/2555879 https://bugzilla.redhat.com/2556322 https://bugzilla.redhat.com/2558576 https://bugzilla.redhat.com/2559393 https://bugzilla.redhat.com/show_bug.cgi?id=2555851 https://bugzilla.redhat.com/show_bug.cgi?id=2555859 https://bugzilla.redhat.com/show_bug.cgi?id=2555866 https://bugzilla.redhat.com/show_bug.cgi?id=2555868 https://bugzilla.redhat.com/show_bug.cgi?id=2555873 https://bugzilla.redhat.com/show_bug.cgi?id=2555875 https://bugzilla.redhat.com/show_bug.cgi?id=2555879 https://bugzilla.redhat.com/show_bug.cgi?id=2556322 https://bugzilla.redhat.com/show_bug.cgi?id=2558576 https://bugzilla.redhat.com/show_bug.cgi?id=2559393 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640 https://errata.almalinux.org/8/ALSA-2026-92639.html https://errata.rockylinux.org/RLSA-2026:92639 https://getsafety.com/v/SFTY-20261021-43268/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm https://linux.oracle.com/cve/CVE-2026-112402.html https://linux.oracle.com/errata/ELSA-2026-92639.html https://nvd.nist.gov/vuln/detail/CVE-2026-112402 https://www.cve.org/CVERecord?id=CVE-2026-112402
pillow	CVE-2026-112404	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112404 https://advisory.echohq.com/cve/CVE-2026-112404 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96 https://nvd.nist.gov/vuln/detail/CVE-2026-112404 https://www.cve.org/CVERecord?id=CVE-2026-112404
pillow	CVE-2026-112406	HIGH	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:92639 https://access.redhat.com/security/cve/CVE-2026-112406 https://advisory.echohq.com/cve/CVE-2026-112406 https://bugzilla.redhat.com/2555851 https://bugzilla.redhat.com/2555859 https://bugzilla.redhat.com/2555866 https://bugzilla.redhat.com/2555868 https://bugzilla.redhat.com/2555873 https://bugzilla.redhat.com/2555875 https://bugzilla.redhat.com/2555879 https://bugzilla.redhat.com/2556322 https://bugzilla.redhat.com/2558576 https://bugzilla.redhat.com/2559393 https://bugzilla.redhat.com/show_bug.cgi?id=2555851 https://bugzilla.redhat.com/show_bug.cgi?id=2555859 https://bugzilla.redhat.com/show_bug.cgi?id=2555866 https://bugzilla.redhat.com/show_bug.cgi?id=2555868 https://bugzilla.redhat.com/show_bug.cgi?id=2555873 https://bugzilla.redhat.com/show_bug.cgi?id=2555875 https://bugzilla.redhat.com/show_bug.cgi?id=2555879 https://bugzilla.redhat.com/show_bug.cgi?id=2556322 https://bugzilla.redhat.com/show_bug.cgi?id=2558576 https://bugzilla.redhat.com/show_bug.cgi?id=2559393 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640 https://errata.almalinux.org/8/ALSA-2026-92639.html https://errata.rockylinux.org/RLSA-2026:92639 https://getsafety.com/v/SFTY-20261021-82408/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58 https://linux.oracle.com/cve/CVE-2026-112406.html https://linux.oracle.com/errata/ELSA-2026-92639.html https://nvd.nist.gov/vuln/detail/CVE-2026-112406 https://www.cve.org/CVERecord?id=CVE-2026-112406
pillow	CVE-2026-112892	HIGH	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:92639 https://access.redhat.com/security/cve/CVE-2026-112892 https://advisory.echohq.com/cve/CVE-2026-112892 https://bugzilla.redhat.com/2555851 https://bugzilla.redhat.com/2555859 https://bugzilla.redhat.com/2555866 https://bugzilla.redhat.com/2555868 https://bugzilla.redhat.com/2555873 https://bugzilla.redhat.com/2555875 https://bugzilla.redhat.com/2555879 https://bugzilla.redhat.com/2556322 https://bugzilla.redhat.com/2558576 https://bugzilla.redhat.com/2559393 https://bugzilla.redhat.com/show_bug.cgi?id=2555851 https://bugzilla.redhat.com/show_bug.cgi?id=2555859 https://bugzilla.redhat.com/show_bug.cgi?id=2555866 https://bugzilla.redhat.com/show_bug.cgi?id=2555868 https://bugzilla.redhat.com/show_bug.cgi?id=2555873 https://bugzilla.redhat.com/show_bug.cgi?id=2555875 https://bugzilla.redhat.com/show_bug.cgi?id=2555879 https://bugzilla.redhat.com/show_bug.cgi?id=2556322 https://bugzilla.redhat.com/show_bug.cgi?id=2558576 https://bugzilla.redhat.com/show_bug.cgi?id=2559393 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640 https://errata.almalinux.org/8/ALSA-2026-92639.html https://errata.rockylinux.org/RLSA-2026:92639 https://getsafety.com/v/SFTY-20261021-81271/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx https://linux.oracle.com/cve/CVE-2026-112892.html https://linux.oracle.com/errata/ELSA-2026-92639.html https://nvd.nist.gov/vuln/detail/CVE-2026-112892 https://www.cve.org/CVERecord?id=CVE-2026-112892
pillow	CVE-2026-112893	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112893 https://advisory.echohq.com/cve/CVE-2026-112893 https://getsafety.com/v/SFTY-20261021-31867/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47 https://nvd.nist.gov/vuln/detail/CVE-2026-112893 https://www.cve.org/CVERecord?id=CVE-2026-112893
pillow	CVE-2026-112894	HIGH	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:92639 https://access.redhat.com/security/cve/CVE-2026-112894 https://advisory.echohq.com/cve/CVE-2026-112894 https://bugzilla.redhat.com/2555851 https://bugzilla.redhat.com/2555859 https://bugzilla.redhat.com/2555866 https://bugzilla.redhat.com/2555868 https://bugzilla.redhat.com/2555873 https://bugzilla.redhat.com/2555875 https://bugzilla.redhat.com/2555879 https://bugzilla.redhat.com/2556322 https://bugzilla.redhat.com/2558576 https://bugzilla.redhat.com/2559393 https://bugzilla.redhat.com/show_bug.cgi?id=2555851 https://bugzilla.redhat.com/show_bug.cgi?id=2555859 https://bugzilla.redhat.com/show_bug.cgi?id=2555866 https://bugzilla.redhat.com/show_bug.cgi?id=2555868 https://bugzilla.redhat.com/show_bug.cgi?id=2555873 https://bugzilla.redhat.com/show_bug.cgi?id=2555875 https://bugzilla.redhat.com/show_bug.cgi?id=2555879 https://bugzilla.redhat.com/show_bug.cgi?id=2556322 https://bugzilla.redhat.com/show_bug.cgi?id=2558576 https://bugzilla.redhat.com/show_bug.cgi?id=2559393 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640 https://errata.almalinux.org/8/ALSA-2026-92639.html https://errata.rockylinux.org/RLSA-2026:92639 https://getsafety.com/v/SFTY-20261021-17221/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm https://linux.oracle.com/cve/CVE-2026-112894.html https://linux.oracle.com/errata/ELSA-2026-92639.html https://nvd.nist.gov/vuln/detail/CVE-2026-112894 https://www.cve.org/CVERecord?id=CVE-2026-112894
