Vulnerabilities in the BSD ports trees
Every VuXML advisory of the last two years that names a port of these trees, newest first, with the systems where the software is still vulnerable. Each one's page says where it is fixed and when.
| Date | Advisory | Still vulnerable in | Vulnerable | Fixed |
|---|---|---|---|---|
| Node.js -- multiple vulnerabilities CVE-2026-105481 CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-106070 CVE-2026-106071 CVE-2026-106072 CVE-2026-106073 CVE-2026-106074 CVE-2026-111497 |
DragonFly, FreeBSD | 6 | 0 | |
| traefik -- ForwardAuth vulnerability | DragonFly | 1 | 1 | |
| vifm -- Unverified Ownership CVE-2026-110237 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-110264 CVE-2026-15723 CVE-2026-112212 CVE-2026-12664 CVE-2026-16255 CVE-2026-105777 CVE-2026-13319 CVE-2026-112378 CVE-2026-105711 CVE-2026-14288 CVE-2026-112326 CVE-2026-103515 |
- | 0 | 1 | |
| ca_root_nss -- trusted root certificate from compromised CA eMudhra | DragonFly | 1 | 1 | |
| mailpit -- Unbounded CPU and memory consumption in thumbnail endpoint via cyclic EXIF IFD chain | - | 0 | 1 | |
| Keycloak -- multiple vulnerabilities CVE-2026-15943 CVE-2026-18569 CVE-2026-82968 CVE-2026-94001 CVE-2026-94000 CVE-2026-94218 CVE-2026-94215 CVE-2026-94213 CVE-2026-94217 CVE-2026-96446 CVE-2026-96445 CVE-2026-97177 CVE-2026-95503 CVE-2026-97311 CVE-2026-97846 CVE-2026-101333 CVE-2026-103884 CVE-2026-107121 |
DragonFly | 1 | 1 | |
| jackson-core -- denial of service CVE-2026-89407 CVE-2026-89425 |
- | 0 | 1 | |
| jackson-databind -- denial of service CVE-2026-91776 CVE-2026-91777 |
- | 0 | 1 | |
| jackson-databind -- type parameters bypass the polymorphic type validator CVE-2026-110879 |
- | 0 | 1 | |
| brotli -- out-of-bounds write permits remote code execution CVE-2026-111497 |
DragonFly | 1 | 1 | |
| chromium -- security fixes CVE-2026-113341 CVE-2026-113279 CVE-2026-113072 CVE-2026-113280 CVE-2026-113271 CVE-2026-113303 CVE-2026-113101 CVE-2026-113097 CVE-2026-113098 CVE-2026-113242 CVE-2026-113058 CVE-2026-113082 CVE-2026-113119 CVE-2026-113092 CVE-2026-113134 CVE-2026-113339 CVE-2026-113317 CVE-2026-113193 CVE-2026-113117 CVE-2026-113188 CVE-2026-113104 CVE-2026-113322 CVE-2026-113163 CVE-2026-113253 CVE-2026-113298 CVE-2026-113315 CVE-2026-113236 CVE-2026-113284 CVE-2026-113141 CVE-2026-113316 CVE-2026-113234 CVE-2026-113252 CVE-2026-113305 CVE-2026-113044 CVE-2026-113135 CVE-2026-113266 CVE-2026-113273 CVE-2026-113293 CVE-2026-113225 CVE-2026-113210 CVE-2026-113285 CVE-2026-113324 CVE-2026-113334 CVE-2026-113020 CVE-2026-113222 CVE-2026-113318 CVE-2026-113310 CVE-2026-113338 CVE-2026-113093 CVE-2026-113012 CVE-2026-113175 CVE-2026-113192 CVE-2026-113309 CVE-2026-113295 CVE-2026-113217 CVE-2026-113040 CVE-2026-113161 CVE-2026-113154 CVE-2026-113336 CVE-2026-113181 CVE-2026-113019 CVE-2026-113095 CVE-2026-113160 CVE-2026-113212 CVE-2026-113000 CVE-2026-113179 CVE-2026-112993 CVE-2026-113055 CVE-2026-113068 CVE-2026-113320 CVE-2026-113231 CVE-2026-113174 CVE-2026-113022 CVE-2026-113079 CVE-2026-113191 CVE-2026-113250 CVE-2026-113109 CVE-2026-113113 CVE-2026-113069 CVE-2026-113006 CVE-2026-113263 CVE-2026-113018 CVE-2026-113301 CVE-2026-113034 CVE-2026-113094 CVE-2026-113240 CVE-2026-113102 CVE-2026-113142 CVE-2026-113281 CVE-2026-113035 CVE-2026-113211 CVE-2026-113011 CVE-2026-113198 CVE-2026-113257 CVE-2026-113070 CVE-2026-113176 CVE-2026-113150 CVE-2026-113311 CVE-2026-113078 CVE-2026-113033 CVE-2026-113026 CVE-2026-113302 CVE-2026-113164 CVE-2026-113239 CVE-2026-113131 CVE-2026-113333 CVE-2026-113147 CVE-2026-113337 CVE-2026-113127 CVE-2026-113129 CVE-2026-113264 CVE-2026-113105 CVE-2026-113220 CVE-2026-113275 CVE-2026-113283 CVE-2026-113014 CVE-2026-113108 CVE-2026-113343 CVE-2026-113319 CVE-2026-113057 CVE-2026-113219 CVE-2026-113005 CVE-2026-113209 CVE-2026-113166 CVE-2026-113051 CVE-2026-113196 CVE-2026-113003 CVE-2026-113155 CVE-2026-113290 CVE-2026-113183 CVE-2026-113289 CVE-2026-113146 CVE-2026-113207 CVE-2026-113205 CVE-2026-113162 CVE-2026-113118 CVE-2026-113232 CVE-2026-113327 CVE-2026-112999 CVE-2026-113249 CVE-2026-113272 CVE-2026-113112 CVE-2026-113321 CVE-2026-113059 CVE-2026-113137 CVE-2026-113208 CVE-2026-113238 CVE-2026-113194 CVE-2026-113189 CVE-2026-113060 CVE-2026-113115 CVE-2026-113045 CVE-2026-113307 CVE-2026-113009 CVE-2026-113071 CVE-2026-113278 CVE-2026-113190 CVE-2026-112992 CVE-2026-112995 CVE-2026-113261 CVE-2026-113172 CVE-2026-113332 CVE-2026-113262 CVE-2026-113149 CVE-2026-113206 CVE-2026-113185 CVE-2026-113171 CVE-2026-113042 CVE-2026-113276 CVE-2026-113218 CVE-2026-113195 CVE-2026-113328 CVE-2026-113335 CVE-2026-113255 CVE-2026-113076 CVE-2026-113325 CVE-2026-113084 CVE-2026-113308 CVE-2026-113224 CVE-2026-113148 CVE-2026-113010 CVE-2026-113073 CVE-2026-113265 CVE-2026-113329 CVE-2026-113043 CVE-2026-113202 CVE-2026-113016 CVE-2026-113246 CVE-2026-113041 CVE-2026-113126 CVE-2026-113031 CVE-2026-113081 CVE-2026-113139 CVE-2026-113128 CVE-2026-113049 CVE-2026-113032 CVE-2026-113204 CVE-2026-113144 CVE-2026-113054 CVE-2026-113123 CVE-2026-113277 CVE-2026-113136 CVE-2026-113106 CVE-2026-113001 CVE-2026-113064 CVE-2026-113243 CVE-2026-113326 CVE-2026-113124 CVE-2026-113230 CVE-2026-113090 CVE-2026-113158 CVE-2026-113077 CVE-2026-113282 CVE-2026-113165 CVE-2026-113178 CVE-2026-113110 CVE-2026-113007 CVE-2026-113187 CVE-2026-113075 CVE-2026-113259 CVE-2026-113228 CVE-2026-113099 CVE-2026-113216 CVE-2026-113270 CVE-2026-113087 CVE-2026-113267 CVE-2026-113304 CVE-2026-113177 CVE-2026-113151 CVE-2026-113028 CVE-2026-113120 CVE-2026-112997 CVE-2026-113037 CVE-2026-113153 CVE-2026-113138 CVE-2026-113030 CVE-2026-113100 CVE-2026-113221 CVE-2026-113344 CVE-2026-113342 CVE-2026-113159 CVE-2026-113233 CVE-2026-113065 CVE-2026-113002 CVE-2026-113199 CVE-2026-113197 CVE-2026-113203 CVE-2026-113170 CVE-2026-113258 CVE-2026-113297 CVE-2026-113062 CVE-2026-113096 CVE-2026-113050 CVE-2026-113008 CVE-2026-113111 CVE-2026-113200 CVE-2026-113143 CVE-2026-113157 CVE-2026-113235 CVE-2026-113089 CVE-2026-113340 CVE-2026-113052 CVE-2026-113133 CVE-2026-113086 CVE-2026-113251 CVE-2026-113215 CVE-2026-113053 CVE-2026-113312 CVE-2026-113323 CVE-2026-113114 CVE-2026-113015 CVE-2026-113091 CVE-2026-113168 CVE-2026-113229 CVE-2026-113256 CVE-2026-113103 CVE-2026-113056 CVE-2026-113201 CVE-2026-113027 CVE-2026-113214 CVE-2026-113004 CVE-2026-113300 CVE-2026-113213 CVE-2026-113167 CVE-2026-113223 CVE-2026-113291 CVE-2026-113241 CVE-2026-113244 CVE-2026-113048 CVE-2026-113247 CVE-2026-113023 CVE-2026-113330 CVE-2026-113226 CVE-2026-113152 CVE-2026-113029 CVE-2026-113296 CVE-2026-113306 CVE-2026-113245 CVE-2026-113299 CVE-2026-113024 CVE-2026-113025 CVE-2026-113080 CVE-2026-113186 CVE-2026-113180 CVE-2026-113140 CVE-2026-113184 CVE-2026-113017 CVE-2026-112998 CVE-2026-113021 CVE-2026-113145 CVE-2026-113292 CVE-2026-113156 CVE-2026-113116 CVE-2026-113047 CVE-2026-113173 CVE-2026-113260 CVE-2026-113269 CVE-2026-113036 CVE-2026-113268 CVE-2026-113038 CVE-2026-113313 CVE-2026-113061 CVE-2026-113248 CVE-2026-113288 CVE-2026-113085 CVE-2026-113107 CVE-2026-113066 CVE-2026-113121 CVE-2026-113287 CVE-2026-113132 CVE-2026-113169 CVE-2026-113254 CVE-2026-113063 CVE-2026-112994 CVE-2026-113314 CVE-2026-113237 CVE-2026-113331 CVE-2026-113182 CVE-2026-113046 CVE-2026-113067 CVE-2026-113074 CVE-2026-113130 CVE-2026-113294 CVE-2026-112996 CVE-2026-113122 CVE-2026-113227 CVE-2026-113286 CVE-2026-113083 CVE-2026-113088 CVE-2026-113013 CVE-2026-113125 CVE-2026-113039 CVE-2026-113274 |
DragonFly, FreeBSD | 2 | 1 | |
| Unbound -- Multiple vulnerabilities CVE-2026-97206 CVE-2026-50106 CVE-2026-96405 CVE-2026-109125 CVE-2026-35501 |
DragonFly | 1 | 1 | |
| PowerDNS -- Multiple vulnerabilities CVE-2026-73206 CVE-2026-73205 CVE-2026-85555 CVE-2026-85556 CVE-2026-85557 CVE-2026-85558 CVE-2026-85559 |
- | 0 | 1 | |
| p5-DBI -- Prevent dbi_profile crash CVE-2026-108518 |
DragonFly | 1 | 1 | |
| PHP -- Multiple vulnerabilities CVE-2026-109618 CVE-2026-109619 |
DragonFly, NetBSD | 7 | 5 | |
| Emacs -- Local command injection via crafted file names in TRAMP CVE-2026-79992 CVE-2026-108976 |
DragonFly | 2 | 2 | |
| Roundcube -- Multiple vulnerabilities | - | 0 | 1 | |
| anki -- page manipulation via deck description links | - | 0 | 1 | |
| Drupal 10 and 11 -- remote code execution CVE-2026-108097 |
FreeBSD, DragonFly | 3 | 1 | |
| traefik -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| libXtst -- multiple vulnerabilities CVE-2026-94286 CVE-2026-109088 |
DragonFly | 1 | 1 | |
| libXrender -- vulnerability CVE-2026-88807 |
DragonFly | 1 | 1 | |
| libXi -- multiple vulnerabilities CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 CVE-2026-109089 CVE-2026-109090 |
- | 0 | 2 | |
| libXpm -- vulnerability CVE-2026-94287 |
DragonFly | 1 | 1 | |
| libX11 -- multiple vulnerabilities CVE-2026-88806 CVE-2026-94283 CVE-2026-94284 CVE-2026-94285 |
- | 0 | 2 | |
| Erlang/OTP -- multiple vulnerabilities in ssl, inets, public_key and snmp CVE-2026-42789 CVE-2026-48856 CVE-2026-70405 CVE-2026-94200 CVE-2026-105236 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- erl_tar denial of service via crafted GNU sparse member CVE-2026-96596 |
- | 0 | 1 | |
| miniupnpd -- Integer underflow in SOAPAction header parsing CVE-2026-5720 |
- | 0 | 1 | |
| mod_wsgi -- race condition at process start can leak request context between requests | - | 0 | 1 | |
| Text::CSV_XS -- multiple vulnerabilities CVE-2026-110759 CVE-2026-110758 CVE-2026-110757 CVE-2026-110756 CVE-2026-110755 CVE-2026-110754 CVE-2026-110753 CVE-2026-110752 |
DragonFly | 1 | 1 | |
| Newsboat -- vulnerabilities | - | 0 | 1 | |
| nginx -- multiple vulnerabilities CVE-2026-15176 CVE-2026-93479 CVE-2026-95101 CVE-2026-97629 CVE-2026-97205 |
DragonFly | 4 | 4 | |
| NSD -- multiple vulnerabilities CVE-2026-101337 CVE-2026-101338 CVE-2026-101339 CVE-2026-101341 |
- | 0 | 1 | |
| nginx-module-cache-purge -- symlink traversal when walking cache trees CVE-2026-108981 |
- | 0 | 1 | |
| Curl -- Multiple vulnerabilities CVE-2026-107929 CVE-2026-107928 CVE-2026-94266 CVE-2026-94265 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-86410 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-86415 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87865 CVE-2026-87866 |
DragonFly | 1 | 1 | |
| p5-Plack -- Multiple vulnerabilities CVE-2026-110333 CVE-2026-110332 CVE-2026-110335 CVE-2026-110334 CVE-2026-110336 |
DragonFly | 1 | 1 | |
| Timing leaks of the nonce in ECDSA, EdDSA and DSA signatures | DragonFly | 2 | 2 | |
| Gitlab -- vulnerabilities CVE-2026-97229 CVE-2026-92883 CVE-2026-16301 CVE-2026-14814 CVE-2026-81839 CVE-2026-96893 CVE-2026-101168 CVE-2026-7767 CVE-2026-16275 CVE-2026-84284 CVE-2026-85529 CVE-2026-100755 CVE-2026-14552 CVE-2026-6567 CVE-2026-104661 CVE-2026-14210 CVE-2026-105458 CVE-2026-5954 CVE-2026-92528 CVE-2026-78335 CVE-2026-100104 CVE-2026-82632 CVE-2026-103549 CVE-2026-9268 |
- | 0 | 1 | |
| gstreamer1 -- multiple vulnerabilities CVE-2026-86476 |
DragonFly | 7 | 7 | |
| py-WsgiDAV -- Multiple vulnerabilities CVE-2026-48099 CVE-2026-55509 CVE-2026-55560 |
- | 0 | 1 | |
| libwasmtime -- Multiple vulnerabilities | - | 0 | 2 | |
| podman -- vulnerabilities CVE-2026-94603 |
- | 0 | 1 | |
| traefik -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| ejabberd -- Multiple security vulnerabilities | DragonFly | 1 | 1 | |
| clamav -- Multiple vulnerabilities CVE-2026-20345 CVE-2026-20339 CVE-2026-20346 CVE-2026-20347 CVE-2026-20348 CVE-2025-8088 CVE-2026-20217 CVE-2026-20213 CVE-2026-20216 CVE-2026-20214 CVE-2026-20243 CVE-2026-20215 CVE-2026-20244 |
DragonFly | 1 | 2 | |
| mutt -- Heap out-of-bounds write via crafted Content-Header line CVE-2026-107570 |
DragonFly | 1 | 1 | |
| xorg -- Multiple vulnerabilities CVE-2026-88812 CVE-2026-93515 CVE-2026-93516 CVE-2026-93517 CVE-2026-93518 CVE-2026-93519 CVE-2026-93520 CVE-2026-93521 CVE-2026-93522 CVE-2026-93523 CVE-2026-93524 CVE-2026-93536 |
DragonFly | 2 | 2 | |
| OpenSSH -- Multiple vulnerabilities | - | 0 | 1 | |
| rabbitmq-c -- remote client-side memory exhaustion | DragonFly | 1 | 1 | |
| rabbitmq-c -- multiple vulnerabilities CVE-2026-61547 CVE-2026-59986 |
DragonFly | 1 | 1 | |
| rabbitmq-c -- multiple vulnerabilities CVE-2026-44236 CVE-2026-44235 |
DragonFly | 1 | 1 | |
| Vaultwarden -- Multiple vulnerabilities | - | 0 | 1 | |
| LibreSSL -- Multiple vulnerabilities | - | 0 | 2 | |
| bind920 -- multiple vulnerabilities CVE-2026-19668 CVE-2026-19033 CVE-2026-77119 CVE-2026-19941 CVE-2026-19666 CVE-2026-19667 CVE-2026-19662 CVE-2026-75029 CVE-2026-77692 CVE-2026-81736 CVE-2026-76163 CVE-2026-78301 CVE-2026-80274 CVE-2026-81563 |
DragonFly | 1 | 1 | |
| libexpat -- Improper Handling of Unicode Encoding CVE-2026-93990 |
DragonFly | 1 | 1 | |
| Keycloak -- multiple vulnerabilities CVE-2026-12388 CVE-2026-14781 CVE-2026-19608 CVE-2026-54515 CVE-2026-59889 CVE-2026-59903 |
DragonFly | 1 | 1 | |
| conduit -- account takeover vulnerability | - | 0 | 1 | |
| arti -- Various security issues | DragonFly | 1 | 1 | |
| Apache httpd -- Multiple vulnerabilities CVE-2026-42356 CVE-2026-42528 CVE-2026-46729 CVE-2026-47360 CVE-2026-48005 CVE-2026-56153 CVE-2026-56154 CVE-2026-56449 CVE-2026-57941 CVE-2026-58415 CVE-2026-59685 CVE-2026-59797 CVE-2026-63045 CVE-2026-63292 CVE-2026-63686 CVE-2026-63718 CVE-2026-73636 CVE-2026-73637 CVE-2026-79768 CVE-2026-93546 |
DragonFly | 1 | 1 | |
| OpenSSL -- Multiple vulnerabilities CVE-2026-84782 CVE-2026-84783 CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84784 |
DragonFly, FreeBSD, GhostBSD | 3 | 3 | |
| apache-commons-lang -- Uncontrolled Recursion vulnerability CVE-2025-48924 |
DragonFly, FreeBSD | 3 | 1 | |
| p5-Authen-SASL -- Replay attack in Authen::SASL::Perl::DIGEST_MD5 CVE-2026-86219 |
DragonFly | 1 | 1 | |
| Fetchmail -- NTLM potential remote code execution CVE-2026-94184 |
DragonFly | 1 | 1 | |
| Rauthy -- Multiple security vulnerabilities | - | 0 | 1 | |
| p5-YAML-Syck -- Multiple vulnerabilities CVE-2026-57075 CVE-2026-57076 CVE-2026-57077 CVE-2025-11683 CVE-2026-13713 |
DragonFly | 1 | 1 | |
