Search CVE reports
1 – 10 of 39027 results
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched...
1 affected package
minisign
| Package | 26.04 LTS |
|---|---|
| minisign | Needs evaluation |
Not in release
Improper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apache BuildStream running on Python < 3.12 allows malicious source tarballs to write files on the host, with the...
1 affected package
buildstream
| Package | 26.04 LTS |
|---|---|
| buildstream | Not in release |
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths...
1 affected package
jackson-databind
| Package | 26.04 LTS |
|---|---|
| jackson-databind | Needs evaluation |
TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for...
1 affected package
jackson-databind
| Package | 26.04 LTS |
|---|---|
| jackson-databind | Needs evaluation |
UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the...
1 affected package
jackson-core
| Package | 26.04 LTS |
|---|---|
| jackson-core | Needs evaluation |
A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py of the component Loader. Such manipulation leads to deserialization. The attack can be...
1 affected package
dask
| Package | 26.04 LTS |
|---|---|
| dask | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS |
|---|---|
| flatpak | Not affected |
security update
1 affected package
flatpak
| Package | 26.04 LTS |
|---|---|
| flatpak | Not affected |
security update
1 affected package
flatpak
| Package | 26.04 LTS |
|---|---|
| flatpak | Needs evaluation |
security update
1 affected package
flatpak
| Package | 26.04 LTS |
|---|---|
| flatpak | Needs evaluation |