pillow	CVE-2026-112895	HIGH	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:92639 https://access.redhat.com/security/cve/CVE-2026-112895 https://advisory.echohq.com/cve/CVE-2026-112895 https://bugzilla.redhat.com/2555851 https://bugzilla.redhat.com/2555859 https://bugzilla.redhat.com/2555866 https://bugzilla.redhat.com/2555868 https://bugzilla.redhat.com/2555873 https://bugzilla.redhat.com/2555875 https://bugzilla.redhat.com/2555879 https://bugzilla.redhat.com/2556322 https://bugzilla.redhat.com/2558576 https://bugzilla.redhat.com/2559393 https://bugzilla.redhat.com/show_bug.cgi?id=2555851 https://bugzilla.redhat.com/show_bug.cgi?id=2555859 https://bugzilla.redhat.com/show_bug.cgi?id=2555866 https://bugzilla.redhat.com/show_bug.cgi?id=2555868 https://bugzilla.redhat.com/show_bug.cgi?id=2555873 https://bugzilla.redhat.com/show_bug.cgi?id=2555875 https://bugzilla.redhat.com/show_bug.cgi?id=2555879 https://bugzilla.redhat.com/show_bug.cgi?id=2556322 https://bugzilla.redhat.com/show_bug.cgi?id=2558576 https://bugzilla.redhat.com/show_bug.cgi?id=2559393 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640 https://errata.almalinux.org/8/ALSA-2026-92639.html https://errata.rockylinux.org/RLSA-2026:92639 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528 https://linux.oracle.com/cve/CVE-2026-112895.html https://linux.oracle.com/errata/ELSA-2026-92639.html https://nvd.nist.gov/vuln/detail/CVE-2026-112895 https://www.cve.org/CVERecord?id=CVE-2026-112895
pillow	CVE-2026-112896	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112896 https://advisory.echohq.com/cve/CVE-2026-112896 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p https://nvd.nist.gov/vuln/detail/CVE-2026-112896 https://www.cve.org/CVERecord?id=CVE-2026-112896
pillow	CVE-2026-112897	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112897 https://advisory.echohq.com/cve/CVE-2026-112897 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg https://nvd.nist.gov/vuln/detail/CVE-2026-112897 https://www.cve.org/CVERecord?id=CVE-2026-112897
pillow	CVE-2026-112902	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-112902 https://advisory.echohq.com/cve/CVE-2026-112902 https://getsafety.com/v/SFTY-20261021-68388/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/570df030c0d30c2bf5336b2ab59f3902d8ab0b6d https://github.com/python-pillow/Pillow/commit/af56ace297b0991d02988fcc2ea933e4824b4fb3 https://github.com/python-pillow/Pillow/pull/10227 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-xvh5-g6gv-559v https://nvd.nist.gov/vuln/detail/CVE-2026-112902 https://www.cve.org/CVERecord?id=CVE-2026-112902
pillow	CVE-2026-25990	HIGH	11.3.0	12.1.1	http://www.openwall.com/lists/oss-security/2026/02/12/1 https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:14873 https://access.redhat.com/errata/RHSA-2026:14874 https://access.redhat.com/errata/RHSA-2026:16174 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:28385 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:4128 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:4942 https://access.redhat.com/errata/RHSA-2026:5168 https://access.redhat.com/errata/RHSA-2026:5665 https://access.redhat.com/errata/RHSA-2026:6277 https://access.redhat.com/errata/RHSA-2026:6278 https://access.redhat.com/errata/RHSA-2026:6308 https://access.redhat.com/errata/RHSA-2026:6309 https://access.redhat.com/errata/RHSA-2026:6497 https://access.redhat.com/errata/RHSA-2026:6567 https://access.redhat.com/errata/RHSA-2026:6568 https://access.redhat.com/security/cve/CVE-2026-25990 https://advisory.echohq.com/cve/CVE-2026-25990 https://bugzilla.redhat.com/show_bug.cgi?id=2439170 https://github.com/advisories/GHSA-cfh3-3jmp-rvhc https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/54ba4db542ad3c7b918812a4e2d69c27735a3199 https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa https://github.com/python-pillow/Pillow/pull/9427 https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc https://nvd.nist.gov/vuln/detail/CVE-2026-25990 https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25990.json https://ubuntu.com/security/notices/USN-8047-1 https://www.cve.org/CVERecord?id=CVE-2026-25990
pillow	CVE-2026-40192	HIGH	11.3.0	12.2.0	https://access.redhat.com/errata/RHSA-2026:16008 https://access.redhat.com/errata/RHSA-2026:16009 https://access.redhat.com/errata/RHSA-2026:16030 https://access.redhat.com/errata/RHSA-2026:16174 https://access.redhat.com/errata/RHSA-2026:17609 https://access.redhat.com/errata/RHSA-2026:17611 https://access.redhat.com/errata/RHSA-2026:19375 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:21017 https://access.redhat.com/errata/RHSA-2026:22465 https://access.redhat.com/errata/RHSA-2026:22629 https://access.redhat.com/errata/RHSA-2026:22840 https://access.redhat.com/errata/RHSA-2026:23361 https://access.redhat.com/errata/RHSA-2026:24761 https://access.redhat.com/errata/RHSA-2026:24762 https://access.redhat.com/errata/RHSA-2026:24853 https://access.redhat.com/errata/RHSA-2026:24866 https://access.redhat.com/errata/RHSA-2026:24977 