| chromium -- security fixes CVE-2026-95350 CVE-2026-95357 CVE-2026-95339 CVE-2026-95281 CVE-2026-95313 CVE-2026-95349 CVE-2026-95284 CVE-2026-95322 CVE-2026-95329 CVE-2026-95356 CVE-2026-95310 CVE-2026-95301 CVE-2026-95291 CVE-2026-95355 CVE-2026-95315 CVE-2026-95298 CVE-2026-95372 CVE-2026-95324 CVE-2026-95283 CVE-2026-95293 CVE-2026-95274 CVE-2026-95282 CVE-2026-95373 CVE-2026-95277 CVE-2026-95348 CVE-2026-95335 CVE-2026-95338 CVE-2026-95318 CVE-2026-95286 CVE-2026-95365 CVE-2026-95343 CVE-2026-95280 CVE-2026-95304 CVE-2026-95306 CVE-2026-95299 CVE-2026-95351 CVE-2026-95287 CVE-2026-95366 CVE-2026-95382 CVE-2026-95381 CVE-2026-95331 CVE-2026-95297 CVE-2026-95375 CVE-2026-95302 CVE-2026-95362 CVE-2026-95369 CVE-2026-95376 CVE-2026-95359 CVE-2026-95294 CVE-2026-95337 CVE-2026-95346 CVE-2026-95320 CVE-2026-95317 CVE-2026-95345 CVE-2026-95330 CVE-2026-95370 CVE-2026-95303 CVE-2026-95360 CVE-2026-95295 CVE-2026-95276 CVE-2026-95314 CVE-2026-95371 CVE-2026-95353 CVE-2026-95363 CVE-2026-95341 CVE-2026-95354 CVE-2026-95384 CVE-2026-95336 CVE-2026-95290 CVE-2026-95325 CVE-2026-95275 CVE-2026-95374 CVE-2026-95300 CVE-2026-95321 CVE-2026-95323 CVE-2026-95332 CVE-2026-95312 CVE-2026-95344 CVE-2026-95289 CVE-2026-95347 CVE-2026-95311 CVE-2026-95358 CVE-2026-95333 CVE-2026-95307 CVE-2026-95285 CVE-2026-95278 CVE-2026-95327 CVE-2026-95334 CVE-2026-95308 CVE-2026-95292 CVE-2026-95352 CVE-2026-95279 CVE-2026-95367 CVE-2026-95385 CVE-2026-95368 CVE-2026-95319 CVE-2026-95326 CVE-2026-95309 CVE-2026-95361 CVE-2026-95288 CVE-2026-95380 CVE-2026-95342 CVE-2026-95296 CVE-2026-95316 CVE-2026-95328 CVE-2026-95340 CVE-2026-95364 CVE-2026-95305 |
DragonFly, FreeBSD | 2 | 1 | |
| RusTLS FFI -- plaintext TLS handshake vulnerability | - | 0 | 1 | |
| Erlang/OTP -- multiple vulnerabilities in ssl, ssh and asn1 CVE-2026-65634 CVE-2026-68956 CVE-2026-89422 |
DragonFly | 3 | 4 | |
| databases/p5-DBI -- multiple vulnerabilities CVE-2026-15392 CVE-2026-78030 CVE-2026-73193 CVE-2026-73194 CVE-2026-60081 CVE-2026-60082 CVE-2026-15043 CVE-2026-14380 CVE-2026-14740 CVE-2026-14739 |
DragonFly | 1 | 1 | |
| podman -- vulnerabilities CVE-2025-11395 CVE-2026-79699 CVE-2026-79705 |
- | 0 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-89078 CVE-2026-93577 CVE-2026-84739 CVE-2026-92470 CVE-2026-92874 CVE-2026-92530 CVE-2026-8937 CVE-2026-92529 CVE-2026-10518 CVE-2026-4523 CVE-2026-92628 |
- | 0 | 1 | |
| p5-Image-ExifTool -- code injection via crafted media CVE-2026-7580 |
DragonFly | 2 | 2 | |
| popt -- Out-of-bounds Write CVE-2026-18739 |
DragonFly | 1 | 1 | |
| popt -- Incorrect Calculation of Buffer Size CVE-2026-18743 |
DragonFly | 1 | 1 | |
| p5-Dancer2 -- Multiple vulnerabilities CVE-2026-93710 |
- | 0 | 2 | |
| p5-Dancer2 -- Multiple vulnerabilities CVE-2026-93709 CVE-2026-93711 |
DragonFly | 1 | 1 | |
| mailpit -- Multi-frame animation bypass of thumbnail pixel budget | - | 0 | 1 | |
| Angie -- worker process memory corruption when using HTTP/3 CVE-2026-90439 |
DragonFly | 1 | 1 | |
| angie-module-njs -- multiple vulnerabilities CVE-2026-18329 CVE-2026-78222 CVE-2026-78689 |
DragonFly | 1 | 1 | |
| Vinyl/Varnish -- VCL string methods workspace overflow | DragonFly, FreeBSD | 2 | 1 | |
| 389-ds-base -- multiple vulnerabilities CVE-2026-11770 CVE-2026-18355 CVE-2026-18453 CVE-2026-18922 CVE-2026-19843 CVE-2026-76560 |
- | 0 | 1 | |
| traefik -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| Unbound -- multiple vulnerabilities CVE-2026-81642 CVE-2026-81634 CVE-2026-82717 CVE-2026-77955 CVE-2026-78227 CVE-2026-80225 CVE-2026-82720 CVE-2026-85501 CVE-2026-77860 |
DragonFly | 1 | 1 | |
| nginx -- buffer overflow when using ngx_http_v3_module CVE-2026-90439 |
DragonFly | 2 | 2 | |
| mkvtoolnix -- Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound CVE-2026-90783 |
- | 0 | 1 | |
| git-lfs -- Improper Link Resolution Before File Access CVE-2025-26625 |
FreeBSD, DragonFly | 2 | 0 | |
| cjose -- Heap-based Buffer Overflow CVE-2026-53938 |
- | 0 | 1 | |
| cjose -- Use of Hard-coded Cryptographic Key CVE-2026-53939 |
- | 0 | 1 | |
| anki -- multiple vulnerabilities | - | 0 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-85706 CVE-2026-87719 CVE-2026-88765 CVE-2026-79708 CVE-2026-78252 CVE-2026-13210 CVE-2025-14871 CVE-2026-1168 CVE-2024-11222 CVE-2026-12910 CVE-2026-82837 CVE-2026-19619 CVE-2026-86341 CVE-2026-86340 CVE-2026-7514 CVE-2026-8030 CVE-2026-16794 CVE-2026-3855 |
- | 0 | 1 | |
| znc -- multiple vulnerabilities CVE-2020-11022 CVE-2020-11023 CVE-2026-82373 CVE-2026-82374 |
DragonFly | 1 | 1 | |
| Gitea -- multiple vulnerabilities CVE-2026-66877 CVE-2026-71184 CVE-2026-68957 CVE-2026-60010 CVE-2026-70406 CVE-2026-63792 CVE-2026-66874 CVE-2026-68964 CVE-2026-67577 CVE-2026-66849 CVE-2026-73135 CVE-2026-78433 CVE-2026-70407 CVE-2026-73126 CVE-2026-70400 CVE-2026-70396 CVE-2026-63021 CVE-2026-62925 CVE-2026-73273 CVE-2026-60021 CVE-2026-60018 CVE-2026-73130 CVE-2026-70402 CVE-2026-66853 CVE-2026-71301 CVE-2026-73504 |
DragonFly | 1 | 1 | |
| redpanda-connect -- memory exhaustion via oversized AMQP frames CVE-2026-79921 |
- | 0 | 1 | |
| FreeIPA -- multiple vulnerabilities CVE-2026-11861 CVE-2026-13097 CVE-2026-19550 CVE-2026-73196 CVE-2026-73197 CVE-2026-73198 CVE-2026-73199 CVE-2026-76578 CVE-2026-79678 |
- | 0 | 1 | |
| immich -- locked assets remain accessible through shared albums and links CVE-2026-82272 |
- | 0 | 1 | |
| immich -- open redirect and reflected XSS in maintenance endpoint | - | 0 | 1 | |
| strongSwan -- multiple vulnerabilities CVE-2026-78123 CVE-2026-78124 CVE-2026-78126 CVE-2026-78127 CVE-2026-78129 CVE-2026-78130 CVE-2026-78131 CVE-2026-78132 CVE-2026-78133 CVE-2026-78134 CVE-2026-78135 |
- | 0 | 1 | |
| CrowdSec -- multiple vulnerabilities | DragonFly | 1 | 1 | |
| yt-dlp: Improper Neutralization of Special Elements CVE-2026-55404 |
DragonFly | 1 | 1 | |
| Roundcube -- Multiple vulnerabilities | - | 0 | 1 | |
| OpenVPN: denial of service CVE-2026-84732 |
DragonFly | 1 | 1 | |
| njs -- heap buffer overflow in XML exclusive canonicalization CVE-2026-78689 |
DragonFly | 3 | 4 | |
| electron42 -- multiple vulnerabilities CVE-2026-15764 CVE-2026-15765 CVE-2026-15766 CVE-2026-15767 CVE-2026-15768 CVE-2026-15769 CVE-2026-15770 CVE-2026-15771 CVE-2026-15772 CVE-2026-15773 CVE-2026-15774 CVE-2026-15775 CVE-2026-15776 CVE-2026-15777 CVE-2026-15778 |
- | 0 | 1 | |
| jenkins -- multiple vulnerabilities CVE-2026-84645 CVE-2026-84646 CVE-2026-84647 CVE-2026-84648 CVE-2026-84649 CVE-2026-84650 CVE-2026-84651 CVE-2026-84652 CVE-2026-84653 CVE-2026-84654 CVE-2026-84655 CVE-2026-84656 CVE-2026-84657 |
DragonFly | 2 | 2 | |
| chromium -- security fixes CVE-2026-84353 CVE-2026-84352 CVE-2026-84354 CVE-2026-84359 CVE-2026-84357 CVE-2026-84324 CVE-2026-84349 CVE-2026-84326 CVE-2026-84333 CVE-2026-84351 CVE-2026-84325 CVE-2026-84328 CVE-2026-84347 CVE-2026-84323 CVE-2026-84355 CVE-2026-84358 CVE-2026-84332 CVE-2026-84330 CVE-2026-84334 CVE-2026-84348 CVE-2026-84335 CVE-2026-84327 CVE-2026-84329 CVE-2026-84356 CVE-2026-84350 CVE-2026-84331 |
DragonFly, FreeBSD | 2 | 1 | |
| py-strawberry-graphql -- Incorrect authorization | DragonFly | 1 | 2 | |
| Erlang/OTP -- remote crash via gen_tcp with {packet,4} CVE-2026-75538 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- multiple vulnerabilities in inets, stdlib, snmp and eldap CVE-2026-55951 CVE-2026-59696 CVE-2026-66357 CVE-2026-66835 CVE-2026-69664 CVE-2026-70399 CVE-2026-70405 CVE-2026-70409 CVE-2026-71380 CVE-2026-71562 CVE-2026-73270 CVE-2026-73276 CVE-2026-73812 CVE-2026-74835 CVE-2026-74994 |
DragonFly | 3 | 4 | |
| chromium -- security fixes CVE-2026-79282 CVE-2026-79290 CVE-2026-79054 CVE-2026-79121 CVE-2026-79224 CVE-2026-79052 CVE-2026-79150 CVE-2026-78935 CVE-2026-79012 CVE-2026-79200 CVE-2026-78989 CVE-2026-79069 CVE-2026-79175 CVE-2026-79218 CVE-2026-79195 CVE-2026-78939 CVE-2026-79194 CVE-2026-79247 CVE-2026-79219 CVE-2026-79047 CVE-2026-79292 CVE-2026-78986 CVE-2026-79039 CVE-2026-78934 CVE-2026-79011 CVE-2026-78911 CVE-2026-79257 CVE-2026-79202 CVE-2026-79212 CVE-2026-79183 CVE-2026-79155 CVE-2026-79093 CVE-2026-79019 CVE-2026-79187 CVE-2026-79288 CVE-2026-79130 CVE-2026-78965 CVE-2026-79117 CVE-2026-79082 CVE-2026-79111 CVE-2026-79072 CVE-2026-79142 CVE-2026-78948 CVE-2026-78908 CVE-2026-78895 CVE-2026-79043 CVE-2026-79235 CVE-2026-79232 CVE-2026-79118 CVE-2026-79174 CVE-2026-78900 CVE-2026-79188 CVE-2026-79189 CVE-2026-79048 CVE-2026-79240 CVE-2026-79014 CVE-2026-79198 CVE-2026-79131 CVE-2026-79149 CVE-2026-79275 CVE-2026-79138 CVE-2026-79026 CVE-2026-79027 CVE-2026-78904 CVE-2026-78899 CVE-2026-78954 CVE-2026-79274 CVE-2026-78938 CVE-2026-78952 CVE-2026-79236 CVE-2026-79078 CVE-2026-79209 CVE-2026-79030 CVE-2026-79216 CVE-2026-79007 CVE-2026-78893 CVE-2026-79222 CVE-2026-79071 CVE-2026-79076 CVE-2026-79088 CVE-2026-79104 CVE-2026-79044 CVE-2026-78958 CVE-2026-78961 CVE-2026-79262 CVE-2026-79106 CVE-2026-79176 CVE-2026-78966 CVE-2026-79186 CVE-2026-79267 CVE-2026-79016 CVE-2026-79010 CVE-2026-79286 CVE-2026-78945 CVE-2026-78999 CVE-2026-78941 CVE-2026-79032 CVE-2026-79109 CVE-2026-79256 CVE-2026-79237 CVE-2026-78898 CVE-2026-78985 CVE-2026-79028 CVE-2026-79210 CVE-2026-79046 CVE-2026-79129 CVE-2026-78937 CVE-2026-78987 CVE-2026-78990 CVE-2026-78909 CVE-2026-79271 CVE-2026-79144 CVE-2026-79065 CVE-2026-79192 CVE-2026-79140 CVE-2026-79128 CVE-2026-78942 CVE-2026-79116 CVE-2026-79006 CVE-2026-79095 CVE-2026-79084 CVE-2026-78991 CVE-2026-79248 CVE-2026-78891 CVE-2026-79031 CVE-2026-79110 CVE-2026-79136 CVE-2026-78907 CVE-2026-79087 CVE-2026-79231 CVE-2026-78969 CVE-2026-79137 CVE-2026-79057 CVE-2026-78894 CVE-2026-79264 CVE-2026-78910 CVE-2026-79066 CVE-2026-79255 CVE-2026-79086 CVE-2026-79038 CVE-2026-78940 CVE-2026-79107 CVE-2026-79120 CVE-2026-79270 CVE-2026-79067 CVE-2026-79213 CVE-2026-78943 CVE-2026-79259 CVE-2026-79208 CVE-2026-79251 CVE-2026-79226 CVE-2026-79042 CVE-2026-79122 CVE-2026-79199 CVE-2026-79013 CVE-2026-79074 CVE-2026-79215 CVE-2026-79049 CVE-2026-79132 CVE-2026-79201 CVE-2026-79051 CVE-2026-79053 CVE-2026-79285 CVE-2026-78906 CVE-2026-79250 CVE-2026-79020 CVE-2026-79217 CVE-2026-79204 CVE-2026-78912 CVE-2026-78955 CVE-2026-79143 CVE-2026-79241 CVE-2026-78967 CVE-2026-79214 CVE-2026-79228 CVE-2026-78953 CVE-2026-79229 CVE-2026-79002 CVE-2026-79272 CVE-2026-79127 CVE-2026-79151 CVE-2026-78936 CVE-2026-78905 CVE-2026-79050 CVE-2026-79008 CVE-2026-78975 CVE-2026-79287 CVE-2026-79094 CVE-2026-79173 CVE-2026-78976 CVE-2026-79276 CVE-2026-79191 CVE-2026-79099 CVE-2026-79024 CVE-2026-79193 CVE-2026-79242 CVE-2026-79180 CVE-2026-79293 CVE-2026-79023 CVE-2026-79146 CVE-2026-79238 CVE-2026-78949 CVE-2026-79291 CVE-2026-79283 CVE-2026-78892 CVE-2026-79070 CVE-2026-79205 CVE-2026-78903 CVE-2026-78959 CVE-2026-79234 CVE-2026-78983 CVE-2026-79083 CVE-2026-78944 CVE-2026-79178 CVE-2026-79059 CVE-2026-79245 CVE-2026-78978 CVE-2026-79103 CVE-2026-79154 CVE-2026-79230 CVE-2026-79068 CVE-2026-79269 CVE-2026-79085 CVE-2026-79134 CVE-2026-79064 CVE-2026-79003 CVE-2026-79220 CVE-2026-78951 CVE-2026-79249 CVE-2026-79091 CVE-2026-79265 CVE-2026-78913 CVE-2026-79258 CVE-2026-79211 CVE-2026-79252 CVE-2026-78962 CVE-2026-78901 CVE-2026-79097 CVE-2026-79227 CVE-2026-79203 CVE-2026-79033 CVE-2026-79139 CVE-2026-79221 CVE-2026-79034 CVE-2026-79075 CVE-2026-78960 CVE-2026-78984 CVE-2026-78963 CVE-2026-79004 CVE-2026-79182 CVE-2026-79185 CVE-2026-79073 CVE-2026-79266 CVE-2026-79025 CVE-2026-79141 CVE-2026-78974 CVE-2026-79055 CVE-2026-79263 CVE-2026-79124 CVE-2026-79184 CVE-2026-79289 CVE-2026-79001 CVE-2026-79077 CVE-2026-78950 CVE-2026-79196 CVE-2026-79000 CVE-2026-78979 CVE-2026-79181 CVE-2026-79190 CVE-2026-79206 CVE-2026-78897 CVE-2026-79119 CVE-2026-79089 CVE-2026-79147 CVE-2026-79098 CVE-2026-79022 CVE-2026-79233 CVE-2026-79261 CVE-2026-78977 CVE-2026-79040 CVE-2026-79273 CVE-2026-79243 CVE-2026-79123 CVE-2026-79005 CVE-2026-79090 CVE-2026-78946 CVE-2026-78968 CVE-2026-79041 CVE-2026-79284 CVE-2026-78896 CVE-2026-79058 CVE-2026-79009 CVE-2026-79060 CVE-2026-79177 CVE-2026-78956 CVE-2026-79239 CVE-2026-79015 CVE-2026-79108 CVE-2026-79056 CVE-2026-79018 CVE-2026-78980 CVE-2026-78947 CVE-2026-79244 CVE-2026-79112 CVE-2026-79246 CVE-2026-79223 CVE-2026-79045 CVE-2026-79197 CVE-2026-79148 CVE-2026-79125 CVE-2026-79207 CVE-2026-79017 CVE-2026-79105 CVE-2026-79225 CVE-2026-79021 CVE-2026-79133 CVE-2026-79179 CVE-2026-79152 CVE-2026-78981 CVE-2026-78957 CVE-2026-79126 CVE-2026-78915 CVE-2026-79253 CVE-2026-79260 CVE-2026-79254 CVE-2026-78914 CVE-2026-78964 |
DragonFly, FreeBSD | 2 | 1 | |
| Keycloak -- multiple vulnerabilities CVE-2026-35563 CVE-2026-16093 CVE-2026-16072 CVE-2026-16108 CVE-2026-16105 CVE-2026-16089 CVE-2026-16104 CVE-2026-16106 CVE-2026-17059 CVE-2026-18218 CVE-2026-18215 CVE-2026-18201 CVE-2026-18209 CVE-2026-18214 CVE-2026-18571 CVE-2026-18572 CVE-2026-18573 CVE-2026-18570 CVE-2026-19729 CVE-2026-79652 |
DragonFly | 1 | 1 | |
| security/sudo-rs -- sudoedit could circumvent /etc/sudoers restrictions | - | 0 | 1 | |
| net-p2p/c-lightning -- unknown vulnerability | - | 0 | 1 | |
| Gitlab -- Vulnerabilities CVE-2026-18252 CVE-2026-77801 CVE-2025-10903 CVE-2026-3035 CVE-2026-4398 CVE-2026-15387 CVE-2026-7487 |
- | 0 | 1 | |
| Elixir -- Denial of service via uncontrolled recursion in charlist conversion CVE-2026-75758 |
- | 0 | 2 | |
| phpBB -- multiple vulnerabilities CVE-2026-29199 |
DragonFly | 1 | 1 | |
| Elixir -- Denial of service via uncontrolled recursion in charlist conversion CVE-2026-75758 |
DragonFly | 1 | 1 | |
| NSD -- multiple vulnerabilities CVE-2026-18664 CVE-2026-18916 CVE-2026-19401 CVE-2026-19538 |
- | 0 | 1 | |
| PHP Composer -- Multiple vulnerabilities CVE-2026-59944 |
- | 0 | 1 | |
| conduit -- authentication bypass vulnerability | - | 0 | 1 | |
| OpenSSL -- Multiple vulnerabilities CVE-2026-63072 CVE-2026-63076 CVE-2026-14457 CVE-2026-54874 CVE-2026-63073 CVE-2026-63074 CVE-2026-63075 CVE-2026-75803 |
DragonFly, OPNsense | 2 | 5 | |
| MariaDB -- Multiple vulnerabilities CVE-2026-61081 CVE-2026-60585 CVE-2026-60331 CVE-2026-60747 CVE-2026-47023 CVE-2026-60184 |
DragonFly | 1 | 4 | |
| net/rsync -- multiple vulnerabilities CVE-2026-53802 CVE-2026-53803 CVE-2026-53785 CVE-2026-53784 CVE-2026-53793 CVE-2026-53795 CVE-2026-53796 CVE-2026-53797 CVE-2026-53799 CVE-2026-53800 CVE-2026-53801 CVE-2026-53783 CVE-2026-53786 CVE-2026-53798 CVE-2026-53788 CVE-2026-53789 CVE-2026-53791 CVE-2026-53790 CVE-2026-53792 CVE-2026-53794 CVE-2026-70461 CVE-2026-70458 CVE-2026-70456 CVE-2026-70457 CVE-2026-70459 CVE-2026-70464 CVE-2026-70455 CVE-2026-70453 CVE-2026-70452 CVE-2026-70463 CVE-2026-70460 CVE-2026-70462 CVE-2026-70454 |
DragonFly | 1 | 1 | |
| mod_gnutls -- multiple vulnerabilities CVE-2026-33307 CVE-2026-33308 |
DragonFly | 1 | 1 | |
| jackson-databind -- multiple vulnerabilities CVE-2026-19032 CVE-2026-54512 CVE-2026-54513 CVE-2026-54514 CVE-2026-54515 CVE-2026-54516 CVE-2026-54517 CVE-2026-54518 CVE-2026-59888 CVE-2026-59889 CVE-2026-68497 CVE-2026-77310 |
- | 0 | 1 | |
| jackson-core -- StreamReadConstraints can be bypassed CVE-2026-68498 |
- | 0 | 1 | |
| traefik -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| terraform -- exclusion bypass in .terraformignore handling CVE-2026-14978 |
DragonFly | 1 | 1 | |
| tailscale -- Insufficient validation of 4via6 subnet router destinations | - | 0 | 1 | |
