2026

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A success

NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpected

In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but w

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node pack

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node pack

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node pack

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdoc

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl

Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/pl

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backs

Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend pac

Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend pac

The Gitea API routes for issue attachments (`/api/v1/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}`) also a

The Gitea web route for deleting tags (`POST /{owner}/{repo}/tags/delete`) requires only write access to the Code unit,

When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API se

Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the `refresh_token` grant type,

Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank o

A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacke

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decom

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mish

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentica

In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authenticati

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended loca

Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete

A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an app

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not

Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaul

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend pack

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend pa

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend pa

Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-modul

Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backen

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-m

Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-mod

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may no

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend

Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-

Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-ba

Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backen