https://access.redhat.com/errata/RHSA-2026:27076 https://access.redhat.com/errata/RHSA-2026:34365 https://access.redhat.com/errata/RHSA-2026:34366 https://access.redhat.com/errata/RHSA-2026:34368 https://access.redhat.com/errata/RHSA-2026:37275 https://access.redhat.com/errata/RHSA-2026:57387 https://access.redhat.com/errata/RHSA-2026:61627 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:61629 https://access.redhat.com/errata/RHSA-2026:65126 https://access.redhat.com/security/cve/CVE-2026-40192 https://advisory.echohq.com/cve/CVE-2026-40192 https://bugzilla.redhat.com/show_bug.cgi?id=2458856 https://github.com/advisories/GHSA-whj4-6x5x-4v2j https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628 https://github.com/python-pillow/Pillow/pull/9521 https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j https://nvd.nist.gov/vuln/detail/CVE-2026-40192 https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40192.json https://ubuntu.com/security/notices/USN-8211-1 https://www.cve.org/CVERecord?id=CVE-2026-40192
pillow	CVE-2026-42311	HIGH	11.3.0	12.2.0	https://access.redhat.com/security/cve/CVE-2026-42311 https://advisory.echohq.com/cve/CVE-2026-42311 https://github.com/advisories/GHSA-pwv6-vv43-88gr https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea https://github.com/python-pillow/Pillow/pull/9520 https://github.com/python-pillow/Pillow/releases/tag/12.2.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr https://nvd.nist.gov/vuln/detail/CVE-2026-42311 https://ubuntu.com/security/notices/USN-8399-1 https://www.cve.org/CVERecord?id=CVE-2026-42311
pillow	CVE-2026-54058	HIGH	11.3.0	12.3.0	https://access.redhat.com/errata/RHSA-2026:48021 https://access.redhat.com/security/cve/CVE-2026-54058 https://advisory.echohq.com/cve/CVE-2026-54058 https://bugzilla.redhat.com/2500043 https://bugzilla.redhat.com/2500057 https://bugzilla.redhat.com/show_bug.cgi?id=2500043 https://bugzilla.redhat.com/show_bug.cgi?id=2500057 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54058 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59197 https://errata.almalinux.org/8/ALSA-2026-48021.html https://errata.rockylinux.org/RLSA-2026:48021 https://github.com/advisories/GHSA-62p4-gmf7-7g93 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d https://github.com/python-pillow/Pillow/pull/9719 https://github.com/python-pillow/Pillow/releases/tag/12.3.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93 https://linux.oracle.com/cve/CVE-2026-54058.html https://linux.oracle.com/errata/ELSA-2026-48021.html https://nvd.nist.gov/vuln/detail/CVE-2026-54058 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-54058
pillow	CVE-2026-54059	HIGH	11.3.0	12.3.0	https://access.redhat.com/errata/RHSA-2026:39127 https://access.redhat.com/security/cve/CVE-2026-54059 https://advisory.echohq.com/cve/CVE-2026-54059 https://bugzilla.redhat.com/2497452 https://bugzilla.redhat.com/2497455 https://bugzilla.redhat.com/2497464 https://bugzilla.redhat.com/2497466 https://bugzilla.redhat.com/show_bug.cgi?id=2497452 https://bugzilla.redhat.com/show_bug.cgi?id=2497455 https://bugzilla.redhat.com/show_bug.cgi?id=2497464 https://bugzilla.redhat.com/show_bug.cgi?id=2497466 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380 https://errata.almalinux.org/8/ALSA-2026-39127.html https://errata.rockylinux.org/RLSA-2026:39127 https://github.com/advisories/GHSA-8v84-f9pq-wr9x https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2253.yaml https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x https://linux.oracle.com/cve/CVE-2026-54059.html https://linux.oracle.com/errata/ELSA-2026-39127.html https://nvd.nist.gov/vuln/detail/CVE-2026-54059 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-54059
pillow	CVE-2026-54060	HIGH	11.3.0	12.3.0	https://access.redhat.com/errata/RHSA-2026:39127 https://access.redhat.com/security/cve/CVE-2026-54060 https://advisory.echohq.com/cve/CVE-2026-54060 https://bugzilla.redhat.com/2497452 https://bugzilla.redhat.com/2497455 https://bugzilla.redhat.com/2497464 https://bugzilla.redhat.com/2497466 https://bugzilla.redhat.com/show_bug.cgi?id=2497452 https://bugzilla.redhat.com/show_bug.cgi?id=2497455 https://bugzilla.redhat.com/show_bug.cgi?id=2497464 https://bugzilla.redhat.com/show_bug.cgi?id=2497466 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380 https://errata.almalinux.org/8/ALSA-2026-39127.html https://errata.rockylinux.org/RLSA-2026:39127 https://github.com/advisories/GHSA-5x94-69rx-g8h2 https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2254.yaml https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2 https://linux.oracle.com/cve/CVE-2026-54060.html https://linux.oracle.com/errata/ELSA-2026-39127.html https://nvd.nist.gov/vuln/detail/CVE-2026-54060 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-54060
pillow	CVE-2026-55379	HIGH	11.3.0	12.3.0	https://access.redhat.com/errata/RHSA-2026:39127 https://access.redhat.com/security/cve/CVE-2026-55379 https://advisory.echohq.com/cve/CVE-2026-55379 https://bugzilla.redhat.com/2497452 https://bugzilla.redhat.com/2497455 https://bugzilla.redhat.com/2497464 https://bugzilla.redhat.com/2497466 https://bugzilla.redhat.com/show_bug.cgi?id=2497452 https://bugzilla.redhat.com/show_bug.cgi?id=2497455 https://bugzilla.redhat.com/show_bug.cgi?id=2497464 https://bugzilla.redhat.com/show_bug.cgi?id=2497466 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380 https://errata.almalinux.org/8/ALSA-2026-39127.html https://errata.rockylinux.org/RLSA-2026:39127 https://github.com/advisories/GHSA-45hq-cxwh-f6vc https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2255.yaml https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc https://linux.oracle.com/cve/CVE-2026-55379.html https://linux.oracle.com/errata/ELSA-2026-39127.html https://nvd.nist.gov/vuln/detail/CVE-2026-55379 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-55379