| qt6-webengine -- multiple vulnerabilities CVE-2026-1643 CVE-2026-7934 CVE-2026-7943 CVE-2026-7958 CVE-2026-7962 CVE-2026-7979 CVE-2026-8000 CVE-2026-8001 CVE-2026-8009 CVE-2026-8010 CVE-2026-8011 CVE-2026-8012 CVE-2026-8013 CVE-2026-8014 CVE-2026-8015 CVE-2026-8016 CVE-2026-8017 CVE-2026-8020 CVE-2026-8022 CVE-2026-8510 CVE-2026-8511 CVE-2026-8512 CVE-2026-8513 CVE-2026-8514 CVE-2026-8515 CVE-2026-8516 CVE-2026-8518 CVE-2026-8523 CVE-2026-8524 CVE-2026-8525 CVE-2026-8526 CVE-2026-8528 CVE-2026-8529 CVE-2026-8530 CVE-2026-8532 CVE-2026-8533 CVE-2026-8534 CVE-2026-8535 CVE-2026-8537 CVE-2026-8538 CVE-2026-8539 CVE-2026-8542 CVE-2026-8543 CVE-2026-8544 CVE-2026-8545 CVE-2026-8546 CVE-2026-8548 CVE-2026-8549 CVE-2026-8552 CVE-2026-8553 CVE-2026-8554 CVE-2026-8556 CVE-2026-8557 CVE-2026-8558 CVE-2026-8559 CVE-2026-8560 CVE-2026-8567 CVE-2026-8569 CVE-2026-8571 CVE-2026-8573 CVE-2026-8577 CVE-2026-8578 CVE-2026-8579 CVE-2026-8581 CVE-2026-8582 CVE-2026-8584 CVE-2026-8585 CVE-2026-9111 CVE-2026-9112 CVE-2026-9115 CVE-2026-9116 CVE-2026-9118 CVE-2026-9119 CVE-2026-9121 CVE-2026-9122 CVE-2026-9124 CVE-2026-9126 CVE-2026-9872 CVE-2026-9873 CVE-2026-9875 CVE-2026-9876 CVE-2026-9877 CVE-2026-9878 CVE-2026-9879 CVE-2026-9880 CVE-2026-9881 CVE-2026-9882 CVE-2026-9883 CVE-2026-9885 CVE-2026-9886 CVE-2026-9887 CVE-2026-9889 CVE-2026-9890 CVE-2026-9891 CVE-2026-9892 CVE-2026-9893 CVE-2026-9894 CVE-2026-9895 CVE-2026-9896 CVE-2026-9897 CVE-2026-9899 CVE-2026-9900 CVE-2026-9901 CVE-2026-9902 CVE-2026-9903 CVE-2026-9904 CVE-2026-9906 CVE-2026-9908 CVE-2026-9909 CVE-2026-9910 CVE-2026-9911 CVE-2026-9914 CVE-2026-9915 CVE-2026-9916 CVE-2026-9918 CVE-2026-9919 CVE-2026-9920 CVE-2026-9921 CVE-2026-9922 CVE-2026-9924 CVE-2026-9925 CVE-2026-9926 CVE-2026-9927 CVE-2026-9928 CVE-2026-9929 CVE-2026-9930 CVE-2026-9931 CVE-2026-9932 CVE-2026-9933 CVE-2026-9934 CVE-2026-9935 CVE-2026-9936 CVE-2026-9937 CVE-2026-9938 CVE-2026-9939 CVE-2026-9940 CVE-2026-9941 CVE-2026-9942 CVE-2026-9943 CVE-2026-9944 CVE-2026-9945 CVE-2026-9946 CVE-2026-9947 CVE-2026-9948 CVE-2026-9951 CVE-2026-9953 CVE-2026-9957 CVE-2026-9959 CVE-2026-9960 CVE-2026-9962 CVE-2026-9964 CVE-2026-9967 CVE-2026-9968 CVE-2026-9969 CVE-2026-9970 CVE-2026-9972 CVE-2026-9973 CVE-2026-9974 CVE-2026-9975 CVE-2026-9976 CVE-2026-9979 CVE-2026-9981 CVE-2026-9982 CVE-2026-9983 CVE-2026-9985 CVE-2026-9988 CVE-2026-9989 CVE-2026-9992 CVE-2026-9993 CVE-2026-9994 CVE-2026-9995 CVE-2026-9996 CVE-2026-9997 CVE-2026-9998 CVE-2026-9999 CVE-2026-10002 CVE-2026-10003 CVE-2026-10004 CVE-2026-10006 CVE-2026-10007 CVE-2026-10008 CVE-2026-10009 CVE-2026-10011 CVE-2026-10013 CVE-2026-10016 CVE-2026-10017 CVE-2026-10020 CVE-2026-10022 CVE-2026-10882 CVE-2026-10883 CVE-2026-10884 CVE-2026-10886 CVE-2026-10888 CVE-2026-10889 CVE-2026-10890 CVE-2026-10891 CVE-2026-10892 CVE-2026-10897 CVE-2026-10905 CVE-2026-10907 CVE-2026-10908 CVE-2026-10909 CVE-2026-10910 CVE-2026-10911 CVE-2026-10912 CVE-2026-10913 CVE-2026-10914 CVE-2026-10916 CVE-2026-10917 CVE-2026-10918 CVE-2026-10921 CVE-2026-10925 CVE-2026-10929 CVE-2026-10930 CVE-2026-10933 CVE-2026-10938 CVE-2026-10939 CVE-2026-10942 CVE-2026-10945 CVE-2026-10946 CVE-2026-10947 CVE-2026-10948 CVE-2026-10949 CVE-2026-10953 CVE-2026-10956 CVE-2026-10959 CVE-2026-10960 CVE-2026-10963 CVE-2026-10964 CVE-2026-10965 CVE-2026-10968 CVE-2026-10969 CVE-2026-10970 CVE-2026-10973 CVE-2026-10974 CVE-2026-10975 CVE-2026-10976 CVE-2026-10977 CVE-2026-10979 CVE-2026-10981 CVE-2026-10982 CVE-2026-10983 CVE-2026-10985 CVE-2026-10986 CVE-2026-10987 CVE-2026-10989 CVE-2026-10991 CVE-2026-10992 CVE-2026-10994 CVE-2026-10996 CVE-2026-10997 CVE-2026-10999 CVE-2026-11000 CVE-2026-11003 CVE-2026-11004 CVE-2026-11005 CVE-2026-11006 CVE-2026-11008 CVE-2026-11009 CVE-2026-11011 CVE-2026-11013 CVE-2026-11014 CVE-2026-11015 CVE-2026-11016 CVE-2026-11020 CVE-2026-11021 CVE-2026-11022 CVE-2026-11024 CVE-2026-11026 CVE-2026-11029 CVE-2026-11030 CVE-2026-11031 CVE-2026-11036 CVE-2026-11037 CVE-2026-11038 CVE-2026-11039 CVE-2026-11041 CVE-2026-11042 CVE-2026-11043 CVE-2026-11044 CVE-2026-11045 CVE-2026-11046 CVE-2026-11047 CVE-2026-11048 CVE-2026-11049 CVE-2026-11050 CVE-2026-11051 CVE-2026-11052 CVE-2026-11053 CVE-2026-11054 CVE-2026-11055 CVE-2026-11056 CVE-2026-11057 CVE-2026-11059 CVE-2026-11060 CVE-2026-11061 CVE-2026-11062 CVE-2026-11064 CVE-2026-11065 CVE-2026-11067 CVE-2026-11068 CVE-2026-11071 CVE-2026-11073 CVE-2026-11074 CVE-2026-11075 CVE-2026-11076 CVE-2026-11077 CVE-2026-11078 CVE-2026-11079 CVE-2026-11082 CVE-2026-11085 CVE-2026-11086 CVE-2026-11087 CVE-2026-11088 CVE-2026-11089 CVE-2026-11090 CVE-2026-11091 CVE-2026-11092 CVE-2026-11093 CVE-2026-11095 CVE-2026-11096 CVE-2026-11098 CVE-2026-11099 CVE-2026-11101 CVE-2026-11104 CVE-2026-11105 CVE-2026-11106 CVE-2026-11107 CVE-2026-11109 CVE-2026-11110 CVE-2026-11111 CVE-2026-11113 CVE-2026-11117 CVE-2026-11118 CVE-2026-11119 CVE-2026-11121 CVE-2026-11122 CVE-2026-11123 CVE-2026-11124 CVE-2026-11125 CVE-2026-11126 CVE-2026-11128 CVE-2026-11132 CVE-2026-11133 CVE-2026-11134 CVE-2026-11136 CVE-2026-11137 CVE-2026-11138 CVE-2026-11139 CVE-2026-11141 CVE-2026-11142 CVE-2026-11143 CVE-2026-11152 CVE-2026-11153 CVE-2026-11154 CVE-2026-11155 CVE-2026-11156 CVE-2026-11159 CVE-2026-11160 CVE-2026-11161 CVE-2026-11162 CVE-2026-11164 CVE-2026-11166 CVE-2026-11171 CVE-2026-11174 CVE-2026-11176 CVE-2026-11179 CVE-2026-11181 CVE-2026-11182 CVE-2026-11183 CVE-2026-11185 CVE-2026-11186 CVE-2026-11189 CVE-2026-11190 CVE-2026-11191 CVE-2026-11194 CVE-2026-11195 CVE-2026-11196 CVE-2026-11197 CVE-2026-11198 CVE-2026-11199 CVE-2026-11200 CVE-2026-11201 CVE-2026-11206 CVE-2026-11207 CVE-2026-11208 CVE-2026-11209 CVE-2026-11211 CVE-2026-11217 CVE-2026-11218 CVE-2026-11219 CVE-2026-11221 CVE-2026-11223 CVE-2026-11230 CVE-2026-11233 CVE-2026-11235 CVE-2026-11236 CVE-2026-11237 CVE-2026-11238 CVE-2026-11240 CVE-2026-11244 CVE-2026-11245 CVE-2026-11246 CVE-2026-11249 CVE-2026-11250 CVE-2026-11252 CVE-2026-11255 CVE-2026-11256 CVE-2026-11260 CVE-2026-11264 CVE-2026-11266 CVE-2026-11267 CVE-2026-11268 CVE-2026-11269 CVE-2026-11279 CVE-2026-11282 CVE-2026-11288 CVE-2026-11289 CVE-2026-11292 CVE-2026-11293 CVE-2026-11295 CVE-2026-11296 CVE-2026-11303 CVE-2026-11304 CVE-2026-11305 CVE-2026-11306 CVE-2026-11307 CVE-2026-11309 CVE-2026-11633 CVE-2026-11634 CVE-2026-11635 CVE-2026-11640 CVE-2026-11641 CVE-2026-11645 CVE-2026-11648 CVE-2026-11649 CVE-2026-11651 CVE-2026-11652 CVE-2026-11654 CVE-2026-11655 CVE-2026-11662 CVE-2026-11663 CVE-2026-11665 CVE-2026-11666 CVE-2026-11667 CVE-2026-11668 CVE-2026-11669 CVE-2026-11670 CVE-2026-11672 CVE-2026-11673 CVE-2026-11674 CVE-2026-11675 CVE-2026-11676 CVE-2026-11677 CVE-2026-11678 CVE-2026-11680 CVE-2026-11683 CVE-2026-11684 CVE-2026-11686 CVE-2026-11688 CVE-2026-11690 CVE-2026-11694 CVE-2026-11696 CVE-2026-11697 CVE-2026-11698 CVE-2026-11699 CVE-2026-11700 CVE-2026-12007 CVE-2026-12009 CVE-2026-12010 CVE-2026-12011 CVE-2026-12012 CVE-2026-12013 CVE-2026-12016 CVE-2026-12017 CVE-2026-12018 CVE-2026-12019 CVE-2026-12023 CVE-2026-12025 CVE-2026-12026 CVE-2026-12030 CVE-2026-12031 CVE-2026-12033 CVE-2026-12035 CVE-2026-12445 CVE-2026-12446 CVE-2026-12447 CVE-2026-12450 CVE-2026-12453 CVE-2026-12456 CVE-2026-12459 CVE-2026-12460 CVE-2026-12461 CVE-2026-12462 CVE-2026-12464 CVE-2026-12465 CVE-2026-12466 CVE-2026-13023 CVE-2026-13024 CVE-2026-13027 CVE-2026-13028 CVE-2026-13029 CVE-2026-13031 CVE-2026-13032 CVE-2026-13033 CVE-2026-13034 CVE-2026-13035 CVE-2026-13281 CVE-2026-13775 CVE-2026-13776 CVE-2026-13778 CVE-2026-13780 CVE-2026-13783 CVE-2026-13784 CVE-2026-13785 CVE-2026-13790 CVE-2026-13791 CVE-2026-13793 CVE-2026-13799 CVE-2026-13802 CVE-2026-13806 CVE-2026-13810 CVE-2026-13811 CVE-2026-13814 CVE-2026-13819 CVE-2026-13824 CVE-2026-13825 CVE-2026-13833 CVE-2026-13834 CVE-2026-13835 CVE-2026-13836 CVE-2026-13837 CVE-2026-13841 CVE-2026-13845 CVE-2026-13846 CVE-2026-13848 CVE-2026-13857 CVE-2026-13858 CVE-2026-13859 CVE-2026-13861 CVE-2026-13869 CVE-2026-13871 CVE-2026-13873 CVE-2026-13875 CVE-2026-13876 CVE-2026-13877 CVE-2026-13878 CVE-2026-13879 CVE-2026-13880 CVE-2026-13882 CVE-2026-13883 CVE-2026-13886 CVE-2026-13891 CVE-2026-13893 CVE-2026-13899 CVE-2026-13901 CVE-2026-13903 CVE-2026-13906 CVE-2026-13909 CVE-2026-13910 CVE-2026-13919 CVE-2026-13920 CVE-2026-13922 CVE-2026-13923 CVE-2026-13925 CVE-2026-13931 CVE-2026-13934 CVE-2026-13935 CVE-2026-13938 CVE-2026-13942 CVE-2026-13943 CVE-2026-13944 CVE-2026-13947 CVE-2026-13950 CVE-2026-13951 CVE-2026-13952 CVE-2026-13954 CVE-2026-13958 CVE-2026-13959 CVE-2026-13961 CVE-2026-13965 CVE-2026-13966 CVE-2026-13969 CVE-2026-13970 CVE-2026-13971 CVE-2026-13972 CVE-2026-13975 CVE-2026-13976 CVE-2026-13977 CVE-2026-13979 CVE-2026-13988 CVE-2026-13992 CVE-2026-13998 CVE-2026-13999 CVE-2026-14001 CVE-2026-14002 CVE-2026-14003 CVE-2026-14004 CVE-2026-14006 CVE-2026-14008 CVE-2026-14009 CVE-2026-14010 CVE-2026-14011 CVE-2026-14012 CVE-2026-14013 CVE-2026-14015 CVE-2026-14016 CVE-2026-14017 CVE-2026-14020 CVE-2026-14022 CVE-2026-14023 CVE-2026-14025 CVE-2026-14032 CVE-2026-14034 CVE-2026-14035 CVE-2026-14036 CVE-2026-14037 CVE-2026-14039 CVE-2026-14040 CVE-2026-14043 CVE-2026-14044 CVE-2026-14384 CVE-2026-14385 CVE-2026-14386 CVE-2026-14388 CVE-2026-14389 CVE-2026-14390 CVE-2026-14391 CVE-2026-14392 CVE-2026-14393 CVE-2026-14396 CVE-2026-14397 CVE-2026-14398 CVE-2026-14399 CVE-2026-14400 CVE-2026-14401 CVE-2026-14402 CVE-2026-14404 CVE-2026-14406 CVE-2026-14407 CVE-2026-14408 CVE-2026-14411 CVE-2026-14412 CVE-2026-14413 CVE-2026-14414 CVE-2026-14417 CVE-2026-14418 CVE-2026-14420 CVE-2026-14421 CVE-2026-14422 CVE-2026-14426 CVE-2026-14427 CVE-2026-14428 CVE-2026-14429 CVE-2026-14430 CVE-2026-14431 CVE-2026-14432 CVE-2026-15107 CVE-2026-15109 CVE-2026-15114 CVE-2026-15118 CVE-2026-15119 CVE-2026-15121 CVE-2026-15123 CVE-2026-15125 CVE-2026-15126 CVE-2026-15127 CVE-2026-15128 CVE-2026-15132 CVE-2026-15133 CVE-2026-15766 CVE-2026-15767 CVE-2026-15770 CVE-2026-15771 CVE-2026-15772 CVE-2026-15773 CVE-2026-15774 CVE-2026-15775 CVE-2026-15776 CVE-2026-15778 CVE-2026-15899 CVE-2026-15900 CVE-2026-15901 CVE-2026-15903 CVE-2026-15905 CVE-2026-16413 CVE-2026-16417 CVE-2026-16418 CVE-2026-16419 CVE-2026-16420 CVE-2026-16421 CVE-2026-16422 CVE-2026-16423 CVE-2026-16424 CVE-2026-16804 CVE-2026-16805 CVE-2026-16807 CVE-2026-17650 CVE-2026-17651 CVE-2026-17653 CVE-2026-17657 CVE-2026-17658 CVE-2026-17659 CVE-2026-17664 CVE-2026-17665 CVE-2026-17668 CVE-2026-17671 CVE-2026-17673 CVE-2026-17676 CVE-2026-17689 CVE-2026-17691 CVE-2026-17692 CVE-2026-17695 CVE-2026-17701 CVE-2026-17702 CVE-2026-17704 CVE-2026-17709 CVE-2026-17710 CVE-2026-17713 CVE-2026-17717 CVE-2026-17718 CVE-2026-17721 CVE-2026-19140 CVE-2026-19141 CVE-2026-19146 CVE-2026-19147 CVE-2026-19148 CVE-2026-19149 CVE-2026-19150 CVE-2026-19151 CVE-2026-19152 CVE-2026-19153 CVE-2026-19154 CVE-2026-19156 CVE-2026-19157 CVE-2026-19160 CVE-2026-19161 CVE-2026-19162 CVE-2026-19163 CVE-2026-19164 CVE-2026-19165 CVE-2026-19167 CVE-2026-19168 CVE-2026-19172 CVE-2026-19174 CVE-2026-19176 CVE-2026-25210 |
- | 0 | 2 | |
| chromium -- security fixes CVE-2026-76034 CVE-2026-76036 CVE-2026-76033 CVE-2026-76037 CVE-2026-76044 CVE-2026-76039 CVE-2026-76040 CVE-2026-76035 CVE-2026-76042 CVE-2026-76046 CVE-2026-76043 CVE-2026-76041 CVE-2026-76047 CVE-2026-76038 CVE-2026-76045 |
DragonFly | 1 | 2 | |
| zeek -- multiple vulnerabilities | - | 0 | 1 | |
| podman -- podman quadlet install --replace does not fully replace the old file CVE-2026-19730 |
- | 0 | 1 | |
| Gitlab -- Vulnerabilities CVE-2026-19478 CVE-2026-19650 |
- | 0 | 1 | |
| PostgreSQL -- Multiple vulnerabilities CVE-2026-6464 CVE-2026-6469 CVE-2026-6470 CVE-2026-6471 CVE-2026-14662 CVE-2026-14663 CVE-2026-14664 CVE-2026-14666 CVE-2026-14668 CVE-2026-14669 CVE-2026-14670 CVE-2026-14671 CVE-2026-14672 CVE-2026-14673 CVE-2026-14676 CVE-2026-14677 CVE-2026-14678 CVE-2026-14679 CVE-2026-14680 CVE-2026-14681 CVE-2026-15741 CVE-2026-15742 CVE-2026-16238 CVE-2026-16239 CVE-2026-16241 CVE-2026-18024 CVE-2026-18408 CVE-2026-19385 |
DragonFly | 3 | 5 | |
| gitea -- Multiple vulnerabilities CVE-2026-23603 CVE-2026-42931 CVE-2026-50105 CVE-2026-54481 CVE-2026-55982 CVE-2026-55984 CVE-2026-55986 CVE-2026-55987 CVE-2026-56443 CVE-2026-56654 CVE-2026-56657 CVE-2026-56750 CVE-2026-56755 CVE-2026-57886 CVE-2026-57894 CVE-2026-57897 CVE-2026-58314 CVE-2026-58416 CVE-2026-58417 CVE-2026-58420 CVE-2026-58425 CVE-2026-58427 CVE-2026-58428 CVE-2026-58429 CVE-2026-58431 CVE-2026-58432 CVE-2026-58433 CVE-2026-58434 CVE-2026-58435 CVE-2026-58436 CVE-2026-58437 CVE-2026-58438 CVE-2026-58439 CVE-2026-58440 CVE-2026-58441 CVE-2026-58442 CVE-2026-58443 CVE-2026-58444 CVE-2026-58445 CVE-2026-58507 CVE-2026-58508 CVE-2026-58510 CVE-2026-58511 CVE-2026-59763 CVE-2026-59765 |
DragonFly | 1 | 1 | |
| OpenEXR -- 3.4.14 fixes multiple vulnerabilities CVE-2026-68514 CVE-2026-68513 CVE-2026-62986 CVE-2026-61703 CVE-2026-61555 CVE-2026-59985 CVE-2026-59984 CVE-2026-59983 CVE-2026-59982 CVE-2026-59981 CVE-2026-59189 CVE-2026-59187 CVE-2026-59186 CVE-2026-59184 CVE-2026-59183 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-15217 CVE-2026-15216 CVE-2026-15423 CVE-2026-19228 CVE-2026-16627 CVE-2026-16494 CVE-2026-7427 CVE-2026-6821 CVE-2026-4879 CVE-2026-8667 CVE-2026-18244 CVE-2026-18433 CVE-2025-9486 |
- | 0 | 1 | |
| chromium -- security fixes CVE-2026-19137 CVE-2026-19149 CVE-2026-19154 CVE-2026-19157 CVE-2026-19170 CVE-2026-19172 CVE-2026-19169 CVE-2026-19168 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145 CVE-2026-19146 CVE-2026-19147 CVE-2026-19148 CVE-2026-19150 CVE-2026-19151 CVE-2026-19152 CVE-2026-19153 CVE-2026-19155 CVE-2026-19156 CVE-2026-19158 CVE-2026-19159 CVE-2026-19160 CVE-2026-19161 CVE-2026-19162 CVE-2026-19163 CVE-2026-19164 CVE-2026-19165 CVE-2026-19166 CVE-2026-19167 CVE-2026-19171 CVE-2026-19173 CVE-2026-19174 CVE-2026-19175 CVE-2026-19176 CVE-2026-19177 |
DragonFly | 1 | 2 | |
| chromium -- security fixes CVE-2026-19556 CVE-2026-19557 CVE-2026-19558 CVE-2026-19559 CVE-2026-19560 |
DragonFly | 1 | 2 | |
| phpmyfaq -- multiple vulnerabilities | - | 0 | 1 | |
| OpenSSH -- Multiple vulnerbilities | - | 0 | 1 | |
| chromium -- Multiple vulnerabilities CVE-2026-19172 CVE-2026-19170 CVE-2026-19157 CVE-2026-19154 CVE-2026-19149 CVE-2026-19137 |
DragonFly | 1 | 1 | |
| gitea -- Multiple vulnerabilities CVE-2026-59774 CVE-2026-60004 |
DragonFly | 1 | 1 | |
| Roundcube -- Multiple vulnerabilities | - | 0 | 1 | |
| Calibre Web -- two vulnerabilities CVE-2025-6998 CVE-2025-7404 |
DragonFly | 1 | 1 | |
| gstreamer1 -- multiple vulnerabilities CVE-2026-18649 |
DragonFly | 4 | 4 | |
| libXfont2 -- multiple vulnerabilities CVE-2026-44950 CVE-2026-59679 |
DragonFly | 1 | 1 | |
| py-djangorestframework -- two vulnerabilities | DragonFly | 1 | 2 | |
| DNSDist, PowerDNS, PowerDNS Recursor -- vulnerability CVE-2026-52682 |
- | 0 | 3 | |
| jenkins -- multiple vulnerabilities CVE-2026-70426 CVE-2026-70427 CVE-2026-70428 CVE-2026-70429 CVE-2026-70430 |
DragonFly | 2 | 2 | |
| Keycloak -- multiple vulnerabilities CVE-2026-9793 CVE-2026-4629 CVE-2026-14209 CVE-2026-14614 CVE-2026-14615 |
DragonFly | 1 | 1 | |
| MySQL 8.4 -- Multiple vulnerabilities CVE-2026-46936 CVE-2026-47012 CVE-2026-47023 CVE-2026-47052 CVE-2026-47064 CVE-2026-60145 CVE-2026-60163 CVE-2026-60177 CVE-2026-60178 CVE-2026-60182 CVE-2026-60183 CVE-2026-60184 CVE-2026-60185 CVE-2026-60186 CVE-2026-60187 CVE-2026-60188 CVE-2026-60189 CVE-2026-60190 CVE-2026-60191 CVE-2026-60314 CVE-2026-60315 CVE-2026-60316 CVE-2026-60331 CVE-2026-60332 CVE-2026-60585 CVE-2026-60725 CVE-2026-60747 CVE-2026-61081 CVE-2026-61094 CVE-2026-61096 CVE-2026-61109 |
- | 0 | 2 | |
| MySQL 9.7 -- Multiple vulnerabilities CVE-2026-46936 CVE-2026-47008 CVE-2026-47012 CVE-2026-47023 CVE-2026-47052 CVE-2026-47064 CVE-2026-60145 CVE-2026-60163 CVE-2026-60174 CVE-2026-60177 CVE-2026-60178 CVE-2026-60181 CVE-2026-60182 CVE-2026-60183 CVE-2026-60184 CVE-2026-60185 CVE-2026-60186 CVE-2026-60187 CVE-2026-60188 CVE-2026-60189 CVE-2026-60190 CVE-2026-60191 CVE-2026-60194 CVE-2026-60195 CVE-2026-60311 CVE-2026-60314 CVE-2026-60315 CVE-2026-60316 CVE-2026-60324 CVE-2026-60331 CVE-2026-60332 CVE-2026-60585 CVE-2026-60718 CVE-2026-60725 CVE-2026-60747 CVE-2026-61081 CVE-2026-61093 CVE-2026-61094 CVE-2026-61096 CVE-2026-61108 CVE-2026-61109 CVE-2026-61128 CVE-2026-61144 |
- | 0 | 2 | |
| PowerDNS Recursor -- multiple vulnerabilities CVE-2026-52868 CVE-2026-52686 |
- | 0 | 1 | |
| erlang -- SSH plaintext recovery attack against CBC ciphers CVE-2008-5161 |
DragonFly | 3 | 4 | |
| Angie -- multiple vulnerabilities CVE-2026-42533 CVE-2026-60005 CVE-2026-56434 |
DragonFly | 1 | 1 | |
| Weechat -- Multiple vulnerabilities CVE-2026-53524 CVE-2026-53525 |
DragonFly | 1 | 1 | |
| ejabberd -- Multiple security vulnerabilities | DragonFly | 1 | 1 | |
| py-mkdocs-material -- DOM XSS vulnerability | DragonFly | 1 | 1 | |
| Weechat -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| chromium -- security fixes CVE-2026-17650 CVE-2026-17651 CVE-2026-17652 CVE-2026-17653 CVE-2026-17654 CVE-2026-17655 CVE-2026-17656 CVE-2026-17657 CVE-2026-17658 CVE-2026-17659 CVE-2026-17660 CVE-2026-17661 CVE-2026-17662 CVE-2026-17663 CVE-2026-17664 CVE-2026-17665 CVE-2026-17666 CVE-2026-17667 CVE-2026-17668 CVE-2026-17669 CVE-2026-17670 CVE-2026-17671 CVE-2026-17672 CVE-2026-17673 CVE-2026-17674 CVE-2026-17675 CVE-2026-17676 CVE-2026-17677 CVE-2026-17678 CVE-2026-17679 CVE-2026-17680 CVE-2026-17681 CVE-2026-17682 CVE-2026-17683 CVE-2026-17684 CVE-2026-17685 CVE-2026-17686 CVE-2026-17687 CVE-2026-17688 CVE-2026-17689 CVE-2026-17690 CVE-2026-17691 CVE-2026-17692 CVE-2026-17693 CVE-2026-17694 CVE-2026-17695 CVE-2026-17696 CVE-2026-17697 CVE-2026-17698 CVE-2026-17699 CVE-2026-17700 CVE-2026-17701 CVE-2026-17702 CVE-2026-17703 CVE-2026-17704 CVE-2026-17705 CVE-2026-17706 CVE-2026-17707 CVE-2026-17708 CVE-2026-17709 CVE-2026-17710 CVE-2026-17711 CVE-2026-17712 CVE-2026-17713 CVE-2026-17714 CVE-2026-17715 CVE-2026-17716 CVE-2026-17717 CVE-2026-17718 CVE-2026-17719 CVE-2026-17720 CVE-2026-17721 CVE-2026-17722 CVE-2026-17723 CVE-2026-17724 CVE-2026-17725 CVE-2026-17726 CVE-2026-17727 CVE-2026-17728 CVE-2026-17758 CVE-2026-17732 CVE-2026-17729 CVE-2026-17730 CVE-2026-17731 CVE-2026-17733 CVE-2026-17734 CVE-2026-17735 CVE-2026-17736 CVE-2026-17737 CVE-2026-17738 CVE-2026-17739 CVE-2026-17740 CVE-2026-17741 CVE-2026-17742 CVE-2026-17743 CVE-2026-17744 CVE-2026-17745 CVE-2026-17746 CVE-2026-17747 CVE-2026-17748 CVE-2026-17749 CVE-2026-17750 CVE-2026-17751 CVE-2026-17752 CVE-2026-17753 CVE-2026-17754 CVE-2026-17755 CVE-2026-17756 CVE-2026-17757 CVE-2026-17759 CVE-2026-17760 CVE-2026-17761 CVE-2026-17762 CVE-2026-17763 CVE-2026-17764 CVE-2026-17765 CVE-2026-17766 CVE-2026-17767 CVE-2026-17768 CVE-2026-17769 CVE-2026-17770 CVE-2026-17771 CVE-2026-17772 CVE-2026-17773 CVE-2026-17774 CVE-2026-17775 CVE-2026-17776 CVE-2026-17777 CVE-2026-17778 CVE-2026-17779 CVE-2026-17780 CVE-2026-17781 CVE-2026-17782 CVE-2026-17783 CVE-2026-17784 CVE-2026-17785 CVE-2026-17786 CVE-2026-17787 CVE-2026-17788 CVE-2026-17789 CVE-2026-17790 CVE-2026-17791 CVE-2026-17792 CVE-2026-17793 CVE-2026-17794 CVE-2026-17795 CVE-2026-17796 CVE-2026-17797 CVE-2026-17798 CVE-2026-17799 CVE-2026-17800 CVE-2026-17801 CVE-2026-17802 CVE-2026-17803 CVE-2026-17804 CVE-2026-17805 CVE-2026-17806 CVE-2026-17807 CVE-2026-17808 CVE-2026-17809 CVE-2026-17810 CVE-2026-17811 CVE-2026-17812 CVE-2026-17813 CVE-2026-17814 CVE-2026-17815 CVE-2026-17816 CVE-2026-17817 CVE-2026-17818 CVE-2026-17819 CVE-2026-17820 CVE-2026-17821 CVE-2026-17822 CVE-2026-17823 CVE-2026-17824 CVE-2026-17825 CVE-2026-17826 CVE-2026-17827 CVE-2026-17828 CVE-2026-17829 CVE-2026-17830 CVE-2026-17831 CVE-2026-17832 CVE-2026-17833 CVE-2026-17834 CVE-2026-17835 CVE-2026-17836 CVE-2026-17837 CVE-2026-17838 CVE-2026-17839 CVE-2026-17840 CVE-2026-17841 CVE-2026-17842 CVE-2026-17843 CVE-2026-17844 CVE-2026-17845 CVE-2026-17846 CVE-2026-17847 CVE-2026-17848 CVE-2026-17849 CVE-2026-17850 CVE-2026-17851 CVE-2026-17852 CVE-2026-17853 CVE-2026-17854 CVE-2026-17855 CVE-2026-17856 CVE-2026-17857 CVE-2026-17858 CVE-2026-17859 CVE-2026-17860 CVE-2026-17861 CVE-2026-17862 CVE-2026-17863 CVE-2026-17864 CVE-2026-17865 CVE-2026-17866 CVE-2026-17867 CVE-2026-17868 CVE-2026-17869 CVE-2026-17870 CVE-2026-17871 CVE-2026-17872 CVE-2026-17873 CVE-2026-17874 CVE-2026-17875 CVE-2026-17876 CVE-2026-17877 CVE-2026-17878 CVE-2026-17879 CVE-2026-17880 CVE-2026-17881 CVE-2026-17882 CVE-2026-17883 CVE-2026-17884 CVE-2026-17885 CVE-2026-17886 CVE-2026-17887 CVE-2026-17888 CVE-2026-17889 CVE-2026-17890 CVE-2026-17891 CVE-2026-17892 CVE-2026-17893 CVE-2026-17894 CVE-2026-17895 CVE-2026-17896 CVE-2026-17897 CVE-2026-17898 CVE-2026-17899 CVE-2026-17900 CVE-2026-17901 CVE-2026-17902 CVE-2026-17903 CVE-2026-17904 CVE-2026-17905 CVE-2026-17906 CVE-2026-17907 CVE-2026-17908 CVE-2026-17909 CVE-2026-17910 CVE-2026-17911 CVE-2026-17912 CVE-2026-17913 CVE-2026-17914 CVE-2026-17915 CVE-2026-17916 CVE-2026-17917 CVE-2026-17918 CVE-2026-17919 CVE-2026-17920 CVE-2026-17921 CVE-2026-17922 CVE-2026-17923 CVE-2026-17924 CVE-2026-17925 CVE-2026-17926 CVE-2026-17927 CVE-2026-17928 CVE-2026-17929 CVE-2026-17930 CVE-2026-17931 CVE-2026-17932 CVE-2026-17933 CVE-2026-17934 CVE-2026-17935 CVE-2026-17936 CVE-2026-17937 CVE-2026-17938 CVE-2026-17939 CVE-2026-17940 CVE-2026-17941 CVE-2026-17942 CVE-2026-17943 CVE-2026-17944 CVE-2026-17945 CVE-2026-17946 CVE-2026-17947 CVE-2026-17948 CVE-2026-17949 CVE-2026-17950 CVE-2026-17951 CVE-2026-17952 CVE-2026-17953 CVE-2026-17954 CVE-2026-17955 CVE-2026-17956 CVE-2026-17957 CVE-2026-17958 CVE-2026-17959 CVE-2026-17960 CVE-2026-17961 CVE-2026-17962 CVE-2026-17963 CVE-2026-17964 CVE-2026-17965 CVE-2026-17966 CVE-2026-17967 CVE-2026-17968 CVE-2026-17969 CVE-2026-17970 CVE-2026-17971 CVE-2026-17972 CVE-2026-17973 CVE-2026-17974 CVE-2026-17975 CVE-2026-17976 CVE-2026-17977 CVE-2026-17978 CVE-2026-17979 CVE-2026-17980 CVE-2026-17981 CVE-2026-17982 CVE-2026-17983 CVE-2026-17984 CVE-2026-17985 CVE-2026-17986 CVE-2026-17987 CVE-2026-17988 CVE-2026-17989 CVE-2026-17990 CVE-2026-17991 CVE-2026-17992 CVE-2026-17993 CVE-2026-17994 CVE-2026-17995 CVE-2026-17996 CVE-2026-17997 CVE-2026-17998 CVE-2026-17999 CVE-2026-18000 CVE-2026-18001 CVE-2026-18002 CVE-2026-18003 CVE-2026-18004 CVE-2026-18005 CVE-2026-18006 CVE-2026-18007 CVE-2026-18008 CVE-2026-18009 CVE-2026-18010 CVE-2026-18011 CVE-2026-18012 CVE-2026-18013 CVE-2026-18014 CVE-2026-18015 CVE-2026-18016 CVE-2026-18017 CVE-2026-18018 CVE-2026-18019 |
DragonFly | 1 | 2 | |
| Gitlab -- vulnerabilities CVE-2026-6267 CVE-2026-12436 CVE-2026-15975 CVE-2026-13113 CVE-2026-16553 CVE-2026-6336 CVE-2026-14341 CVE-2026-3093 CVE-2026-15077 CVE-2026-15831 CVE-2026-14351 CVE-2026-4672 CVE-2025-14562 |
- | 0 | 1 | |
| NetBird -- Local Privilege Escalation via Unauthenticated IPC Socket | - | 0 | 1 | |
| chromium -- security fixes CVE-2026-15899 CVE-2026-15900 CVE-2026-15901 CVE-2026-15902 CVE-2026-15903 CVE-2026-15904 CVE-2026-15905 |
DragonFly | 1 | 2 | |
| chromium -- security fixes CVE-2026-15764 CVE-2026-15765 CVE-2026-15766 CVE-2026-15767 CVE-2026-15768 CVE-2026-15769 CVE-2026-15770 CVE-2026-15771 CVE-2026-15772 CVE-2026-15773 CVE-2026-15774 CVE-2026-15775 CVE-2026-15776 CVE-2026-15777 CVE-2026-15778 |
DragonFly | 1 | 2 | |
| chromium -- security fixes CVE-2026-16420 CVE-2026-16421 CVE-2026-16413 CVE-2026-16414 CVE-2026-16415 CVE-2026-16416 CVE-2026-16417 CVE-2026-16418 CVE-2026-16419 CVE-2026-16422 CVE-2026-16423 CVE-2026-16424 |
DragonFly | 1 | 2 | |
| chromium -- security fixes CVE-2026-16807 CVE-2026-16806 CVE-2026-16805 CVE-2026-16804 |
DragonFly | 1 | 2 | |
| GoLand -- Multiple vulnerabilities CVE-2026-64802 |
FreeBSD | 1 | 0 | |
| mailpit -- WebSocket origin check bypass via percent-encoded path | - | 0 | 1 | |
| Mozilla -- Memory safety bugs CVE-2026-16411 |
DragonFly | 2 | 2 | |
| Mozilla -- Memory safety bugs CVE-2026-16412 |
DragonFly | 3 | 3 | |
| Mozilla -- Memory safety bugs CVE-2026-16360 |
DragonFly | 3 | 3 | |
| Erlang/OTP -- (D)TLS-1.2 server certificate verification bypass CVE-2026-55953 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- TLS denial of service using invalid certificate chains CVE-2026-58227 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- denial of service via exponential certificate policy tree growth CVE-2026-59251 |
DragonFly | 2 | 5 | |
| Erlang/OTP -- megaco flex scanner buffer overflow CVE-2026-59250 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- binary_to_term crash on crafted BIT_BINARY_EXT input CVE-2026-54890 |
DragonFly | 2 | 5 | |
| Erlang/OTP -- heap corruption decoding invalidly encoded large tuples CVE-2026-55737 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- relative path traversal in the zip module CVE-2026-47078 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- denial of service in epmd CVE-2026-42792 |
DragonFly | 3 | 4 | |
| Vaultwarden -- multiple vulnerabilities | - | 0 | 1 | |
| unbound -- multiple vulnerabilities CVE-2026-14586 CVE-2026-32665 CVE-2026-40691 CVE-2026-41637 CVE-2026-42955 CVE-2026-44621 CVE-2026-44687 CVE-2026-44690 CVE-2026-46582 CVE-2026-50045 CVE-2026-50046 CVE-2026-50243 CVE-2026-50248 CVE-2026-50251 CVE-2026-50252 CVE-2026-52863 CVE-2026-54478 CVE-2026-55708 CVE-2026-55717 CVE-2026-55973 CVE-2026-55990 CVE-2026-55991 CVE-2026-56416 CVE-2026-56444 |
DragonFly | 1 | 1 | |
| gstreamer1 -- multiple vulnerabilities CVE-2026-2920 CVE-2026-14935 CVE-2026-59691 CVE-2026-59692 |
DragonFly | 4 | 4 | |
| srt -- Multiple vulnerabilities CVE-2026-55869 CVE-2026-55868 |
DragonFly | 1 | 1 | |
| giflib -- Buffer Overflow vulnerability CVE-2026-26740 |
DragonFly, NetBSD | 2 | 1 | |
| Mailpit -- SMTP DATA line reader buffers over-limit input before size enforcement | - | 0 | 1 | |
| Weechat -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| tailscale -- Multiple vulnerabilities | - | 0 | 1 | |
| phpmyfaq -- multiple vulnerabilities | - | 0 | 1 | |
| nginx -- multiple vulnerabilities CVE-2026-42533 CVE-2026-56434 CVE-2026-60005 |
DragonFly | 2 | 2 | |
| traefik -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| liboqs -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| Poppler: integer overflow in tilingPatternFill CVE-2026-10118 |
DragonFly | 5 | 5 | |
| ocaml-opam -- opam install sandbox escape using symlinks CVE-2026-57825 |
DragonFly | 1 | 1 | |
| httpclient -- Improper Certificate Validation CVE-2012-5783 |
DragonFly, FreeBSD | 2 | 0 | |
| Apache HttpClient -- misinterpret malformed authority component CVE-2020-13956 |
DragonFly, FreeBSD | 4 | 0 | |
| mailpit -- multiple vulnerabilities | - | 0 | 1 | |
| Gitlab -- Vulnerabilities CVE-2026-6896 CVE-2026-13320 CVE-2026-11827 CVE-2026-8472 CVE-2026-7492 CVE-2025-12506 CVE-2026-13151 CVE-2026-6352 |
- | 0 | 1 | |
| xwayland -- Multiple vulnerabilities CVE-2026-55999 CVE-2026-56000 |
DragonFly | 1 | 1 | |
| libXfont2 -- Multiple vulnerabilities CVE-2026-56001 CVE-2026-56002 CVE-2026-56003 |
DragonFly | 1 | 1 | |
| xrdp -- multiple vulnerabilities CVE-2026-41252 CVE-2026-41521 CVE-2026-44178 CVE-2026-42218 CVE-2026-44978 CVE-2026-54538 CVE-2026-55238 CVE-2026-55626 CVE-2026-55639 CVE-2026-55645 |
DragonFly, FreeBSD | 3 | 0 | |
| Emacs -- Heap out-of-bounds write when rendering SVG images CVE-2026-6861 |
DragonFly | 1 | 3 | |
| zeek -- potential DoS vulnerabilities | - | 0 | 1 | |
| Roundcube -- Multiple vulnerabilities CVE-2026-54432 CVE-2026-54433 |
- | 0 | 1 | |
| Weechat -- Memory leak in relay-API | DragonFly | 1 | 1 | |
| traefik -- Multiple vulnerabilities CVE-2026-54763 CVE-2026-54764 CVE-2026-54765 |
DragonFly | 1 | 1 | |
| p5-CGI-Session -- secuity fixes CVE-2026-56016 |
DragonFly | 1 | 1 | |