pillow	CVE-2026-55380	HIGH	11.3.0	12.3.0	https://access.redhat.com/errata/RHSA-2026:39127 https://access.redhat.com/security/cve/CVE-2026-55380 https://advisory.echohq.com/cve/CVE-2026-55380 https://bugzilla.redhat.com/2497452 https://bugzilla.redhat.com/2497455 https://bugzilla.redhat.com/2497464 https://bugzilla.redhat.com/2497466 https://bugzilla.redhat.com/show_bug.cgi?id=2497452 https://bugzilla.redhat.com/show_bug.cgi?id=2497455 https://bugzilla.redhat.com/show_bug.cgi?id=2497464 https://bugzilla.redhat.com/show_bug.cgi?id=2497466 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380 https://errata.almalinux.org/8/ALSA-2026-39127.html https://errata.rockylinux.org/RLSA-2026:39127 https://github.com/advisories/GHSA-phj9-mv4w-65pm https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2256.yaml https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675 https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm https://linux.oracle.com/cve/CVE-2026-55380.html https://linux.oracle.com/errata/ELSA-2026-39127.html https://nvd.nist.gov/vuln/detail/CVE-2026-55380 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-55380
pillow	CVE-2026-59197	HIGH	11.3.0	12.3.0	https://access.redhat.com/errata/RHSA-2026:48021 https://access.redhat.com/security/cve/CVE-2026-59197 https://advisory.echohq.com/cve/CVE-2026-59197 https://bugzilla.redhat.com/2500043 https://bugzilla.redhat.com/2500057 https://bugzilla.redhat.com/show_bug.cgi?id=2500043 https://bugzilla.redhat.com/show_bug.cgi?id=2500057 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54058 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59197 https://errata.almalinux.org/8/ALSA-2026-48021.html https://errata.rockylinux.org/RLSA-2026:48021 https://github.com/advisories/GHSA-xj96-63gp-2gmr https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1 https://github.com/python-pillow/Pillow/pull/9695 https://github.com/python-pillow/Pillow/releases/tag/12.3.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr https://linux.oracle.com/cve/CVE-2026-59197.html https://linux.oracle.com/errata/ELSA-2026-48021.html https://nvd.nist.gov/vuln/detail/CVE-2026-59197 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-59197
pillow	CVE-2026-59199	HIGH	11.3.0	12.3.0	https://access.redhat.com/security/cve/CVE-2026-59199 https://advisory.echohq.com/cve/CVE-2026-59199 https://github.com/advisories/GHSA-6r8x-57c9-28j4 https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3451.yaml https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b https://github.com/python-pillow/Pillow/pull/9703 https://github.com/python-pillow/Pillow/releases/tag/12.3.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4 https://nvd.nist.gov/vuln/detail/CVE-2026-59199 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-59199
pillow	CVE-2026-59200	HIGH	11.3.0	12.3.0	https://access.redhat.com/security/cve/CVE-2026-59200 https://advisory.echohq.com/cve/CVE-2026-59200 https://github.com/advisories/GHSA-jjj6-mw9f-p565 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09 https://github.com/python-pillow/Pillow/pull/9718 https://github.com/python-pillow/Pillow/releases/tag/12.3.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565 https://nvd.nist.gov/vuln/detail/CVE-2026-59200 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-59200
pillow	CVE-2026-59204	HIGH	11.3.0	12.3.0	https://access.redhat.com/security/cve/CVE-2026-59204 https://advisory.echohq.com/cve/CVE-2026-59204 https://github.com/advisories/GHSA-vjc4-5qp5-m44j https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca https://github.com/python-pillow/Pillow/pull/9704 https://github.com/python-pillow/Pillow/releases/tag/12.3.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j https://nvd.nist.gov/vuln/detail/CVE-2026-59204 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-59204
pillow	CVE-2026-59205	HIGH	11.3.0	12.3.0	https://access.redhat.com/security/cve/CVE-2026-59205 https://advisory.echohq.com/cve/CVE-2026-59205 https://github.com/advisories/GHSA-9hw9-ch79-4vh6 https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3453.yaml https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721 https://github.com/python-pillow/Pillow/pull/9715 https://github.com/python-pillow/Pillow/releases/tag/12.3.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6 https://nvd.nist.gov/vuln/detail/CVE-2026-59205 https://ubuntu.com/security/notices/USN-8999-1 https://www.cve.org/CVERecord?id=CVE-2026-59205
pillow	CVE-2026-96637	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-96637 https://advisory.echohq.com/cve/CVE-2026-96637 https://getsafety.com/v/SFTY-20261022-38655/52d https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/7cb0e02389d8aac2a60896a490f572db0b07b841 https://github.com/python-pillow/Pillow/pull/10076 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-g842-9rc4-69pw https://nvd.nist.gov/vuln/detail/CVE-2026-96637 https://www.cve.org/CVERecord?id=CVE-2026-96637
pillow	CVE-2026-96640	HIGH	11.3.0	13.0.0	https://access.redhat.com/errata/RHSA-2026:92639 https://access.redhat.com/security/cve/CVE-2026-96640 https://advisory.echohq.com/cve/CVE-2026-96640 https://bugzilla.redhat.com/2555851 https://bugzilla.redhat.com/2555859 https://bugzilla.redhat.com/2555866 https://bugzilla.redhat.com/2555868 https://bugzilla.redhat.com/2555873 https://bugzilla.redhat.com/2555875 https://bugzilla.redhat.com/2555879 https://bugzilla.redhat.com/2556322 https://bugzilla.redhat.com/2558576 https://bugzilla.redhat.com/2559393 https://bugzilla.redhat.com/show_bug.cgi?id=2555851 https://bugzilla.redhat.com/show_bug.cgi?id=2555859 https://bugzilla.redhat.com/show_bug.cgi?id=2555866 https://bugzilla.redhat.com/show_bug.cgi?id=2555868 https://bugzilla.redhat.com/show_bug.cgi?id=2555873 https://bugzilla.redhat.com/show_bug.cgi?id=2555875 https://bugzilla.redhat.com/show_bug.cgi?id=2555879 https://bugzilla.redhat.com/show_bug.cgi?id=2556322 https://bugzilla.redhat.com/show_bug.cgi?id=2558576 https://bugzilla.redhat.com/show_bug.cgi?id=2559393 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640 https://errata.almalinux.org/8/ALSA-2026-92639.html https://errata.rockylinux.org/RLSA-2026:92639 https://github.com/advisories/GHSA-mrfp-p49p-3hf2 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7 https://github.com/python-pillow/Pillow/pull/10093 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-mrfp-p49p-3hf2 https://linux.oracle.com/cve/CVE-2026-96640.html https://linux.oracle.com/errata/ELSA-2026-92639.html https://nvd.nist.gov/vuln/detail/CVE-2026-96640 https://www.cve.org/CVERecord?id=CVE-2026-96640
pillow	CVE-2026-96642	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-96642 https://advisory.echohq.com/cve/CVE-2026-96642 https://github.com/advisories/GHSA-3j72-p6qg-6xp7 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/19b695fdcc5eddc37374e2b1645fc4185edaf71d https://github.com/python-pillow/Pillow/pull/10012 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-3j72-p6qg-6xp7 https://nvd.nist.gov/vuln/detail/CVE-2026-96642 https://www.cve.org/CVERecord?id=CVE-2026-96642
pillow	CVE-2026-96643	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-96643 https://advisory.echohq.com/cve/CVE-2026-96643 https://github.com/advisories/GHSA-g4qv-2jxx-769h https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/806e38381c781f32bbd22f4cd026678acd40fd6c https://github.com/python-pillow/Pillow/pull/10073 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-g4qv-2jxx-769h https://nvd.nist.gov/vuln/detail/CVE-2026-96643 https://www.cve.org/CVERecord?id=CVE-2026-96643
pillow	CVE-2026-96644	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-96644 https://advisory.echohq.com/cve/CVE-2026-96644 https://github.com/advisories/GHSA-9v9v-9qvf-h2hj https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/4cf46bee338304c5c8968fd7f132ba0d40c428b7 https://github.com/python-pillow/Pillow/pull/10120 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-9v9v-9qvf-h2hj https://nvd.nist.gov/vuln/detail/CVE-2026-96644 https://www.cve.org/CVERecord?id=CVE-2026-96644
pillow	CVE-2026-96778	HIGH	11.3.0	13.0.0	https://access.redhat.com/security/cve/CVE-2026-96778 https://advisory.echohq.com/cve/CVE-2026-96778 https://github.com/advisories/GHSA-g7cr-3p24-7wf7 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/02561b8dc6117d5670d4b469fecdd02c70854f9b https://github.com/python-pillow/Pillow/pull/10124 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-g7cr-3p24-7wf7 https://nvd.nist.gov/vuln/detail/CVE-2026-96778 https://www.cve.org/CVERecord?id=CVE-2026-96778
pillow	GHSA-78g4-xqwv-q3g8	HIGH	11.3.0	13.0.0	https://advisory.echohq.com/cve/GHSA-78g4-xqwv-q3g8 https://github.com/advisories/GHSA-78g4-xqwv-q3g8 https://github.com/python-pillow/Pillow https://github.com/python-pillow/Pillow/commit/5f8114c8096b181fae493543cd3837d9f9a971cc https://github.com/python-pillow/Pillow/commit/d3470c327840f4c216a1610f30e7091dfd0b97c0 https://github.com/python-pillow/Pillow/releases/tag/13.0.0 https://github.com/python-pillow/Pillow/security/advisories/GHSA-78g4-xqwv-q3g8 https://github.com/uclouvain/openjpeg/commit/91d08b11a72764f6d199f32fa0c1b1abd4edc2ad https://osv.dev/vulnerability/OSV-2025-219
pymdown-extensions	CVE-2026-67422	HIGH	10.19.1	11.0.1	https://access.redhat.com/security/cve/CVE-2026-67422 https://advisory.echohq.com/cve/CVE-2026-67422 https://github.com/advisories/GHSA-gm37-52c6-37mw https://github.com/facelessuser/pymdown-extensions https://github.com/facelessuser/pymdown-extensions/commit/c68498598d7b13011bb4571350b6e3612a4ce44b https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw https://nvd.nist.gov/vuln/detail/CVE-2026-67422 https://www.cve.org/CVERecord?id=CVE-2026-67422
urllib3	CVE-2026-21441	HIGH	2.6.2	2.6.3	https://access.redhat.com/errata/RHSA-2026:0981 https://access.redhat.com/errata/RHSA-2026:0990 https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:1038 https://access.redhat.com/errata/RHSA-2026:1041 https://access.redhat.com/errata/RHSA-2026:1042 https://access.redhat.com/errata/RHSA-2026:1086 https://access.redhat.com/errata/RHSA-2026:1087 https://access.redhat.com/errata/RHSA-2026:1088 https://access.redhat.com/errata/RHSA-2026:1089 https://access.redhat.com/errata/RHSA-2026:1166 https://access.redhat.com/errata/RHSA-2026:1168 https://access.redhat.com/errata/RHSA-2026:1176 https://access.redhat.com/errata/RHSA-2026:1224 https://access.redhat.com/errata/RHSA-2026:1226 https://access.redhat.com/errata/RHSA-2026:1239 https://access.redhat.com/errata/RHSA-2026:1240 https://access.redhat.com/errata/RHSA-2026:1241 https://access.redhat.com/errata/RHSA-2026:1254 https://access.redhat.com/errata/RHSA-2026:1485 https://access.redhat.com/errata/RHSA-2026:14877 https://access.redhat.com/errata/RHSA-2026:1504 https://access.redhat.com/errata/RHSA-2026:1546 https://access.redhat.com/errata/RHSA-2026:1596 https://access.redhat.com/errata/RHSA-2026:1599 https://access.redhat.com/errata/RHSA-2026:1609 https://access.redhat.com/errata/RHSA-2026:1618 https://access.redhat.com/errata/RHSA-2026:1619 