| chromium -- security fixes CVE-2026-13774 CVE-2026-13775 CVE-2026-13776 CVE-2026-13777 CVE-2026-13778 CVE-2026-13779 CVE-2026-13780 CVE-2026-13781 CVE-2026-13782 CVE-2026-13783 CVE-2026-13784 CVE-2026-13785 CVE-2026-13786 CVE-2026-13787 CVE-2026-13788 CVE-2026-13789 CVE-2026-13790 CVE-2026-13791 CVE-2026-13792 CVE-2026-13793 CVE-2026-13794 CVE-2026-13795 CVE-2026-13796 CVE-2026-13797 CVE-2026-13798 CVE-2026-13799 CVE-2026-13800 CVE-2026-13801 CVE-2026-13802 CVE-2026-13803 CVE-2026-13804 CVE-2026-13805 CVE-2026-13806 CVE-2026-13807 CVE-2026-13808 CVE-2026-13809 CVE-2026-13810 CVE-2026-13811 CVE-2026-13812 CVE-2026-13813 CVE-2026-13814 CVE-2026-13815 CVE-2026-13816 CVE-2026-13817 CVE-2026-13818 CVE-2026-13819 CVE-2026-13820 CVE-2026-13821 CVE-2026-13822 CVE-2026-13823 CVE-2026-13824 CVE-2026-13825 CVE-2026-13826 CVE-2026-13827 CVE-2026-13828 CVE-2026-13829 CVE-2026-13830 CVE-2026-13831 CVE-2026-13832 CVE-2026-13833 CVE-2026-13834 CVE-2026-13835 CVE-2026-13836 CVE-2026-13837 CVE-2026-13838 CVE-2026-13839 CVE-2026-13840 CVE-2026-13841 CVE-2026-13842 CVE-2026-13843 CVE-2026-13844 CVE-2026-13845 CVE-2026-13846 CVE-2026-13847 CVE-2026-13848 CVE-2026-13849 CVE-2026-13850 CVE-2026-13851 CVE-2026-13852 CVE-2026-13853 CVE-2026-13854 CVE-2026-13855 CVE-2026-13856 CVE-2026-13857 CVE-2026-13858 CVE-2026-13859 CVE-2026-13860 CVE-2026-13861 CVE-2026-13862 CVE-2026-13863 CVE-2026-13864 CVE-2026-13865 CVE-2026-13866 CVE-2026-13867 CVE-2026-13868 CVE-2026-13869 CVE-2026-13870 CVE-2026-13871 CVE-2026-13872 CVE-2026-13873 CVE-2026-13874 CVE-2026-13875 CVE-2026-13876 CVE-2026-13877 CVE-2026-13878 CVE-2026-13879 CVE-2026-13880 CVE-2026-13881 CVE-2026-13882 CVE-2026-13883 CVE-2026-13884 CVE-2026-13885 CVE-2026-13886 CVE-2026-13887 CVE-2026-13888 CVE-2026-13889 CVE-2026-13890 CVE-2026-13891 CVE-2026-13892 CVE-2026-13893 CVE-2026-13894 CVE-2026-13895 CVE-2026-13896 CVE-2026-13897 CVE-2026-13898 CVE-2026-13899 CVE-2026-13900 CVE-2026-13901 CVE-2026-13902 CVE-2026-13903 CVE-2026-13904 CVE-2026-13905 CVE-2026-13906 CVE-2026-13907 CVE-2026-13908 CVE-2026-13909 CVE-2026-13910 CVE-2026-13911 CVE-2026-13912 CVE-2026-13913 CVE-2026-13914 CVE-2026-13915 CVE-2026-13916 CVE-2026-13917 CVE-2026-13918 CVE-2026-13919 CVE-2026-13920 CVE-2026-13921 CVE-2026-13922 CVE-2026-13923 CVE-2026-13924 CVE-2026-13925 CVE-2026-13926 CVE-2026-13927 CVE-2026-13928 CVE-2026-13929 CVE-2026-13930 CVE-2026-13931 CVE-2026-13932 CVE-2026-13933 CVE-2026-13934 CVE-2026-13935 CVE-2026-13936 CVE-2026-13937 CVE-2026-13938 CVE-2026-13939 CVE-2026-13940 CVE-2026-13941 CVE-2026-13942 CVE-2026-13943 CVE-2026-13944 CVE-2026-13945 CVE-2026-13946 CVE-2026-13947 CVE-2026-13948 CVE-2026-13949 CVE-2026-13950 CVE-2026-13951 CVE-2026-13952 CVE-2026-13953 CVE-2026-13954 CVE-2026-13955 CVE-2026-13956 CVE-2026-13957 CVE-2026-13958 CVE-2026-13959 CVE-2026-13960 CVE-2026-13961 CVE-2026-13962 CVE-2026-13963 CVE-2026-13964 CVE-2026-13965 CVE-2026-13966 CVE-2026-13967 CVE-2026-13968 CVE-2026-13969 CVE-2026-13970 CVE-2026-13971 CVE-2026-13972 CVE-2026-13973 CVE-2026-13974 CVE-2026-13975 CVE-2026-13976 CVE-2026-13977 CVE-2026-13978 CVE-2026-13979 CVE-2026-13980 CVE-2026-13981 CVE-2026-13982 CVE-2026-13983 CVE-2026-13984 CVE-2026-13985 CVE-2026-13986 CVE-2026-13987 CVE-2026-13988 CVE-2026-13989 CVE-2026-13990 CVE-2026-13991 CVE-2026-13992 CVE-2026-13993 CVE-2026-13994 CVE-2026-13995 CVE-2026-13996 CVE-2026-13997 CVE-2026-13998 CVE-2026-13999 CVE-2026-14000 CVE-2026-14001 CVE-2026-14002 CVE-2026-14003 CVE-2026-14004 CVE-2026-14005 CVE-2026-14006 CVE-2026-14007 CVE-2026-14008 CVE-2026-14009 CVE-2026-14010 CVE-2026-14011 CVE-2026-14012 CVE-2026-14013 CVE-2026-14014 CVE-2026-14015 CVE-2026-14016 CVE-2026-14017 CVE-2026-14018 CVE-2026-14019 CVE-2026-14020 CVE-2026-14021 CVE-2026-14022 CVE-2026-14023 CVE-2026-14024 CVE-2026-14025 CVE-2026-14026 CVE-2026-14027 CVE-2026-14028 CVE-2026-14030 CVE-2026-14031 CVE-2026-14032 CVE-2026-14033 CVE-2026-14034 CVE-2026-14035 CVE-2026-14036 CVE-2026-14037 CVE-2026-14038 CVE-2026-14039 CVE-2026-14040 CVE-2026-14041 CVE-2026-14042 CVE-2026-14043 CVE-2026-14044 CVE-2026-14045 CVE-2026-14046 CVE-2026-14047 CVE-2026-14048 CVE-2026-14049 CVE-2026-14050 CVE-2026-14051 CVE-2026-14052 CVE-2026-14053 CVE-2026-14054 CVE-2026-14055 CVE-2026-14056 CVE-2026-14057 CVE-2026-14058 CVE-2026-14059 CVE-2026-14060 CVE-2026-14061 CVE-2026-14062 CVE-2026-14063 CVE-2026-14064 CVE-2026-14065 CVE-2026-14066 CVE-2026-14067 CVE-2026-14068 CVE-2026-14069 CVE-2026-14070 CVE-2026-14071 CVE-2026-14072 CVE-2026-14073 CVE-2026-14074 CVE-2026-14075 CVE-2026-14076 CVE-2026-14077 CVE-2026-14078 CVE-2026-14079 CVE-2026-14080 CVE-2026-14081 CVE-2026-14082 CVE-2026-14083 CVE-2026-14084 CVE-2026-14085 CVE-2026-14086 CVE-2026-14087 CVE-2026-14088 CVE-2026-14089 CVE-2026-14090 CVE-2026-14091 CVE-2026-14092 CVE-2026-14093 CVE-2026-14094 CVE-2026-14095 CVE-2026-14096 CVE-2026-14097 CVE-2026-14098 CVE-2026-14099 CVE-2026-14100 CVE-2026-14101 CVE-2026-14102 CVE-2026-14103 CVE-2026-14104 CVE-2026-14105 CVE-2026-14106 CVE-2026-14107 CVE-2026-14108 CVE-2026-14109 CVE-2026-14110 CVE-2026-14111 CVE-2026-14112 CVE-2026-14113 CVE-2026-14114 CVE-2026-14115 CVE-2026-14116 CVE-2026-14117 CVE-2026-14118 CVE-2026-14119 CVE-2026-14120 CVE-2026-14121 CVE-2026-14122 CVE-2026-14123 CVE-2026-14124 CVE-2026-14125 CVE-2026-14126 CVE-2026-14127 CVE-2026-14128 CVE-2026-14129 CVE-2026-14130 CVE-2026-14131 CVE-2026-14132 CVE-2026-14133 CVE-2026-14134 CVE-2026-14135 CVE-2026-14136 CVE-2026-14137 CVE-2026-14138 CVE-2026-14139 CVE-2026-14140 CVE-2026-14141 CVE-2026-14142 CVE-2026-14143 CVE-2026-14144 CVE-2026-14145 CVE-2026-14146 CVE-2026-14147 CVE-2026-14148 CVE-2026-14149 CVE-2026-14150 CVE-2026-14151 CVE-2026-14152 CVE-2026-14153 CVE-2026-14154 CVE-2026-14155 CVE-2026-14156 |
DragonFly | 1 | 2 | |
| openvpn -- multiple vulnerabilities CVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117 CVE-2026-13122 CVE-2026-13698 |
DragonFly | 1 | 2 | |
| chromium -- security fixes CVE-2026-13281 CVE-2026-13282 CVE-2026-13283 |
DragonFly | 1 | 2 | |
| icinga2 -- Improper access control for JSON-RPC update certificate messages | - | 0 | 1 | |
| PostgresSQL JDBC -- Silent channel-binding authentication downgrade via unsupported certificate algorithms CVE-2026-54291 |
- | 0 | 2 | |
| rclone -- Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation CVE-2026-49980 |
DragonFly | 1 | 1 | |
| gstreamer1 -- multiple vulnerabilities CVE-2026-12891 CVE-2026-12892 CVE-2026-12893 CVE-2026-52717 CVE-2026-52718 CVE-2026-52719 CVE-2026-52720 CVE-2026-52721 CVE-2026-52722 CVE-2026-53703 CVE-2026-53704 CVE-2026-53705 |
DragonFly | 5 | 5 | |
| powerdns-recursor -- vulnerabilities CVE-2026-3361 CVE-2026-40012 CVE-2026-42005 CVE-2026-42387 CVE-2026-42388 CVE-2026-42389 CVE-2026-42390 CVE-2026-52690 |
- | 0 | 1 | |
| DNSdist -- vulnerabilities CVE-2026-40011 CVE-2026-42004 CVE-2026-42005 CVE-2026-40208 CVE-2026-40209 CVE-2026-40210 CVE-2026-40211 |
- | 0 | 1 | |
| PowerDNS -- vulnerabilities CVE-2026-33257 CVE-2026-33260 CVE-2026-33608 CVE-2026-33609 CVE-2026-33610 CVE-2026-33611 CVE-2026-42005 |
- | 0 | 1 | |
| NSD -- vulnerabilities CVE-2026-12244 CVE-2026-12245 CVE-2026-12246 CVE-2026-12490 |
- | 0 | 1 | |
| Multiple vulnerability found in Expat CVE-2026-50219 CVE-2026-56131 CVE-2026-56132 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56407 CVE-2026-56408 CVE-2026-56409 CVE-2026-56410 CVE-2026-56411 CVE-2026-56412 |
DragonFly, FreeBSD | 3 | 1 | |
| gitea -- multiple vulnerabilities CVE-2026-27783 CVE-2026-25714 CVE-2026-20706 CVE-2026-27771 CVE-2026-28744 CVE-2026-28699 CVE-2026-26231 CVE-2026-20896 CVE-2026-22874 CVE-2026-27775 CVE-2026-27761 CVE-2026-25038 CVE-2026-24451 CVE-2026-20779 CVE-2026-28740 |
DragonFly | 1 | 1 | |
| Gitlab -- Vulnerabilities CVE-2026-10086 CVE-2026-10712 CVE-2026-12053 CVE-2026-5309 CVE-2026-2238 CVE-2026-11379 CVE-2026-8330 CVE-2026-1606 CVE-2026-5952 CVE-2026-5796 CVE-2026-0934 CVE-2026-3176 CVE-2026-12635 |
- | 0 | 1 | |
| ffmpeg -- Out-of-bounds write CVE-2026-8461 |
DragonFly | 2 | 4 | |
| go-git -- DoS vulnerability | DragonFly | 1 | 1 | |
| ldns -- CWE-346 Origin Validation Error CVE-2026-10846 |
DragonFly | 1 | 1 | |
| podman -- files outside build context may be included via malicious Git repo or tar archive CVE-2026-44517 |
- | 0 | 1 | |
| nginx -- multiple vulnerabilities CVE-2026-42530 CVE-2026-42055 CVE-2026-48142 |
DragonFly | 1 | 1 | |
| jenkins -- multiple vulnerabilities CVE-2026-53435 CVE-2026-53436 CVE-2026-53437 CVE-2026-53438 CVE-2026-53439 CVE-2026-53440 CVE-2026-53441 CVE-2026-53442 |
DragonFly | 2 | 2 | |
| Routinator -- CWE-20 Improper Input Validation CVE-2026-49234 |
- | 0 | 1 | |
| mail/mailpit -- Incomplete SSRF protection in Link Check API via uncovered IPv6 forms CVE-2026-55187 |
- | 0 | 1 | |
| nginx -- multiple vulnerabilities CVE-2026-42055 CVE-2026-48142 |
DragonFly | 1 | 1 | |
| Routinator -- CWE-755 Improper Handling of Exceptional Conditions CVE-2026-49235 |
- | 0 | 1 | |
| Routinator -- CWE-755 Improper Handling of Exceptional Conditions CVE-2026-49232 |
- | 0 | 1 | |
| Routinator -- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-49233 |
- | 0 | 1 | |
| chromium -- security fixes CVE-2026-12007 CVE-2026-12008 CVE-2026-12009 CVE-2026-12010 CVE-2026-12011 CVE-2026-12012 CVE-2026-12013 CVE-2026-12014 CVE-2026-12015 CVE-2026-12016 CVE-2026-12017 CVE-2026-12018 CVE-2026-12019 CVE-2026-12020 CVE-2026-12022 CVE-2026-12023 CVE-2026-12024 CVE-2026-12025 CVE-2026-12026 CVE-2026-12027 CVE-2026-12028 CVE-2026-12029 CVE-2026-12030 CVE-2026-12031 CVE-2026-12032 CVE-2026-12033 CVE-2026-12034 CVE-2026-12035 |
DragonFly | 1 | 2 | |
| chromium -- security fixes CVE-2026-12437 CVE-2026-12438 CVE-2026-12439 CVE-2026-12440 CVE-2026-12441 CVE-2026-12442 CVE-2026-12443 CVE-2026-12444 CVE-2026-12445 CVE-2026-12446 CVE-2026-12447 CVE-2026-12448 CVE-2026-12449 CVE-2026-12450 CVE-2026-12451 CVE-2026-12452 CVE-2026-12453 CVE-2026-12454 CVE-2026-12455 CVE-2026-12456 CVE-2026-12457 CVE-2026-12458 CVE-2026-12459 CVE-2026-12460 CVE-2026-12461 CVE-2026-12462 CVE-2026-12463 CVE-2026-12464 CVE-2026-12465 CVE-2026-12466 CVE-2026-12467 CVE-2026-12468 CVE-2026-12469 |
DragonFly | 1 | 2 | |
| traefik -- Multiple vulnerabilities CVE-2026-48020 CVE-2026-48491 |
DragonFly | 1 | 1 | |
| libsmi -- Buffer overflow in the smiGetNode function in lib/smi CVE-2010-2891 |
DragonFly | 1 | 1 | |
| caddy -- multiple vulnerabilities CVE-2026-52844 CVE-2026-52845 CVE-2026-52846 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-6552 CVE-2026-10087 CVE-2026-7250 CVE-2026-8589 CVE-2026-1500 CVE-2026-6269 CVE-2026-9204 CVE-2026-10733 CVE-2026-6277 CVE-2026-6976 CVE-2026-3553 CVE-2026-9694 |
- | 0 | 1 | |
| h2o -- HTTP/2 state amplification denial of service | DragonFly | 1 | 1 | |
| h2o -- stack overflow serving static files on musl libc CVE-2026-44453 |
DragonFly | 1 | 1 | |
| h2o -- heap overrun parsing zero-length SNI CVE-2026-44452 |
DragonFly | 1 | 1 | |
| OpenSSL -- Multiple vulnerabilities CVE-2026-45447 CVE-2026-34182 CVE-2026-34183 CVE-2026-35188 CVE-2026-42764 CVE-2026-45445 CVE-2026-7383 CVE-2026-9076 CVE-2026-34180 CVE-2026-34181 CVE-2026-42765 CVE-2026-42766 CVE-2026-42767 CVE-2026-42768 CVE-2026-42769 CVE-2026-42770 CVE-2026-42771 CVE-2026-45446 |
DragonFly | 1 | 6 | |
| p5-ack -- Multiple issues CVE-2026-49147 CVE-2026-49146 CVE-2026-49145 |
DragonFly | 1 | 1 | |
| Erlang/OTP -- buffer overflow parsing SCTP ERROR/ABORT chunks CVE-2026-49759 |
DragonFly | 2 | 3 | |
| Erlang/OTP -- stack overflow in ei_s_print_term for very large integer terms CVE-2026-49760 |
DragonFly | 2 | 3 | |
| Erlang/OTP -- FTP passive-mode client does not validate server response IP CVE-2026-48858 |
DragonFly | 2 | 3 | |
| Erlang/OTP -- httpc leaks authentication headers on cross-host redirect CVE-2026-48856 |
DragonFly | 2 | 3 | |
| Erlang/OTP -- SFTP READLINK discloses server filesystem paths CVE-2026-48855 |
DragonFly | 2 | 3 | |
| Erlang/OTP -- TLS distribution check_ip flag does not enforce same-LAN constraint CVE-2026-48860 |
DragonFly | 2 | 3 | |
| Erlang/OTP -- timing-based username enumeration in SSH password authentication CVE-2026-48859 |
- | 0 | 1 | |
| chromium -- security fixes CVE-2026-11628 CVE-2026-11629 CVE-2026-11630 CVE-2026-11631 CVE-2026-11632 CVE-2026-11633 CVE-2026-11634 CVE-2026-11635 CVE-2026-11636 CVE-2026-11637 CVE-2026-11638 CVE-2026-11639 CVE-2026-11640 CVE-2026-11641 CVE-2026-11642 CVE-2026-11643 CVE-2026-11644 CVE-2026-11645 CVE-2026-11646 CVE-2026-11647 CVE-2026-11648 CVE-2026-11649 CVE-2026-11650 CVE-2026-11651 CVE-2026-11652 CVE-2026-11653 CVE-2026-11654 CVE-2026-11655 CVE-2026-11656 CVE-2026-11657 CVE-2026-11658 CVE-2026-11659 CVE-2026-11660 CVE-2026-11661 CVE-2026-11662 CVE-2026-11663 CVE-2026-11664 CVE-2026-11665 CVE-2026-11666 CVE-2026-11667 CVE-2026-11668 CVE-2026-11669 CVE-2026-11670 CVE-2026-11671 CVE-2026-11672 CVE-2026-11673 CVE-2026-11674 CVE-2026-11675 CVE-2026-11676 CVE-2026-11677 CVE-2026-11678 CVE-2026-11679 CVE-2026-11680 CVE-2026-11681 CVE-2026-11682 CVE-2026-11683 CVE-2026-11684 CVE-2026-11685 CVE-2026-11686 CVE-2026-11687 CVE-2026-11688 CVE-2026-11689 CVE-2026-11690 CVE-2026-11691 CVE-2026-11692 CVE-2026-11693 CVE-2026-11694 CVE-2026-11695 CVE-2026-11696 CVE-2026-11697 CVE-2026-11698 CVE-2026-11699 CVE-2026-11700 CVE-2026-11701 |
DragonFly | 1 | 2 | |
| Elixir -- Denial of service via unbounded integer parsing in Version CVE-2026-49762 |
DragonFly | 1 | 1 | |
| Elixir -- Denial of service via unbounded integer parsing in Version CVE-2026-49762 |
DragonFly | 1 | 1 | |
| tree-sitter-cli -- Always-Incorrect Control Flow Implementation in wasmtime crate CVE-2026-34946 |
- | 0 | 1 | |
| Unbound -- Multiple vulnerabilities CVE-2026-32792 CVE-2026-33278 CVE-2026-40622 CVE-2026-41292 CVE-2026-42534 CVE-2026-42923 CVE-2026-42944 CVE-2026-42959 CVE-2026-42960 CVE-2026-44390 CVE-2026-44608 |
DragonFly | 1 | 1 | |
| Apache httpd -- Multiple vulnerabilities CVE-2026-48913 CVE-2026-44631 CVE-2026-44186 CVE-2026-44185 CVE-2026-44119 CVE-2026-43951 CVE-2026-42536 CVE-2026-42535 CVE-2026-34356 CVE-2026-34355 CVE-2026-29170 CVE-2026-29167 |
DragonFly | 1 | 1 | |
| strongSwan -- Double-free when destroying certain cloned identities that can lead to remote code execution CVE-2026-47895 |
- | 0 | 1 | |
| Weechat -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| Weechat -- Multiple vulnerabilities | DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-4868 CVE-2026-1402 CVE-2026-6713 CVE-2026-5296 CVE-2026-2601 CVE-2026-8716 CVE-2026-2710 |
- | 0 | 1 | |
| PowerDNS -- Multiple vulnerabilities CVE-2026-41999 CVE-2026-42000 CVE-2026-42001 CVE-2026-42002 CVE-2026-42396 |
- | 0 | 1 | |
| Apache httpd -- DoS exploit in HTTP/2 CVE-2026-49975 |
DragonFly | 1 | 1 | |
| xwayland -- Multiple vulnerabilities CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264 |
DragonFly | 1 | 1 | |
| chromium -- security fixes CVE-2026-9872 CVE-2026-9873 CVE-2026-9874 CVE-2026-9875 CVE-2026-9876 CVE-2026-9877 CVE-2026-9878 CVE-2026-9879 CVE-2026-9880 CVE-2026-9881 CVE-2026-9882 CVE-2026-9883 CVE-2026-9884 CVE-2026-9885 CVE-2026-9886 CVE-2026-9887 CVE-2026-9888 CVE-2026-9889 CVE-2026-9890 CVE-2026-9891 CVE-2026-9892 CVE-2026-9893 CVE-2026-9894 CVE-2026-9895 CVE-2026-9896 CVE-2026-9897 CVE-2026-9898 CVE-2026-9899 CVE-2026-9900 CVE-2026-9901 CVE-2026-9902 CVE-2026-9903 CVE-2026-9904 CVE-2026-9905 CVE-2026-9906 CVE-2026-9907 CVE-2026-9908 CVE-2026-9909 CVE-2026-9910 CVE-2026-9911 CVE-2026-9912 CVE-2026-9913 CVE-2026-9914 CVE-2026-9915 CVE-2026-9916 CVE-2026-9917 CVE-2026-9918 CVE-2026-9919 CVE-2026-9920 CVE-2026-9921 CVE-2026-9922 CVE-2026-9923 CVE-2026-9924 CVE-2026-9925 CVE-2026-9926 CVE-2026-9927 CVE-2026-9928 CVE-2026-9929 CVE-2026-9930 CVE-2026-9931 CVE-2026-9932 CVE-2026-9933 CVE-2026-9934 CVE-2026-9935 CVE-2026-9936 CVE-2026-9937 CVE-2026-9938 CVE-2026-9939 CVE-2026-9940 CVE-2026-9941 CVE-2026-9942 CVE-2026-9943 CVE-2026-9944 CVE-2026-9945 CVE-2026-9946 CVE-2026-9947 CVE-2026-9948 CVE-2026-9949 CVE-2026-9950 CVE-2026-9951 CVE-2026-9952 CVE-2026-9953 CVE-2026-9954 CVE-2026-9955 CVE-2026-9956 CVE-2026-9957 CVE-2026-9958 CVE-2026-9959 CVE-2026-9960 CVE-2026-9961 CVE-2026-9962 CVE-2026-9963 CVE-2026-9964 CVE-2026-9965 CVE-2026-9966 CVE-2026-9967 CVE-2026-9968 CVE-2026-9969 CVE-2026-9970 CVE-2026-9971 CVE-2026-9972 CVE-2026-9973 CVE-2026-9974 CVE-2026-9975 CVE-2026-9976 CVE-2026-9977 CVE-2026-9978 CVE-2026-9979 CVE-2026-9980 CVE-2026-9981 CVE-2026-9982 CVE-2026-9983 CVE-2026-9984 CVE-2026-9985 CVE-2026-9986 CVE-2026-9987 CVE-2026-9988 CVE-2026-9989 CVE-2026-9990 CVE-2026-9991 CVE-2026-9992 CVE-2026-9993 CVE-2026-9994 CVE-2026-9995 CVE-2026-9996 CVE-2026-9997 CVE-2026-9998 CVE-2026-9999 CVE-2026-10000 CVE-2026-10001 CVE-2026-10002 CVE-2026-10003 CVE-2026-10004 CVE-2026-10005 CVE-2026-10006 CVE-2026-10007 CVE-2026-10008 CVE-2026-10009 CVE-2026-10010 CVE-2026-10011 CVE-2026-10012 CVE-2026-10013 CVE-2026-10014 CVE-2026-10015 CVE-2026-10016 CVE-2026-10017 CVE-2026-10018 CVE-2026-10019 CVE-2026-10020 CVE-2026-10021 CVE-2026-10022 |