https://access.redhat.com/errata/RHSA-2026:1652 https://access.redhat.com/errata/RHSA-2026:1674 https://access.redhat.com/errata/RHSA-2026:1676 https://access.redhat.com/errata/RHSA-2026:1693 https://access.redhat.com/errata/RHSA-2026:1704 https://access.redhat.com/errata/RHSA-2026:1706 https://access.redhat.com/errata/RHSA-2026:1712 https://access.redhat.com/errata/RHSA-2026:1717 https://access.redhat.com/errata/RHSA-2026:1726 https://access.redhat.com/errata/RHSA-2026:1729 https://access.redhat.com/errata/RHSA-2026:1730 https://access.redhat.com/errata/RHSA-2026:1734 https://access.redhat.com/errata/RHSA-2026:1735 https://access.redhat.com/errata/RHSA-2026:1736 https://access.redhat.com/errata/RHSA-2026:17456 https://access.redhat.com/errata/RHSA-2026:17457 https://access.redhat.com/errata/RHSA-2026:17460 https://access.redhat.com/errata/RHSA-2026:17461 https://access.redhat.com/errata/RHSA-2026:17462 https://access.redhat.com/errata/RHSA-2026:17463 https://access.redhat.com/errata/RHSA-2026:1791 https://access.redhat.com/errata/RHSA-2026:1792 https://access.redhat.com/errata/RHSA-2026:1793 https://access.redhat.com/errata/RHSA-2026:1794 https://access.redhat.com/errata/RHSA-2026:1803 https://access.redhat.com/errata/RHSA-2026:1805 https://access.redhat.com/errata/RHSA-2026:1942 https://access.redhat.com/errata/RHSA-2026:1957 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:2106 https://access.redhat.com/errata/RHSA-2026:2126 https://access.redhat.com/errata/RHSA-2026:2137 https://access.redhat.com/errata/RHSA-2026:2139 https://access.redhat.com/errata/RHSA-2026:2144 https://access.redhat.com/errata/RHSA-2026:2256 https://access.redhat.com/errata/RHSA-2026:2456 https://access.redhat.com/errata/RHSA-2026:2500 https://access.redhat.com/errata/RHSA-2026:25127 https://access.redhat.com/errata/RHSA-2026:2563 https://access.redhat.com/errata/RHSA-2026:2681 https://access.redhat.com/errata/RHSA-2026:2695 https://access.redhat.com/errata/RHSA-2026:2717 https://access.redhat.com/errata/RHSA-2026:2718 https://access.redhat.com/errata/RHSA-2026:2723 https://access.redhat.com/errata/RHSA-2026:2728 https://access.redhat.com/errata/RHSA-2026:2760 https://access.redhat.com/errata/RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2764 https://access.redhat.com/errata/RHSA-2026:2765 https://access.redhat.com/errata/RHSA-2026:28043 https://access.redhat.com/errata/RHSA-2026:28441 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2911 https://access.redhat.com/errata/RHSA-2026:2919 https://access.redhat.com/errata/RHSA-2026:2924 https://access.redhat.com/errata/RHSA-2026:2925 https://access.redhat.com/errata/RHSA-2026:2926 https://access.redhat.com/errata/RHSA-2026:3296 https://access.redhat.com/errata/RHSA-2026:33154 https://access.redhat.com/errata/RHSA-2026:3406 https://access.redhat.com/errata/RHSA-2026:3444 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3869 https://access.redhat.com/errata/RHSA-2026:3874 https://access.redhat.com/errata/RHSA-2026:3884 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:4185 https://access.redhat.com/errata/RHSA-2026:41928 https://access.redhat.com/errata/RHSA-2026:4215 https://access.redhat.com/errata/RHSA-2026:4271 https://access.redhat.com/errata/RHSA-2026:4466 https://access.redhat.com/errata/RHSA-2026:4467 https://access.redhat.com/errata/RHSA-2026:44696 https://access.redhat.com/errata/RHSA-2026:51357 https://access.redhat.com/errata/RHSA-2026:5459 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:6287 https://access.redhat.com/errata/RHSA-2026:6292 https://access.redhat.com/errata/RHSA-2026:8151 https://access.redhat.com/errata/RHSA-2026:8500 https://access.redhat.com/errata/RHSA-2026:8501 https://access.redhat.com/security/cve/CVE-2026-21441 https://advisory.echohq.com/cve/CVE-2026-21441 https://bugzilla.redhat.com/2419455 https://bugzilla.redhat.com/2419467 https://bugzilla.redhat.com/2427726 https://bugzilla.redhat.com/show_bug.cgi?id=2419455 https://bugzilla.redhat.com/show_bug.cgi?id=2419467 https://bugzilla.redhat.com/show_bug.cgi?id=2427726 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66418 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66471 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21441 https://errata.almalinux.org/9/ALSA-2026-1239.html https://errata.rockylinux.org/RLSA-2026:1087 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99 https://linux.oracle.com/cve/CVE-2026-21441.html https://linux.oracle.com/errata/ELSA-2026-1254.html https://lists.debian.org/debian-lts-announce/2026/01/msg00017.html https://nvd.nist.gov/vuln/detail/CVE-2026-21441 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json https://ubuntu.com/security/notices/USN-7955-1 https://ubuntu.com/security/notices/USN-7955-2 https://ubuntu.com/security/notices/USN-8010-1 https://www.cve.org/CVERecord?id=CVE-2026-21441
urllib3	CVE-2026-44431	HIGH	2.6.2	2.7.0	https://access.redhat.com/errata/RHSA-2026:28158 https://access.redhat.com/errata/RHSA-2026:28159 https://access.redhat.com/security/cve/CVE-2026-44431 https://advisory.echohq.com/cve/CVE-2026-44431 https://bugzilla.redhat.com/2477154 https://bugzilla.redhat.com/2477167 https://bugzilla.redhat.com/show_bug.cgi?id=2477154 https://bugzilla.redhat.com/show_bug.cgi?id=2477167 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44432 https://errata.almalinux.org/9/ALSA-2026-28159.html https://errata.rockylinux.org/RLSA-2026:28158 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc https://linux.oracle.com/cve/CVE-2026-44431.html https://linux.oracle.com/errata/ELSA-2026-49927.html https://lists.debian.org/debian-lts-announce/2026/06/msg00040.html https://nvd.nist.gov/vuln/detail/CVE-2026-44431 https://ubuntu.com/security/notices/USN-8379-1 https://ubuntu.com/security/notices/USN-8811-1 https://www.cve.org/CVERecord?id=CVE-2026-44431
urllib3	CVE-2026-44432	HIGH	2.6.2	2.7.0	https://access.redhat.com/errata/RHSA-2026:15862 https://access.redhat.com/errata/RHSA-2026:20338 https://access.redhat.com/errata/RHSA-2026:22934 https://access.redhat.com/errata/RHSA-2026:24000 https://access.redhat.com/errata/RHSA-2026:24009 https://access.redhat.com/errata/RHSA-2026:24014 https://access.redhat.com/errata/RHSA-2026:24069 https://access.redhat.com/errata/RHSA-2026:24374 https://access.redhat.com/errata/RHSA-2026:24476 https://access.redhat.com/errata/RHSA-2026:24483 https://access.redhat.com/errata/RHSA-2026:24540 https://access.redhat.com/errata/RHSA-2026:24541 https://access.redhat.com/errata/RHSA-2026:24542 https://access.redhat.com/errata/RHSA-2026:24544 https://access.redhat.com/errata/RHSA-2026:25039 https://access.redhat.com/errata/RHSA-2026:25143 https://access.redhat.com/errata/RHSA-2026:25928 https://access.redhat.com/errata/RHSA-2026:26212 https://access.redhat.com/errata/RHSA-2026:26304 https://access.redhat.com/errata/RHSA-2026:27929 https://access.redhat.com/errata/RHSA-2026:28000 https://access.redhat.com/errata/RHSA-2026:28157 https://access.redhat.com/errata/RHSA-2026:28158 https://access.redhat.com/errata/RHSA-2026:28159 https://access.redhat.com/errata/RHSA-2026:28571 https://access.redhat.com/errata/RHSA-2026:30076 https://access.redhat.com/errata/RHSA-2026:30078 https://access.redhat.com/errata/RHSA-2026:30087 https://access.redhat.com/errata/RHSA-2026:30088 https://access.redhat.com/errata/RHSA-2026:30089 https://access.redhat.com/errata/RHSA-2026:32992 https://access.redhat.com/errata/RHSA-2026:33313 https://access.redhat.com/errata/RHSA-2026:33683 https://access.redhat.com/errata/RHSA-2026:34160 https://access.redhat.com/errata/RHSA-2026:34374 https://access.redhat.com/errata/RHSA-2026:34526 https://access.redhat.com/errata/RHSA-2026:34531 https://access.redhat.com/errata/RHSA-2026:34533 https://access.redhat.com/errata/RHSA-2026:34607 https://access.redhat.com/errata/RHSA-2026:36350 https://access.redhat.com/errata/RHSA-2026:37275 https://access.redhat.com/errata/RHSA-2026:41066 https://access.redhat.com/errata/RHSA-2026:42078 https://access.redhat.com/errata/RHSA-2026:42079 https://access.redhat.com/errata/RHSA-2026:42132 https://access.redhat.com/errata/RHSA-2026:42144 https://access.redhat.com/errata/RHSA-2026:42644 https://access.redhat.com/errata/RHSA-2026:42796 https://access.redhat.com/errata/RHSA-2026:43038 https://access.redhat.com/errata/RHSA-2026:44481 https://access.redhat.com/errata/RHSA-2026:51206 https://access.redhat.com/errata/RHSA-2026:56347 https://access.redhat.com/errata/RHSA-2026:58981 https://access.redhat.com/errata/RHSA-2026:59409 https://access.redhat.com/errata/RHSA-2026:60362 https://access.redhat.com/errata/RHSA-2026:60371 https://access.redhat.com/errata/RHSA-2026:7625 https://access.redhat.com/errata/RHSA-2026:7634 https://access.redhat.com/security/cve/CVE-2026-44432 https://advisory.echohq.com/cve/CVE-2026-44432 https://bugzilla.redhat.com/2477154 https://bugzilla.redhat.com/2477167 https://bugzilla.redhat.com/show_bug.cgi?id=2477154 https://bugzilla.redhat.com/show_bug.cgi?id=2477167 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44432 https://errata.almalinux.org/9/ALSA-2026-28159.html https://errata.rockylinux.org/RLSA-2026:28158 https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2026-142.yaml https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j https://linux.oracle.com/cve/CVE-2026-44432.html https://linux.oracle.com/errata/ELSA-2026-32992.html https://nvd.nist.gov/vuln/detail/CVE-2026-44432 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44432.json https://ubuntu.com/security/notices/USN-8379-1 https://www.cve.org/CVERecord?id=CVE-2026-44432
urllib3	CVE-2026-97687	HIGH	2.6.2	2.8.0	https://access.redhat.com/errata/RHSA-2026:90494 https://access.redhat.com/security/cve/CVE-2026-97687 https://advisory.echohq.com/cve/CVE-2026-97687 https://bugzilla.redhat.com/2543245 https://bugzilla.redhat.com/2543255 https://bugzilla.redhat.com/show_bug.cgi?id=2543245 https://bugzilla.redhat.com/show_bug.cgi?id=2543255 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689 https://errata.almalinux.org/9/ALSA-2026-90494.html https://errata.rockylinux.org/RLSA-2026:90494 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465 https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3 https://github.com/urllib3/urllib3/pull/5093 https://github.com/urllib3/urllib3/releases/tag/2.8.0 https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77 https://linux.oracle.com/cve/CVE-2026-97687.html https://linux.oracle.com/errata/ELSA-2026-92474.html https://nvd.nist.gov/vuln/detail/CVE-2026-97687 https://ubuntu.com/security/notices/USN-8926-1 https://www.cve.org/CVERecord?id=CVE-2026-97687
urllib3	CVE-2026-97689	HIGH	2.6.2	2.8.0	https://access.redhat.com/errata/RHSA-2026:90494 https://access.redhat.com/security/cve/CVE-2026-97689 https://advisory.echohq.com/cve/CVE-2026-97689 https://bugzilla.redhat.com/2543245 https://bugzilla.redhat.com/2543255 https://bugzilla.redhat.com/show_bug.cgi?id=2543245 https://bugzilla.redhat.com/show_bug.cgi?id=2543255 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689 https://errata.almalinux.org/9/ALSA-2026-90494.html https://errata.rockylinux.org/RLSA-2026:90494 https://github.com/urllib3/urllib3 https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed https://github.com/urllib3/urllib3/releases/tag/2.8.0 https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw https://linux.oracle.com/cve/CVE-2026-97689.html https://linux.oracle.com/errata/ELSA-2026-92474.html https://nvd.nist.gov/vuln/detail/CVE-2026-97689 https://ubuntu.com/security/notices/USN-8926-1 https://www.cve.org/CVERecord?id=CVE-2026-97689