DragonFly | 1 | 2 | |
| www/gohugo -- CWE-79: XSS vulnerabilities CVE-2026-39823 CVE-2026-39826 |
DragonFly | 1 | 1 | |
| MariaDB -- Multiple vulnerabilities CVE-2026-48165 CVE-2026-48163 CVE-2026-49261 |
DragonFly | 1 | 3 | |
| mail/mailpit -- memory-exhaustion DoS via unbounded JSON body CVE-2026-48824 |
- | 0 | 1 | |
| Erlang/OTP -- TLS hostname verification bypass via Subject CommonName fallback and name constraints CVE-2026-42790 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- public_key accepts non-CA certificate as intermediate issuer CVE-2026-42789 |
DragonFly | 3 | 4 | |
| Erlang/OTP -- OCSP responder certificate accepted after expiry in public_key CVE-2026-42791 |
DragonFly | 2 | 3 | |
| Grafana -- OpenFeature evaluation API reads input data with no bounds CVE-2026-27880 |
- | 0 | 2 | |
| Grafana -- Grafana Testdata datasource can issue unbounded memory allocations CVE-2026-28375 |
DragonFly | 1 | 1 | |
| Grafana -- Public dashboards discloses all direct mode datasources CVE-2026-27877 |
DragonFly | 1 | 1 | |
| Grafana -- XSS in Grafana Explore stack trace CVE-2025-41117 |
- | 0 | 2 | |
| Grafana -- Public Dashboards time range restriction on annotations can be bypassed CVE-2026-21722 |
DragonFly | 1 | 1 | |
| Grafana -- Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS CVE-2026-33375 |
- | 0 | 2 | |
| Grafana -- Query resampling can cause unbounded memory allocations CVE-2026-27879 |
DragonFly | 1 | 1 | |
| Grafana -- RCE on Grafana via sqlExpressions CVE-2026-27876 |
- | 0 | 2 | |
| jellyfin -- multiple vulnerabilities | - | 0 | 1 | |
| OpenEXR -- 3.4.12 fixes multiple vulnerabilities CVE-2026-45696 CVE-2026-44663 |
DragonFly | 1 | 1 | |
| traefik -- Unauthorized exposure of the REST provider CVE-2026-44774 |
DragonFly | 1 | 1 | |
| Roundcube Webmail -- Multiple vulnerabilities | - | 0 | 1 | |
| gstreamer1 -- multiple vulnerabilities CVE-2026-5056 CVE-2026-39043 CVE-2026-39044 CVE-2026-46469 CVE-2026-46470 CVE-2026-46472 |
DragonFly | 5 | 5 | |
| nginx -- heap buffer overflow in ngx_http_rewrite_module CVE-2026-9256 |
DragonFly | 1 | 1 | |
| putty -- multiple security vulnerabilities | DragonFly | 2 | 2 | |
| gstreamer1 -- multiple vulnerabilities | DragonFly | 5 | 5 | |
| qt6-webengine -- multiple vulnerabilities CVE-2025-13223 CVE-2025-13224 CVE-2025-13630 CVE-2025-13632 CVE-2025-13634 CVE-2025-13721 CVE-2025-14766 CVE-2026-0628 CVE-2026-0899 CVE-2026-0902 CVE-2026-0905 CVE-2026-1220 CVE-2026-1861 CVE-2026-2314 CVE-2026-2315 CVE-2026-2316 CVE-2026-2317 CVE-2026-2319 CVE-2026-2320 CVE-2026-2441 CVE-2026-2648 CVE-2026-2649 CVE-2026-2650 CVE-2026-3061 CVE-2026-3062 CVE-2026-3063 CVE-2026-3536 CVE-2026-3537 CVE-2026-3538 CVE-2026-3539 CVE-2026-3540 CVE-2026-3541 CVE-2026-3542 CVE-2026-3543 CVE-2026-3544 CVE-2026-3545 CVE-2026-3909 CVE-2026-3910 CVE-2026-3919 CVE-2026-3921 CVE-2026-3922 CVE-2026-3923 CVE-2026-3924 CVE-2026-3926 CVE-2026-3929 CVE-2026-3931 CVE-2026-3934 CVE-2026-3938 CVE-2026-3940 CVE-2026-3941 CVE-2026-3942 CVE-2026-4440 CVE-2026-4441 CVE-2026-4442 CVE-2026-4443 CVE-2026-4444 CVE-2026-4445 CVE-2026-4446 CVE-2026-4448 CVE-2026-4449 CVE-2026-4450 CVE-2026-4451 CVE-2026-4452 CVE-2026-4453 CVE-2026-4454 CVE-2026-4455 CVE-2026-4457 CVE-2026-4458 CVE-2026-4459 CVE-2026-4460 CVE-2026-4462 CVE-2026-4463 CVE-2026-4464 CVE-2026-4674 CVE-2026-4675 CVE-2026-4677 CVE-2026-4679 CVE-2026-5272 CVE-2026-5273 CVE-2026-5274 CVE-2026-5275 CVE-2026-5276 CVE-2026-5277 CVE-2026-5279 CVE-2026-5280 CVE-2026-5281 CVE-2026-5282 CVE-2026-5283 CVE-2026-5284 CVE-2026-5285 CVE-2026-5287 CVE-2026-5289 CVE-2026-5290 CVE-2026-5291 CVE-2026-5292 CVE-2026-5860 CVE-2026-5861 CVE-2026-5862 CVE-2026-5863 CVE-2026-5865 CVE-2026-5866 CVE-2026-5868 CVE-2026-5870 CVE-2026-5871 CVE-2026-5872 CVE-2026-5873 CVE-2026-5875 CVE-2026-5876 CVE-2026-5877 CVE-2026-5878 CVE-2026-5879 CVE-2026-5880 CVE-2026-5882 CVE-2026-5883 CVE-2026-5884 CVE-2026-5885 CVE-2026-5886 CVE-2026-5888 CVE-2026-5889 CVE-2026-5890 CVE-2026-5891 CVE-2026-5893 CVE-2026-5894 CVE-2026-5896 CVE-2026-5899 CVE-2026-5900 CVE-2026-5901 CVE-2026-5903 CVE-2026-5904 CVE-2026-5907 CVE-2026-5908 CVE-2026-5909 CVE-2026-5910 CVE-2026-5911 CVE-2026-5912 CVE-2026-5913 CVE-2026-5914 CVE-2026-5915 CVE-2026-5918 CVE-2026-5919 CVE-2026-6296 CVE-2026-6297 CVE-2026-6298 CVE-2026-6299 CVE-2026-6300 CVE-2026-6301 CVE-2026-6302 CVE-2026-6303 CVE-2026-6304 CVE-2026-6305 CVE-2026-6306 CVE-2026-6307 CVE-2026-6308 CVE-2026-6309 CVE-2026-6311 CVE-2026-6312 CVE-2026-6313 CVE-2026-6314 CVE-2026-6316 CVE-2026-6359 CVE-2026-6360 CVE-2026-6361 CVE-2026-6362 CVE-2026-6363 CVE-2026-6364 CVE-2026-6919 CVE-2026-6920 CVE-2026-7333 CVE-2026-7335 CVE-2026-7336 CVE-2026-7339 CVE-2026-7340 CVE-2026-7341 CVE-2026-7342 CVE-2026-7343 CVE-2026-7344 CVE-2026-7345 CVE-2026-7346 CVE-2026-7348 CVE-2026-7349 CVE-2026-7350 CVE-2026-7351 CVE-2026-7353 CVE-2026-7354 CVE-2026-7355 CVE-2026-7356 CVE-2026-7357 CVE-2026-7359 CVE-2026-7360 CVE-2026-7363 CVE-2026-7899 CVE-2026-7900 CVE-2026-7901 CVE-2026-7902 CVE-2026-7903 CVE-2026-7904 CVE-2026-7906 CVE-2026-7907 CVE-2026-7908 CVE-2026-7910 CVE-2026-7912 CVE-2026-7914 CVE-2026-7916 CVE-2026-7917 CVE-2026-7918 CVE-2026-7919 CVE-2026-7920 CVE-2026-7921 CVE-2026-7922 CVE-2026-7923 CVE-2026-7924 CVE-2026-7926 CVE-2026-7927 CVE-2026-7929 CVE-2026-7933 CVE-2026-7935 CVE-2026-7937 CVE-2026-7938 CVE-2026-7940 CVE-2026-7942 CVE-2026-7944 CVE-2026-7945 CVE-2026-7946 CVE-2026-7947 CVE-2026-7949 CVE-2026-7950 CVE-2026-7951 CVE-2026-7954 CVE-2026-7955 CVE-2026-7956 CVE-2026-7957 CVE-2026-7959 CVE-2026-7963 CVE-2026-7964 CVE-2026-7965 CVE-2026-7967 CVE-2026-7968 CVE-2026-7969 CVE-2026-7971 CVE-2026-7972 CVE-2026-7973 CVE-2026-7974 CVE-2026-7975 CVE-2026-7976 CVE-2026-7977 CVE-2026-7980 CVE-2026-7982 CVE-2026-7983 CVE-2026-7985 CVE-2026-7986 CVE-2026-7987 CVE-2026-7988 CVE-2026-7989 CVE-2026-7991 CVE-2026-7993 CVE-2026-7996 CVE-2026-7998 CVE-2026-7999 CVE-2026-8002 CVE-2026-8003 CVE-2026-8004 CVE-2026-8007 |
- | 0 | 2 | |
| net/rsync -- multiple vulnerabilities CVE-2026-29518 CVE-2026-43617 CVE-2026-43618 CVE-2026-43619 CVE-2026-43620 CVE-2026-45232 |
DragonFly | 1 | 1 | |
| nginx-devel -- multiple vulnerabilities CVE-2026-42926 CVE-2026-42945 CVE-2026-42946 CVE-2026-42934 CVE-2026-40460 CVE-2026-40701 |
DragonFly | 1 | 1 | |
| MariaDB -- Multiple vulnerabilities CVE-2026-44173 CVE-2026-44172 CVE-2026-44171 CVE-2026-44170 CVE-2026-44169 CVE-2026-44168 |
DragonFly | 2 | 6 | |
| MySQL -- Multiple vulnerabilities CVE-2025-15467 CVE-2026-34270 CVE-2026-34271 CVE-2026-34276 CVE-2026-34308 CVE-2026-22009 CVE-2026-22017 CVE-2026-34272 CVE-2026-34303 CVE-2025-14017 CVE-2026-34318 CVE-2026-34317 CVE-2026-34319 CVE-2026-22004 CVE-2026-34304 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-34293 CVE-2026-35239 CVE-2026-35235 CVE-2026-21998 CVE-2026-22005 CVE-2026-22002 CVE-2026-34267 CVE-2026-34278 CVE-2026-35240 CVE-2026-35234 CVE-2026-22015 CVE-2026-22001 |
DragonFly | 2 | 4 | |
| Vinyl/Varnish -- HTTP/2 parsing deficiency | DragonFly | 1 | 2 | |
| www/nginx -- Remote Code Execution/DoS CVE-2026-42926 CVE-2026-42945 CVE-2026-42946 CVE-2026-42934 CVE-2026-40460 CVE-2026-40701 |
DragonFly | 1 | 1 | |
| py-setuptools -- Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-47273 |
FreeBSD, DragonFly | 4 | 0 | |
| mail/mailpit -- multiple vulnerabilities CVE-2026-45713 CVE-2026-45709 CVE-2026-45711 CVE-2026-45712 |
- | 0 | 1 | |
| PostgreSQL -- Multiple vulnerabilities CVE-2026-6472 CVE-2026-6473 CVE-2026-6474 CVE-2026-6475 CVE-2026-6476 CVE-2026-6477 CVE-2026-6478 CVE-2026-6479 CVE-2026-6575 CVE-2026-6637 CVE-2026-6538 |
DragonFly | 8 | 10 | |
| Gitlab -- vulnerabilities CVE-2026-7481 CVE-2026-5297 CVE-2026-6073 CVE-2026-7377 CVE-2026-1659 CVE-2025-14870 CVE-2025-14869 CVE-2026-1322 CVE-2026-1184 CVE-2026-4524 CVE-2026-8280 CVE-2026-4527 CVE-2026-3160 CVE-2026-6335 CVE-2025-12669 CVE-2026-3607 CVE-2026-3074 CVE-2026-1338 CVE-2026-8144 CVE-2026-6063 CVE-2026-3073 CVE-2025-13874 CVE-2026-7471 CVE-2026-2900 CVE-2026-6883 |
- | 0 | 1 | |
| postorius -- XSS CVE-2026-44742 |
DragonFly | 1 | 1 | |
| zeek -- potential DoS vulnerability | - | 0 | 1 | |
| dash -- arith: INTMAX_MIN / -1 overflow CVE-2026-31323 |
DragonFly | 1 | 1 | |
| Vulnerability found in Expat CVE-2026-45186 |
DragonFly, FreeBSD | 3 | 1 | |
| dnsmasq -- multiple vulnerabilities CVE-2026-2291 CVE-2026-4890 CVE-2026-4891 CVE-2026-4892 CVE-2026-4893 CVE-2026-5172 |
DragonFly | 2 | 2 | |
| firefox -- Use-after-free CVE-2026-8090 |
DragonFly | 2 | 2 | |
| Mozilla -- Incorrect boundary conditions CVE-2026-8091 |
DragonFly | 3 | 3 | |
| firefox -- Memory safety bugs present in Firefox ESR 115 CVE-2026-8092 |
DragonFly | 2 | 2 | |
| firefox -- Memory safety bugs present in Firefox 150 CVE-2026-8093 |
DragonFly | 1 | 1 | |
| firefox ESR -- Other issue in the WebRTC component CVE-2026-8094 |
DragonFly | 1 | 1 | |
| chromium -- security fixes CVE-2026-7896 CVE-2026-7897 CVE-2026-7898 CVE-2026-7899 CVE-2026-7900 CVE-2026-7901 CVE-2026-7902 CVE-2026-7903 CVE-2026-7904 CVE-2026-7905 CVE-2026-7906 CVE-2026-7907 CVE-2026-7908 CVE-2026-7909 CVE-2026-7910 CVE-2026-7911 CVE-2026-7912 CVE-2026-7913 CVE-2026-7914 CVE-2026-7915 CVE-2026-7916 CVE-2026-7917 CVE-2026-7918 CVE-2026-7919 CVE-2026-7920 CVE-2026-7921 CVE-2026-7922 CVE-2026-7923 CVE-2026-7924 CVE-2026-7925 CVE-2026-7926 CVE-2026-7927 CVE-2026-7928 CVE-2026-7929 CVE-2026-7930 CVE-2026-7931 CVE-2026-7932 CVE-2026-7933 CVE-2026-7934 CVE-2026-7935 CVE-2026-7936 CVE-2026-7937 CVE-2026-7938 CVE-2026-7939 CVE-2026-7940 CVE-2026-7941 CVE-2026-7942 CVE-2026-7943 CVE-2026-7944 CVE-2026-7945 CVE-2026-7946 CVE-2026-7947 CVE-2026-7948 CVE-2026-7949 CVE-2026-7950 CVE-2026-7951 CVE-2026-7952 CVE-2026-7953 CVE-2026-7954 CVE-2026-7955 CVE-2026-7956 CVE-2026-7957 CVE-2026-7958 CVE-2026-7959 CVE-2026-7960 CVE-2026-7961 CVE-2026-7962 CVE-2026-7963 CVE-2026-7964 CVE-2026-7965 CVE-2026-7966 CVE-2026-7967 CVE-2026-7968 CVE-2026-7969 CVE-2026-7970 CVE-2026-7971 CVE-2026-7972 CVE-2026-7973 CVE-2026-7974 CVE-2026-7975 CVE-2026-7976 CVE-2026-7977 CVE-2026-7978 CVE-2026-7979 CVE-2026-7980 CVE-2026-7981 CVE-2026-7982 CVE-2026-7983 CVE-2026-7984 CVE-2026-7985 CVE-2026-7986 CVE-2026-7987 CVE-2026-7988 CVE-2026-7989 CVE-2026-7990 CVE-2026-7991 CVE-2026-7992 CVE-2026-7993 CVE-2026-7994 CVE-2026-7995 CVE-2026-7996 CVE-2026-7997 CVE-2026-7998 CVE-2026-7999 CVE-2026-8000 CVE-2026-8001 CVE-2026-8002 CVE-2026-8003 CVE-2026-8004 CVE-2026-8005 CVE-2026-8006 CVE-2026-8007 CVE-2026-8008 CVE-2026-8009 CVE-2026-8010 CVE-2026-8011 CVE-2026-8012 CVE-2026-8013 CVE-2026-8014 CVE-2026-8015 CVE-2026-8016 CVE-2026-8017 CVE-2026-8018 CVE-2026-8019 CVE-2026-8020 CVE-2026-8021 CVE-2026-8022 |
DragonFly | 1 | 2 | |
| MongoDB Server -- Multiple vulnerabilities CVE-2026-6914 CVE-2026-6915 |
- | 0 | 1 | |
| www/apache24 -- Multiple vulnerabilities CVE-2026-34059 CVE-2026-34032 CVE-2026-33857 CVE-2026-33523 CVE-2026-33007 CVE-2026-33006 CVE-2026-29169 CVE-2026-29168 CVE-2026-28780 CVE-2026-24072 CVE-2026-23918 |
DragonFly | 1 | 1 | |
| devel/ocaml-opam -- CWE-24 Path Traversal: '../filedir' CVE-2026-41082 |
DragonFly | 1 | 1 | |
| modsecurity3 -- multiple vulnerabilities CVE-2026-42268 CVE-2026-30923 |
DragonFly | 1 | 1 | |
| Mozilla -- Memory safety bugs CVE-2026-7323 |
DragonFly | 3 | 3 | |
| Text::CSV_XS -- CWE-825 Expired Pointer Dereference CVE-2026-7111 |
DragonFly | 1 | 1 | |
| Prosody XMPP server advisory 2026-04-29 CVE-2026-43504 CVE-2026-43505 CVE-2026-43506 CVE-2026-43507 |
DragonFly | 1 | 1 | |
| firefox -- Information disclosure CVE-2026-7320 |
DragonFly | 2 | 2 | |
| firefox -- Memory safety bugs CVE-2026-7324 |
DragonFly | 1 | 1 | |
| firefox -- Information disclosure CVE-2026-7320 |
DragonFly | 2 | 2 | |
| firefox -- Memory safety bugs CVE-2026-7322 |
DragonFly | 2 | 2 | |
| openexr -- multiple vulnerabilities CVE-2026-42217 CVE-2026-42216 CVE-2026-41142 |
DragonFly | 1 | 1 | |
| Mozilla -- Sandbox escape CVE-2026-7321 |
DragonFly | 3 | 3 | |
| Mozilla -- Privilege escalation in the Debugger component CVE-2026-6769 |
DragonFly | 3 | 3 | |
| Mozilla -- Other issue in the Storage: IndexedDB component CVE-2026-6770 |
DragonFly | 3 | 3 | |
| Mozilla -- Mitigation bypass CVE-2026-6771 |
DragonFly | 3 | 3 | |
| Mozilla -- Incorrect boundary conditions CVE-2026-6772 |
DragonFly | 3 | 3 | |
| Mozilla -- Denial-of-service CVE-2026-6773 |
DragonFly | 2 | 2 | |
| Mozilla -- Mitigation bypass CVE-2026-6774 |
DragonFly | 2 | 2 | |
| Mozilla -- Incorrect boundary conditions in the WebRTC component CVE-2026-6775 |
DragonFly | 2 | 2 | |
| firefox -- Use-after-free CVE-2026-6746 |
DragonFly | 3 | 3 | |
| Mozilla -- Incorrect boundary conditions CVE-2026-6776 |
DragonFly | 3 | 3 | |
| Mozilla -- Use-after-free CVE-2026-6747 |
DragonFly | 3 | 3 | |
| Mozilla -- Other issue in the Networking: DNS component CVE-2026-6777 |
DragonFly | 2 | 2 | |
| Mozilla -- Uninitialized memory CVE-2026-6748 |
DragonFly | 3 | 3 | |
| Mozilla -- Information disclosure CVE-2026-6749 |
DragonFly | 3 | 3 | |
| Mozilla -- Invalid pointer CVE-2026-6778 |
DragonFly | 2 | 2 | |
| Mozilla -- Privilege escalation CVE-2026-6750 |
DragonFly | 3 | 3 | |
| Mozilla -- Uninitialized memory CVE-2026-6751 |
DragonFly | 3 | 3 | |
| Mozilla -- Other issue in the JavaScript Engine component CVE-2026-6779 |
DragonFly | 2 | 2 | |
| Mozilla -- Incorrect boundary conditions CVE-2026-6752 |
DragonFly | 3 | 3 | |
| Mozilla -- Incorrect boundary CVE-2026-6753 |
DragonFly | 3 | 3 | |
| Mozilla -- Use-after-free CVE-2026-6754 |
DragonFly | 3 | 3 | |
| Mozilla -- Denial-of-service CVE-2026-6781 CVE-2026-6780 |
DragonFly | 2 | 2 | |
| Mozilla -- Mitigation bypass CVE-2026-6755 |
DragonFly | 2 | 2 | |
| Mozilla -- Information disclosure in the IP Protection component CVE-2026-6782 |
DragonFly | 2 | 2 | |
| Mozilla -- Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component CVE-2026-6783 |
DragonFly | 2 | 2 | |
| Mozilla -- Invalid pointer CVE-2026-6757 |
DragonFly | 3 | 3 | |
| Mozilla -- Memory safety bugs CVE-2026-6784 |
DragonFly | 2 | 2 | |
| Mozilla -- Use-after-free CVE-2026-6758 |
DragonFly | 2 | 2 | |
| Mozilla -- Memory safety bugs CVE-2026-6785 |
DragonFly | 3 | 3 | |
| Mozilla -- Use-after-free CVE-2026-6759 |
DragonFly | 3 | 3 | |
| Mozilla -- Memory safety bugs CVE-2026-6786 |
DragonFly | 3 | 3 | |
| Mozilla -- Mitigation bypass CVE-2026-6760 |
DragonFly | 2 | 2 | |
| Mozilla -- Privilege escalation CVE-2026-6761 |
DragonFly | 3 | 3 | |
| Mozilla -- Spoofing issue CVE-2026-6762 |
DragonFly | 3 | 3 | |
| Mozilla -- Mitigation bypass CVE-2026-6763 |
DragonFly | 3 | 3 | |