wheel	CVE-2026-24049	HIGH	0.45.1	0.46.2	https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:14020 https://access.redhat.com/errata/RHSA-2026:1504 https://access.redhat.com/errata/RHSA-2026:17599 https://access.redhat.com/errata/RHSA-2026:1902 https://access.redhat.com/errata/RHSA-2026:1939 https://access.redhat.com/errata/RHSA-2026:1942 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20089 https://access.redhat.com/errata/RHSA-2026:2090 https://access.redhat.com/errata/RHSA-2026:2106 https://access.redhat.com/errata/RHSA-2026:2139 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2681 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2695 https://access.redhat.com/errata/RHSA-2026:2710 https://access.redhat.com/errata/RHSA-2026:2754 https://access.redhat.com/errata/RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2823 https://access.redhat.com/errata/RHSA-2026:2865 https://access.redhat.com/errata/RHSA-2026:2866 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2925 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3959 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:4185 https://access.redhat.com/errata/RHSA-2026:4215 https://access.redhat.com/errata/RHSA-2026:4271 https://access.redhat.com/errata/RHSA-2026:4942 https://access.redhat.com/errata/RHSA-2026:5119 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:62115 https://access.redhat.com/errata/RHSA-2026:6555 https://access.redhat.com/errata/RHSA-2026:6562 https://access.redhat.com/errata/RHSA-2026:6565 https://access.redhat.com/errata/RHSA-2026:7250 https://access.redhat.com/security/cve/CVE-2026-24049 https://advisory.echohq.com/cve/CVE-2026-24049 https://bugzilla.redhat.com/2431959 https://bugzilla.redhat.com/show_bug.cgi?id=2431959 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049 https://errata.almalinux.org/9/ALSA-2026-1939.html https://errata.rockylinux.org/RLSA-2026:1939 https://github.com/pypa/wheel https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e https://github.com/pypa/wheel/releases/tag/0.46.2 https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx https://linux.oracle.com/cve/CVE-2026-24049.html https://linux.oracle.com/errata/ELSA-2026-2090.html https://nvd.nist.gov/vuln/detail/CVE-2026-24049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json https://ubuntu.com/security/notices/USN-8221-1 https://www.cve.org/CVERecord?id=CVE-2026-24049
wheel	CVE-2026-24049	HIGH	0.45.1	0.46.2	https://access.redhat.com/errata/RHSA-2026:10184 https://access.redhat.com/errata/RHSA-2026:13545 https://access.redhat.com/errata/RHSA-2026:14020 https://access.redhat.com/errata/RHSA-2026:1504 https://access.redhat.com/errata/RHSA-2026:17599 https://access.redhat.com/errata/RHSA-2026:1902 https://access.redhat.com/errata/RHSA-2026:1939 https://access.redhat.com/errata/RHSA-2026:1942 https://access.redhat.com/errata/RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:20089 https://access.redhat.com/errata/RHSA-2026:2090 https://access.redhat.com/errata/RHSA-2026:2106 https://access.redhat.com/errata/RHSA-2026:2139 https://access.redhat.com/errata/RHSA-2026:2675 https://access.redhat.com/errata/RHSA-2026:2681 https://access.redhat.com/errata/RHSA-2026:2694 https://access.redhat.com/errata/RHSA-2026:2695 https://access.redhat.com/errata/RHSA-2026:2710 https://access.redhat.com/errata/RHSA-2026:2754 https://access.redhat.com/errata/RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2823 https://access.redhat.com/errata/RHSA-2026:2865 https://access.redhat.com/errata/RHSA-2026:2866 https://access.redhat.com/errata/RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2925 https://access.redhat.com/errata/RHSA-2026:3461 https://access.redhat.com/errata/RHSA-2026:3462 https://access.redhat.com/errata/RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3782 https://access.redhat.com/errata/RHSA-2026:3958 https://access.redhat.com/errata/RHSA-2026:3959 https://access.redhat.com/errata/RHSA-2026:3960 https://access.redhat.com/errata/RHSA-2026:4185 https://access.redhat.com/errata/RHSA-2026:4215 https://access.redhat.com/errata/RHSA-2026:4271 https://access.redhat.com/errata/RHSA-2026:4942 https://access.redhat.com/errata/RHSA-2026:5119 https://access.redhat.com/errata/RHSA-2026:61628 https://access.redhat.com/errata/RHSA-2026:6192 https://access.redhat.com/errata/RHSA-2026:62115 https://access.redhat.com/errata/RHSA-2026:6555 https://access.redhat.com/errata/RHSA-2026:6562 https://access.redhat.com/errata/RHSA-2026:6565 https://access.redhat.com/errata/RHSA-2026:7250 https://access.redhat.com/security/cve/CVE-2026-24049 https://advisory.echohq.com/cve/CVE-2026-24049 https://bugzilla.redhat.com/2431959 https://bugzilla.redhat.com/show_bug.cgi?id=2431959 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049 https://errata.almalinux.org/9/ALSA-2026-1939.html https://errata.rockylinux.org/RLSA-2026:1939 https://github.com/pypa/wheel https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e https://github.com/pypa/wheel/releases/tag/0.46.2 https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx https://linux.oracle.com/cve/CVE-2026-24049.html https://linux.oracle.com/errata/ELSA-2026-2090.html https://nvd.nist.gov/vuln/detail/CVE-2026-24049 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json https://ubuntu.com/security/notices/USN-8221-1 https://www.cve.org/CVERecord?id=CVE-2026-24049
No Misconfigurations found