| Mozilla -- Incorrect boundary conditions CVE-2026-6764 |
DragonFly | 3 | 3 | |
| Mozilla -- Information disclosure CVE-2026-6765 |
DragonFly | 3 | 3 | |
| Mozilla -- Incorrect boundary conditions CVE-2026-6766 |
DragonFly | 3 | 3 | |
| Mozilla -- Other issue in the Libraries component in NSS CVE-2026-6767 |
DragonFly | 3 | 3 | |
| Mozilla -- Mitigation bypass CVE-2026-6768 |
DragonFly | 3 | 3 | |
| libXpm -- Out-of-bounds read in xpmNextWord() CVE-2026-4367 |
DragonFly | 1 | 1 | |
| (lib)expat -- Insufficient entropy CVE-2026-41080 |
DragonFly | 1 | 1 | |
| lcms2 -- Integer overflow CVE-2026-41254 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-4922 CVE-2026-5816 CVE-2026-5262 CVE-2025-0186 CVE-2026-1660 CVE-2025-6016 CVE-2025-3922 CVE-2026-6515 CVE-2026-5377 CVE-2026-3254 CVE-2025-9957 |
- | 0 | 1 | |
| OpenVPN -- server DOS and data leak in TLS handshake vulnerabilities CVE-2026-35058 CVE-2026-40215 |
DragonFly | 1 | 1 | |
| ejabberd -- Potential DDoS in XML Parser | DragonFly | 1 | 1 | |
| Mozilla -- Integer overflow CVE-2026-2781 |
DragonFly | 3 | 3 | |
| zeek -- potential DoS vulnerabilities | - | 0 | 1 | |
| OpenEXR -- several integer overflow vulnerabilities CVE-2026-39886 CVE-2026-40244 CVE-2026-40250 |
DragonFly | 1 | 1 | |
| xrdp -- Multiple vulnerabilities CVE-2026-32105 CVE-2026-32107 CVE-2026-32623 CVE-2026-32624 CVE-2026-33145 CVE-2026-32516 CVE-2026-32689 CVE-2026-35512 |
DragonFly | 1 | 1 | |
| py-strawberry-graphql -- Multiple vulnerabilities CVE-2026-35523 CVE-2026-35526 |
DragonFly | 1 | 1 | |
| Mozilla -- Memory safety bugs CVE-2026-5731 |
DragonFly | 3 | 4 | |
| chromium -- security fixes CVE-2026-6296 CVE-2026-6297 CVE-2026-6298 CVE-2026-6299 CVE-2026-6358 CVE-2026-6359 CVE-2026-6300 CVE-2026-6301 CVE-2026-6302 CVE-2026-6303 CVE-2026-6304 CVE-2026-6305 CVE-2026-6306 CVE-2026-6307 CVE-2026-6308 CVE-2026-6309 CVE-2026-6360 CVE-2026-6310 CVE-2026-6311 CVE-2026-6312 CVE-2026-6313 CVE-2026-6314 CVE-2026-6315 CVE-2026-6316 CVE-2026-6361 CVE-2026-6362 CVE-2026-6317 CVE-2026-6363 CVE-2026-6318 CVE-2026-6319 CVE-2026-6364 |
DragonFly | 1 | 2 | |
| xwayland -- Multiple vulnerabilities CVE-2026-33999 CVE-2026-34000 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003 |
DragonFly | 1 | 1 | |
| PHP Composer -- Multiple vulnerabilities CVE-2026-40261 CVE-2026-40176 |
- | 0 | 1 | |
| Python -- use-after-free vulnerability in decompressors under memory pressure CVE-2026-6100 |
DragonFly | 2 | 6 | |
| python -- more webbrowser.open() command injection vulnerabilities CVE-2026-4786 |
DragonFly | 2 | 6 | |
| Python -- HTTP proxy CONNECT tunnel does not sanitize CR/LF CVE-2026-1502 |
DragonFly | 2 | 6 | |
| Vaultwarden -- Multiple vulnerabilities | - | 0 | 1 | |
| Python -- configparser vulnerable to excessive CPU use | DragonFly | 2 | 6 | |
| go-ethereum -- vulnerabilities CVE-2026-26313 CVE-2026-26314 CVE-2026-26315 |
DragonFly | 1 | 1 | |
| (lib)tiff -- Integer Overflow or Wraparound CVE-2026-4775 |
DragonFly | 1 | 1 | |
| py-ormar -- vulnerabilities CVE-2026-26198 CVE-2026-27953 |
DragonFly | 1 | 1 | |
| DNSdist -- vulnerabilities CVE-2026-0396 CVE-2026-0397 CVE-2026-24028 CVE-2026-24029 CVE-2026-24030 CVE-2026-27853 CVE-2026-27854 |
- | 0 | 1 | |
| chromium -- security fixes CVE-2026-5858 CVE-2026-5859 CVE-2026-5860 CVE-2026-5861 CVE-2026-5862 CVE-2026-5863 CVE-2026-5864 CVE-2026-5865 CVE-2026-5866 CVE-2026-5867 CVE-2026-5868 CVE-2026-5869 CVE-2026-5870 CVE-2026-5871 CVE-2026-5872 CVE-2026-5873 CVE-2026-5874 CVE-2026-5875 CVE-2026-5876 CVE-2026-5877 CVE-2026-5878 CVE-2026-5879 CVE-2026-5880 CVE-2026-5881 CVE-2026-5882 CVE-2026-5883 CVE-2026-5884 CVE-2026-5885 CVE-2026-5886 CVE-2026-5887 CVE-2026-5888 CVE-2026-5889 CVE-2026-5890 CVE-2026-5891 CVE-2026-5892 CVE-2026-5893 CVE-2026-5894 CVE-2026-5895 CVE-2026-5896 CVE-2026-5897 CVE-2026-5898 CVE-2026-5899 CVE-2026-5900 CVE-2026-5901 CVE-2026-5902 CVE-2026-5903 CVE-2026-5904 CVE-2026-5905 CVE-2026-5906 CVE-2026-5907 CVE-2026-5908 CVE-2026-5909 CVE-2026-5910 CVE-2026-5911 CVE-2026-5912 CVE-2026-5913 CVE-2026-5914 CVE-2026-5915 CVE-2026-5918 CVE-2026-5919 |
DragonFly | 1 | 2 | |
| Mbed TLS -- vulnerabilities CVE-2026-34873 CVE-2026-34871 CVE-2026-25835 CVE-2025-66442 CVE-2026-34874 CVE-2026-34875 CVE-2026-34872 CVE-2026-25834 CVE-2026-34876 CVE-2026-34877 CVE-2026-25833 |
DragonFly | 1 | 2 | |
| Gitlab -- vulnerabilities CVE-2026-5173 CVE-2026-1092 CVE-2025-12664 CVE-2026-1403 CVE-2026-1101 CVE-2026-1516 CVE-2026-4332 CVE-2026-2619 CVE-2025-9484 CVE-2026-1752 CVE-2026-2104 CVE-2026-4916 |
- | 0 | 1 | |
| Mozilla -- Incorrect boundary conditions, integer overflow CVE-2026-5732 |
DragonFly | 3 | 3 | |
| Mozilla -- Incorrect boundary conditions CVE-2026-5733 |
DragonFly | 2 | 2 | |
| Mozilla -- Memory safety bugs CVE-2026-5734 |
DragonFly | 3 | 3 | |
| Mozilla -- Memory safety bugs CVE-2026-5735 |
DragonFly | 2 | 2 | |
| OpenSSL -- Multiple vulnerabilities CVE-2026-31790 CVE-2026-2637 CVE-2026-28386 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-31789 |
DragonFly | 1 | 5 | |
| nghttp2 -- CWE-617: Reachable Assertion CVE-2026-27135 |
DragonFly | 2 | 2 | |
| MongoDB Server -- CWE-617: Reachable Assertion CVE-2026-5170 |
- | 0 | 2 | |
| openexr -- multiple vulnerabilities CVE-2026-34589 CVE-2026-34588 CVE-2026-34380 CVE-2026-34379 CVE-2026-34378 |
DragonFly | 1 | 1 | |
| Python -- imaplib module, when passed a user-controlled command, can have additional commands injected using newlines CVE-2025-15366 |
DragonFly, NetBSD, GhostBSD, FreeBSD | 9 | 4 | |
| chromium -- security fixes CVE-2026-5273 CVE-2026-5272 CVE-2026-5274 CVE-2026-5275 CVE-2026-5276 CVE-2026-5277 CVE-2026-5278 CVE-2026-5279 CVE-2026-5280 CVE-2026-5281 CVE-2026-5282 CVE-2026-5283 CVE-2026-5284 CVE-2026-5285 CVE-2026-5286 CVE-2026-5287 CVE-2026-5288 CVE-2026-5289 CVE-2026-5290 CVE-2026-5291 CVE-2026-5292 |
DragonFly | 1 | 2 | |
| Python -- poplib module, when passed a user-controlled command, can have additional commands injected using newlines CVE-2025-15367 |
DragonFly, NetBSD, GhostBSD, FreeBSD | 15 | 0 | |
| Python -- The webbrowser.open() API allows leading dashes CVE-2026-4519 |
DragonFly | 2 | 6 | |
| Roundcube -- SVG Attribute Bypass | - | 0 | 1 | |
| traefik -- Multiple vulnerabilities CVE-2026-33433 CVE-2026-33186 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-2370 CVE-2026-3857 CVE-2026-2995 CVE-2026-3988 CVE-2026-2745 CVE-2026-1724 CVE-2025-13436 CVE-2025-13078 CVE-2026-2973 CVE-2026-2726 CVE-2025-14595 CVE-2026-4363 |
- | 0 | 1 | |
| jenkins -- multiple vulnerabilities CVE-2026-33001 CVE-2026-33002 |
DragonFly | 2 | 2 | |
| Mozilla -- Multiple vulnerabilities CVE-2026-4729 CVE-2026-4728 CVE-2026-4727 CVE-2026-4726 CVE-2026-4725 CVE-2026-4724 CVE-2026-4723 CVE-2026-4722 |
DragonFly | 2 | 2 | |
| Mozilla -- Multiple vulnerabilities CVE-2026-4721 CVE-2026-4709 CVE-2026-4707 CVE-2026-4706 CVE-2026-4699 CVE-2026-4698 CVE-2026-4696 CVE-2026-4694 CVE-2026-4693 CVE-2026-4692 CVE-2026-4691 CVE-2026-4690 CVE-2026-4689 CVE-2026-4687 CVE-2026-4686 CVE-2026-4685 CVE-2026-4684 |
DragonFly | 3 | 3 | |
| Mozilla -- Multiple vulnerabilities CVE-2026-4688 CVE-2026-4695 CVE-2026-4697 CVE-2026-4700 CVE-2026-4701 CVE-2026-4702 CVE-2026-4704 CVE-2026-4705 CVE-2026-4708 CVE-2026-4710 CVE-2026-4711 CVE-2026-4712 CVE-2026-4713 CVE-2026-4714 CVE-2026-4715 CVE-2026-4716 CVE-2026-4717 CVE-2026-4718 CVE-2026-4719 CVE-2026-4720 |
DragonFly | 2 | 2 | |
| chromium -- security fixes CVE-2026-4673 CVE-2026-4674 CVE-2026-4675 CVE-2026-4676 CVE-2026-4677 CVE-2026-4678 CVE-2026-4679 CVE-2026-4680 |
DragonFly | 1 | 2 | |
| chromium -- security fixes CVE-2026-4439 CVE-2026-4440 CVE-2026-4441 CVE-2026-4442 CVE-2026-4443 CVE-2026-4444 CVE-2026-4445 CVE-2026-4446 CVE-2026-4447 CVE-2026-4448 CVE-2026-4449 CVE-2026-4450 CVE-2026-4451 CVE-2026-4452 CVE-2026-4453 CVE-2026-4454 CVE-2026-4455 CVE-2026-4456 CVE-2026-4457 CVE-2026-4458 CVE-2026-4459 CVE-2026-4460 CVE-2026-4461 CVE-2026-4462 CVE-2026-4463 CVE-2026-4464 |
DragonFly | 1 | 2 | |
| traefik -- Multiple vulnerabilities CVE-2026-32595 CVE-2026-32305 CVE-2026-32695 |
DragonFly | 1 | 1 | |
| UniFi Network Application - Multiple vulnerabilities CVE-2026-22558 CVE-2026-22557 |
- | 0 | 2 | |
| Roundcube -- Multiple vulnerabilities | - | 0 | 1 | |
| homebox -- multiple vulnerabilities CVE-2026-27981 CVE-2026-27600 CVE-2026-26272 |
- | 0 | 1 | |
| chromium -- security fixes CVE-2026-3909 CVE-2026-3910 |
DragonFly | 1 | 2 | |
| chromium -- security fix CVE-2026-3909 |
DragonFly | 1 | 2 | |
| chromium -- security fixes CVE-2026-3913 CVE-2026-3914 CVE-2026-3915 CVE-2026-3916 CVE-2026-3917 CVE-2026-3918 CVE-2026-3919 CVE-2026-3920 CVE-2026-3921 CVE-2026-3922 CVE-2026-3923 CVE-2026-3924 CVE-2026-3925 CVE-2026-3926 CVE-2026-3927 CVE-2026-3928 CVE-2026-3929 CVE-2026-3930 CVE-2026-3931 CVE-2026-3932 CVE-2026-3934 CVE-2026-3935 CVE-2026-3936 CVE-2026-3937 CVE-2026-3938 CVE-2026-3939 CVE-2026-3940 CVE-2026-3941 CVE-2026-3942 |
DragonFly | 1 | 2 | |
| OpenSSL -- key agreement vulnerability CVE-2026-2673 |
- | 0 | 3 | |
| Mozilla -- Undefined behavior in the DOM: Core & HTML component CVE-2026-2771 |
DragonFly | 3 | 3 | |
| firefox -- Memory safety bugs CVE-2026-3847 |
DragonFly | 1 | 1 | |
| Firefox -- Same-origin policy bypass CVE-2026-3846 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-1090 CVE-2026-1069 CVE-2025-13929 CVE-2025-14513 CVE-2025-13690 CVE-2025-12576 CVE-2026-3848 CVE-2025-12555 CVE-2026-0602 CVE-2026-1732 CVE-2026-1663 CVE-2026-1230 CVE-2025-12704 CVE-2025-12697 |
- | 0 | 1 | |
| curl -- Multiple vulnerabilities CVE-2025-15224 CVE-2025-15079 CVE-2025-14819 CVE-2025-14524 CVE-2025-14017 CVE-2025-13034 |
DragonFly | 1 | 1 | |
| curl -- Multiple vulnerabilties CVE-2026-3805 CVE-2026-3784 CVE-2026-3783 CVE-2026-1965 |
DragonFly | 1 | 1 | |
| gstreamer1 -- multiple vulnerabilities CVE-2026-1940 CVE-2026-3082 CVE-2026-2921 CVE-2026-2922 CVE-2026-2920 CVE-2026-2923 CVE-2026-3083 CVE-2026-3085 CVE-2026-3086 CVE-2026-3081 CVE-2026-3084 |
DragonFly | 5 | 5 | |
| oauth2-proxy -- multiple vulnerabilities CVE-2025-68121 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2026-0752 CVE-2025-14511 CVE-2026-1662 CVE-2026-1388 CVE-2026-2845 CVE-2025-3525 CVE-2026-1725 CVE-2026-1747 CVE-2025-14103 |
- | 0 | 1 | |
| Firefox -- Multiple vulnerabilities CVE-2026-2807 CVE-2026-2806 CVE-2026-2805 CVE-2026-2804 CVE-2026-2803 CVE-2026-2802 CVE-2026-2801 CVE-2026-2799 CVE-2026-2798 CVE-2026-2797 CVE-2026-2796 CVE-2026-2795 |
DragonFly | 2 | 2 | |
| Mozilla -- Multiple vulnerabilities CVE-2026-2809 CVE-2026-2808 |
DragonFly | 3 | 3 | |
| mail/mailpit -- Server-Side Request Forgery (SSRF) via Link Check API CVE-2026-27808 |
- | 0 | 1 | |
| Vaultwarden -- Multiple vulnerabilities | - | 0 | 1 | |
| openexr -- buffer overflow in istream_nonparallel_read on invalid input data | DragonFly | 1 | 1 | |
| jenkins -- multiple vulnerabilities CVE-2026-27099 CVE-2026-27100 |
DragonFly | 2 | 2 | |
| Mozilla -- Heap buffer overflow CVE-2026-2447 |
DragonFly | 3 | 3 | |
| chromium -- security fixes CVE-2026-2648 CVE-2026-2649 CVE-2026-2650 |
DragonFly | 1 | 2 | |
| powerdns-recursor -- Denial of Service CVE-2025-59029 CVE-2025-59030 CVE-2026-24027 CVE-2026-0398 |
- | 0 | 1 | |
| png -- CWE-122: Heap-based Buffer Overflow CVE-2026-25646 |
DragonFly | 1 | 1 | |
| munge -- CWE-787: Out-of-bounds Write CVE-2026-25506 |
DragonFly, NetBSD | 2 | 1 | |
| chromium -- security fix CVE-2026-2441 |
DragonFly | 1 | 2 | |
| traefik -- TCP readTimeout bypass via STARTTLS on Postgres CVE-2026-25949 |
DragonFly | 1 | 1 | |
| MongoDB Server -- Multiple vulnerabilities CVE-2026-1850 CVE-2026-1849 CVE-2026-1847 |
- | 0 | 1 | |
| MongoDB Server -- CWE-617 Reachable Assertion CVE-2026-25610 |
- | 0 | 1 | |
| MongoDB Server -- CWE-704 Incorrect Type Conversion or Cast CVE-2026-25613 |
- | 0 | 1 | |
| PostgreSQL -- Multiple vulnerabilities CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 |
DragonFly | 3 | 5 | |
| Gitlab -- vulnerabilities CVE-2025-7659 CVE-2025-8099 CVE-2026-0958 CVE-2025-14560 CVE-2026-0595 CVE-2026-1458 CVE-2026-1456 CVE-2026-1387 CVE-2025-12575 CVE-2026-1094 CVE-2025-12073 CVE-2026-1080 CVE-2025-14592 CVE-2026-1282 CVE-2025-14594 |
- | 0 | 1 | |
| expat -- multiple vulnerabilities CVE-2026-24515 CVE-2026-25210 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2026-1861 CVE-2026-1862 |
DragonFly | 1 | 2 | |
| qt6-webengine -- multiple vulnerabilities CVE-2025-13638 CVE-2025-13639 CVE-2025-13720 CVE-2025-14174 CVE-2025-14765 CVE-2026-0908 CVE-2026-1504 |
- | 0 | 2 | |
| Roundcube -- Multiple vulnerabilities | - | 0 | 1 | |
| traefik -- ACME TLS-ALPN fast path potential DoS CVE-2026-22045 |
DragonFly | 1 | 1 | |
| navidrome -- multiple vulnerabilities CVE-2026-25578 CVE-2026-25579 |
- | 0 | 1 | |
| python -- several security vulnerabilities CVE-2026-1299 CVE-2026-0865 |
DragonFly, NetBSD | 5 | 6 | |
| zeek -- potential DoS vulnerability | - | 0 | 1 | |
| chromium -- security fix CVE-2026-1504 |
DragonFly | 1 | 2 | |
| Firefox -- Multiple vulnerabilities CVE-2026-24868 CVE-2026-24869 |
DragonFly | 1 | 1 | |
| xrdp -- remote code execution CVE-2025-68670 |
DragonFly | 1 | 1 | |
| OpenSSL -- Multiple vulnerabilities CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-22795 CVE-2026-22796 |
DragonFly | 1 | 5 | |
| MySQL -- Multiple vulnerabilities CVE-2026-21949 CVE-2026-21950 CVE-2026-21968 CVE-2026-21929 CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21952 CVE-2026-21964 CVE-2026-21965 |
DragonFly | 1 | 2 | |
| wheel -- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-24049 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2026-1220 |
DragonFly | 1 | 2 | |
| Gitlab -- vulnerabilities CVE-2025-13927 CVE-2025-13928 CVE-2026-0723 CVE-2025-13335 CVE-2026-1102 |
- | 0 | 1 | |
| mail/mailpit -- multiple vulnerabilities CVE-2026-23829 CVE-2026-23845 |
- | 0 | 1 | |
| oauth2-proxy -- multiple vulnerabilities CVE-2025-61729 CVE-2025-61727 CVE-2025-47914 CVE-2025-58181 |
DragonFly | 1 | 1 | |
| Mozilla -- multiple vulnerabilities CVE-2026-0886 CVE-2026-0882 CVE-2026-0880 CVE-2026-0879 CVE-2026-0877 |
DragonFly | 3 | 3 | |
| Mozilla -- multiple vulnerabilities CVE-2026-0891 CVE-2026-0890 CVE-2026-0887 CVE-2026-0885 CVE-2026-0884 CVE-2026-0883 CVE-2026-0878 |
DragonFly | 3 | 3 | |
| chromium -- multiple security fixes CVE-2026-0899 CVE-2026-0900 CVE-2026-0901 CVE-2026-0902 CVE-2026-0903 CVE-2026-0904 CVE-2026-0905 CVE-2026-0906 CVE-2026-0907 CVE-2026-0908 |
DragonFly | 1 | 2 | |
| Mozilla -- multiple vulnerabilities CVE-2026-0892 CVE-2026-0889 CVE-2026-0888 CVE-2026-0881 |
DragonFly | 2 | 2 | |
| virtualenv -- CWE-59: Improper Link Resolution Before File Access ('Link Following') CVE-2026-22702 |
DragonFly | 1 | 1 | |
| libtasn1 -- Stack-based buffer overflow CVE-2025-13151 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2025-9222 CVE-2025-13761 CVE-2025-13772 CVE-2025-13781 CVE-2025-10569 CVE-2025-11246 CVE-2025-3950 |
- | 0 | 1 | |
| phpmyfaq -- multiple vulnerabilities | - | 0 | 1 | |
| mail/mailpit -- Cross-Site WebSocket Hijacking CVE-2026-22689 |
- | 0 | 1 | |
| security/libsodium -- crypto_core_ed25519_is_valid_point mishandles checks for whether an elliptic curve point is valid CVE-2025-69277 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2026-0628 |
DragonFly | 1 | 2 | |
| mail/mailpit -- Server-Side Request Forgery CVE-2026-21859 |
- | 0 | 1 | |
| net-mgmt/net-snmp -- Remote Code Execution (snmptrapd) CVE-2025-68615 |
DragonFly | 1 | 1 | |
| gstreamer1-plugins-bad -- Out-of-bounds reads in MIDI parser CVE-2025-67326 CVE-2025-67327 |
DragonFly | 1 | 1 | |
| Forgejo -- Symbolic Link (Symlink) Following CVE-2025-68937 |
DragonFly | 1 | 1 | |
| fluidsynth -- Use after free when using DLS files CVE-2025-68617 |
DragonFly | 1 | 1 | |
| MongoDB -- Improper Handling of Length Parameter Inconsistency CVE-2025-14847 |
- | 0 | 2 | |
| traefik -- Bypassing security controls via special characters CVE-2025-66490 |
DragonFly | 1 | 1 | |
| traefik -- Inverted TLS Verification Logic in Kubernetes NGINX Provider CVE-2025-66491 |
DragonFly | 1 | 1 | |
| Firefox -- Memory safety bugs CVE-2025-14861 |
DragonFly | 1 | 1 | |
| Firefox -- Use-after-free CVE-2025-14860 |
DragonFly | 1 | 1 | |
| smb4k -- Critical vulnerabilities in Mount Helper CVE-2025-66002 CVE-2025-66003 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-14765 CVE-2025-14766 |
DragonFly | 1 | 2 | |
| step-certificates -- Authorization Bypass in ACME and SCEP Provisioners CVE-2025-44005 |
- | 0 | 1 | |
| github-release-monitor -- multiple vulnerabilities CVE-2025-55183 CVE-2025-55184 |
- | 0 | 1 | |
| jenkins -- multiple vulnerabilities CVE-2025-67635 CVE-2025-67636 CVE-2025-67637 CVE-2025-67638 CVE-2025-67639 |
DragonFly | 2 | 2 | |
| www/varnish-libvmod-digest -- base64 decoding vulnerability CVE-2023-41104 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-14372 CVE-2025-14373 |
DragonFly | 1 | 2 | |
| Mozilla -- Use-after-free CVE-2025-14321 |
DragonFly | 1 | 3 | |
| Mozilla -- Sandbox escape CVE-2025-14322 |
DragonFly | 1 | 3 | |
| Mozilla -- Privilege escalation CVE-2025-14323 |
DragonFly | 2 | 4 | |
| Mozilla -- JIT miscompilation CVE-2025-14325 CVE-2025-14324 |
DragonFly | 2 | 4 | |
| Mozilla -- Use-after-free CVE-2025-14326 |
DragonFly | 2 | 2 | |
| Mozilla -- Spoofing issue CVE-2025-14327 |
DragonFly | 2 | 2 | |
| Mozilla -- Privilege escalation CVE-2025-14328 |
DragonFly | 2 | 4 | |
| Mozilla -- Privilege escalation CVE-2025-14329 |
DragonFly | 2 | 4 | |
| Mozilla -- JIT miscompilation in the JavaScript Engine: JIT component CVE-2025-14330 |
DragonFly | 2 | 4 | |
| Mozilla -- Same-origin policy bypass CVE-2025-14331 |
DragonFly | 2 | 4 | |
| Mozilla -- Memory safety bugs CVE-2025-14332 |
DragonFly | 2 | 2 | |
| Mozilla -- Memory safety bugs CVE-2025-14333 |
DragonFly | 2 | 4 | |
| MongoDB Server -- Improper Locking CVE-2025-14345 |
- | 0 | 1 | |
| Gitlab -- vulnerabilities CVE-2025-12716 CVE-2025-8405 CVE-2025-12029 CVE-2025-12562 CVE-2025-11984 CVE-2025-4097 CVE-2025-14157 CVE-2025-11247 CVE-2025-13978 CVE-2025-12734 |
- | 0 | 1 | |
| c-ares -- Use After Free CVE-2025-62408 |
DragonFly | 1 | 1 | |
| python -- several vulnerabilities CVE-2025-12084 CVE-2025-13836 |
DragonFly, NetBSD | 6 | 5 | |
| spotipy -- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-66040 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-13631 CVE-2025-13632 CVE-2025-13633 CVE-2025-13634 CVE-2025-13635 CVE-2025-13636 CVE-2025-13637 CVE-2025-13638 CVE-2025-13639 CVE-2025-13640 CVE-2025-13634 CVE-2025-13720 CVE-2025-13721 |
DragonFly | 1 | 2 | |
| xkbcomp -- Several vulnerabilities CVE-2018-15863 CVE-2018-15859 CVE-2018-15861 CVE-2018-15863 |
DragonFly | 1 | 1 | |
| png -- Out-of-bounds read CVE-2025-66293 |
DragonFly | 1 | 1 | |
| Apache httpd -- Multiple vulnerabilities CVE-2025-66200 CVE-2025-65082 CVE-2025-59775 CVE-2025-58098 CVE-2025-55753 |
DragonFly | 1 | 1 | |
| libvirt -- Multiple vulnerabilities CVE-2025-12748 CVE-2025-13193 |
- | 0 | 1 | |
| go -- excessive resource consumption CVE-2025-61729 |
DragonFly | 1 | 1 | |
| MongoDB -- Reachable Assertion CVE-2025-13644 |
- | 0 | 2 | |
| MongoDB -- Improper Validation of Specified Quantity in Input CVE-2025-13507 |
- | 0 | 2 | |
| MongoDB -- Missing Authorization CVE-2025-13643 |
- | 0 | 2 | |
| wolfssl -- multiple issues CVE-2025-12888 CVE-2025-11936 CVE-2025-11935 CVE-2025-11934 CVE-2025-11933 CVE-2025-11932 CVE-2025-11931 CVE-2025-12889 |
DragonFly | 1 | 1 | |
| MongoDB Server -- Improper Certificate Validation CVE-2025-12893 |
- | 0 | 2 | |
| Gitlab -- vulnerabilities CVE-2024-9183 CVE-2025-12571 CVE-2025-12653 CVE-2025-7449 CVE-2025-6195 CVE-2025-13611 |
- | 0 | 1 | |
| png -- Multiple vulnerabilities CVE-2025-65018 CVE-2025-64720 CVE-2025-64506 CVE-2025-64505 |
DragonFly | 1 | 1 | |
| GnuTLS -- Stack write buffer overflow CVE-2025-9820 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-13223 CVE-2025-13224 |
DragonFly | 1 | 2 | |
| OpenVPN -- HMAC verification on source IP address ineffective CVE-2025-13086 |
DragonFly | 1 | 2 | |
| pkcs11-helper -- deserialize buffer overflow | DragonFly | 1 | 1 | |
| OpenVPN -- avoid buffer overread parsing routes or endpoints CVE-2025-12106 |
- | 0 | 1 | |
| py-pdfminer.six -- Arbitrary Code Execution in pdfminer.six via Crafted PDF Input CVE-2025-64512 |
DragonFly | 1 | 1 | |
| sudo-rs -- Authenticating user not recorded properly in timestamp CVE-2025-64517 |
- | 0 | 1 | |
| sudo-rs -- Partial password reveal when password timeout occurs CVE-2025-64170 |
- | 0 | 1 | |
| PostgreSQL -- Multiple vulnerabilities CVE-2025-12818 CVE-2025-12817 |
DragonFly | 6 | 5 | |
| lightdm-kde-greeter -- Privilege Escalation from lightdm Service User to root CVE-2025-62876 |
- | 0 | 1 | |
| Gitlab -- vulnerabilities CVE-2025-11224 CVE-2025-11865 CVE-2025-2615 CVE-2025-7000 CVE-2025-6945 CVE-2025-11990 CVE-2025-6171 CVE-2025-7736 CVE-2025-12983 |
- | 0 | 1 | |
| Firefox -- Multiple vulnerabilities CVE-2025-13026 CVE-2025-13025 CVE-2025-13024 CVE-2025-13023 CVE-2025-13022 CVE-2025-13021 |
DragonFly | 1 | 1 | |
| Mozilla -- Memory safety bugs CVE-2025-13027 |
DragonFly | 2 | 2 | |
| firefox -- Use-after-free CVE-2025-13020 CVE-2025-13019 CVE-2025-13018 CVE-2025-13017 CVE-2025-13016 CVE-2025-13015 CVE-2025-13014 CVE-2025-13013 CVE-2025-13012 |
DragonFly | 1 | 3 | |
| chromium -- security fix CVE-2025-13042 |
DragonFly | 1 | 2 | |
| privatebin XSS CVE-2025-62796 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-12725 CVE-2025-12726 CVE-2025-12727 CVE-2025-12728 CVE-2025-12729 |
DragonFly | 1 | 2 | |
| OpenJPH < 0.24.5 -- multiple vulnerabilities | DragonFly | 1 | 1 | |
| MongoDB -- Improper Check for Unusual or Exceptional Conditions CVE-2025-12657 |
- | 0 | 1 | |
| OpenEXR < 3.4.3 -- multiple vulnerabilities | DragonFly | 1 | 1 | |
| redis -- Bug in XACKDEL may lead to stack overflow and potential RCE CVE-2025-62507 |
- | 0 | 2 | |
| Xorg -- multiple vulnerabilities CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 |
DragonFly | 1 | 1 | |
| Mozilla -- Same-origin policy bypass in the Graphics: Canvas2D component CVE-2025-9180 |
DragonFly | 2 | 4 | |
| Mozilla -- Denial-of-service due to out-of-memory CVE-2025-9182 |
DragonFly | 2 | 4 | |
| Firefox -- Sandbox escape due to use-after-free CVE-2025-10527 |
DragonFly | 2 | 4 | |
| Firefox -- Sandbox escape due to undefined behavior CVE-2025-10528 |
DragonFly | 2 | 4 | |
| Firefox -- Same-origin policy bypass CVE-2025-10529 |
DragonFly | 2 | 4 | |
| Firefox -- Mitigation bypass CVE-2025-10531 |
DragonFly | 2 | 2 | |
| Firefox -- Incorrect boundary conditions CVE-2025-10532 |
DragonFly | 2 | 4 | |
| Firefox -- Integer overflow in the SVG component CVE-2025-10533 |
DragonFly | 2 | 4 | |
| Firefox -- Spoofing issue in the Site Permissions component CVE-2025-10534 |
DragonFly | 2 | 2 | |
| Firefox -- Information disclosure in the Networking: Cache component CVE-2025-10536 |
DragonFly | 2 | 4 | |
| Firefox -- Sandbox escape due to integer overflow CVE-2025-11152 |
DragonFly | 1 | 1 | |
| python 3.9 -- end of life, not receiving security support | DragonFly | 1 | 0 | |
| Firefox -- use-after-free in the GPU or browser process CVE-2025-12380 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-12036 CVE-2025-12428 CVE-2025-12429 CVE-2025-12430 CVE-2025-12431 CVE-2025-12432 CVE-2025-12433 CVE-2025-12434 CVE-2025-12435 CVE-2025-12436 CVE-2025-12437 CVE-2025-12438 CVE-2025-12439 CVE-2025-12440 CVE-2025-12441 CVE-2025-12443 CVE-2025-12444 CVE-2025-12445 CVE-2025-12446 CVE-2025-12447 |
DragonFly | 1 | 2 | |
| Erlang - Absolute Path in Zip Module CVE-2025-4748 |
DragonFly | 4 | 3 | |
| py-social-auth-app-django -- Unsafe account association CVE-2025-61783 |
DragonFly | 2 | 1 | |
| ISC KEA -- Invalid characters cause assert CVE-2025-11232 |
- | 0 | 3 | |
| SQLite < 3.50.3 -- CWE-190 Integer Overflow or Wraparound in FTS5 module CVE-2025-7709 |
DragonFly | 1 | 2 | |
| SQLite -- Integer Overflow vulnerability CVE-2025-52099 |
DragonFly, FreeBSD | 2 | 1 | |
| privatebin - Missing HTML sanitisation of attached filename in file size hint enabling persistent XSS CVE-2025-62796 |
DragonFly | 1 | 1 | |
| strongSwan -- Heap-based buffer overflow in eap-mschapv2 plugin due to improper handling of failure request packets CVE-2025-62291 |
- | 0 | 1 | |
| chromium -- security fix CVE-2025-12036 |
DragonFly | 1 | 2 | |
| RT -- XSS via calendar invitations CVE-2025-9158 |
DragonFly | 1 | 2 | |
| RT -- CSV injection CVE-2025-61873 |
DragonFly | 2 | 3 | |
| unbound -- Possible domain hijacking via promiscuous records in the authority section CVE-2025-11411 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2025-11702 CVE-2025-10497 CVE-2025-11447 CVE-2025-11974 CVE-2025-11971 CVE-2025-6601 CVE-2025-11989 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2025-11458 CVE-2025-11460 CVE-2025-11211 |
DragonFly | 1 | 2 | |
| chromium -- multiple security fixes CVE-2025-11756 |
DragonFly | 1 | 2 | |
| Mongodb -- Use-after-free in the MongoDB CVE-2025-11979 |
- | 0 | 2 | |
| Hidden/Protected custom variables are prone to filter enumeration CVE-2025-61789 |
DragonFly | 1 | 1 | |
| Mozilla -- Memory safety bugs CVE-2025-11714 |
DragonFly | 2 | 4 | |
| Mozilla -- XSS in sites without content-type header CVE-2025-11712 |
DragonFly | 2 | 4 | |
| Mozilla -- Use-after-free CVE-2025-11708 |
DragonFly | 2 | 4 | |
| Mozilla -- Out-of-bounds reads and writes CVE-2025-11709 |
DragonFly | 2 | 4 | |
| Mozilla -- Memory disclosure CVE-2025-11710 |
DragonFly | 2 | 4 | |
| Mozilla -- JavaScript Object property overriding CVE-2025-11711 |
DragonFly | 2 | 4 | |
| Mozilla -- spoofing CVE-2025-10534 |
DragonFly | 2 | 2 | |
| Mozilla -- Memory safety bugs CVE-2025-11715 |
DragonFly | 2 | 4 | |
| Mozilla -- Information disclosure CVE-2025-10536 |
DragonFly | 2 | 4 | |
| minio -- Privilege Escalation via Session Policy Bypass in Service Accounts and STS CVE-2025-62506 |
- | 0 | 2 | |
| Mozilla -- Memory safety bugs CVE-2025-10537 |
DragonFly | 2 | 4 | |
| Mozilla -- integer overflow CVE-2025-10533 |
DragonFly | 2 | 4 | |
| Mozilla -- Memory safety bugs CVE-2025-11721 |
DragonFly | 2 | 2 | |
| Firefox -- Sandbox escape CVE-2025-11152 |
DragonFly | 1 | 1 | |
| zeek -- information leak vulnerability | - | 0 | 1 | |
| Firefox -- JIT miscompilation in the JavaScript Engine CVE-2025-11153 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2025-11340 CVE-2025-10004 CVE-2025-9825 CVE-2025-2934 |
- | 0 | 1 | |
| Mailpit -- Performance information disclosure | - | 0 | 1 | |
| Mozilla -- mitigation bypass vulnerability CVE-2025-10531 |
DragonFly | 2 | 2 | |
| Mozilla -- Incorrect boundary conditions CVE-2025-10532 |
DragonFly | 2 | 4 | |
| mongodb -- MongoDB Server router will crash when incorrect lsid is set on a sharded query CVE-2025-10059 |
- | 0 | 2 | |
| mongodb -- MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation CVE-2025-10060 |
- | 0 | 2 | |
| mongodb -- Malformed $group Query May Cause MongoDB Server to Crash CVE-2025-10061 |
- | 0 | 1 | |
| Mozilla -- Sandbox escape due to use-after-free CVE-2025-10527 CVE-2025-10528 |
DragonFly | 2 | 4 | |
| redis,valkey -- Running Lua function as a different user CVE-2025-46818 |
DragonFly | 1 | 7 | |
| redis,valkey -- Out of bound read due to a bug in LUA CVE-2025-46819 |
DragonFly | 1 | 7 | |
| redis,valkey -- Lua Use-After-Free may lead to remote code execution CVE-2025-49844 |
DragonFly | 1 | 7 | |
| qt6-webengine -- Multiple vulnerabilities CVE-2025-9866 CVE-2025-10200 CVE-2025-10201 CVE-2025-10500 CVE-2025-10501 CVE-2025-10502 CVE-2025-10890 CVE-2025-10891 CVE-2025-10892 |
- | 0 | 2 | |
| redis,valkey -- Lua library commands may lead to integer overflow and potential RCE CVE-2025-46817 |
DragonFly | 1 | 7 | |
| chromium -- multiple security fixes CVE-2025-11205 CVE-2025-11206 CVE-2025-11207 CVE-2025-11208 CVE-2025-11209 CVE-2025-11210 CVE-2025-11211 CVE-2025-11212 CVE-2025-11213 CVE-2025-11215 CVE-2025-11216 CVE-2025-11219 |
DragonFly | 1 | 2 | |
| fetchmail -- potential crash when authenticating to SMTP server CVE-2025-61962 |
DragonFly | 1 | 1 | |
| Django -- multiple vulnerabilities CVE-2025-59681 CVE-2025-59682 |
DragonFly | 2 | 0 | |
| OpenSSL -- multiple vulnerabilities CVE-2025-9230 CVE-2025-9231 CVE-2025-9232 |
DragonFly | 1 | 5 | |
| LibreSSL -- overwrite and -read vulnerability CVE-2025-9230 |
- | 0 | 2 | |
| py-mysql-connector-python -- Vulnerability in the MySQL Connectors product of Oracle MySQL CVE-2025-21548 |
DragonFly | 1 | 1 | |
| goldendict -- dangerous method exposed CVE-2025-53964 |
DragonFly, GhostBSD | 2 | 0 | |
| quiche -- Infinite loop triggered by connection ID retirement CVE-2025-7054 |
- | 0 | 1 | |
| libudisks -- Udisks: out-of-bounds read in udisks daemon CVE-2025-8067 |
DragonFly | 1 | 1 | |
| Gitlab -- Vulnerabilities CVE-2025-10858 CVE-2025-8014 CVE-2025-9958 CVE-2025-7691 CVE-2025-10871 CVE-2025-10867 CVE-2025-5069 CVE-2025-10868 |
- | 0 | 1 | |
| quiche -- Multiple vulnerabilities CVE-2025-4820 CVE-2025-4821 |
- | 0 | 1 | |
| openvpn-devel -- script injection vulnerability from trusted but malicious server CVE-2025-10680 |
- | 0 | 1 | |
| dnsdist -- Denial of service via crafted DoH exchange CVE-2025-30187 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2025-10890 CVE-2025-10891 CVE-2025-10892 |
DragonFly | 1 | 2 | |
| chromium -- multiple security fixes CVE-2025-10585 CVE-2025-10500 CVE-2025-10501 CVE-2025-10502 |
DragonFly | 1 | 2 | |
| PCRE2: heap-buffer-overflow read in match_ref due to missing boundary restoration in SCS CVE-2025-58050 |
DragonFly | 1 | 1 | |
| jenkins -- multiple vulnerabilities CVE-2025-5115 CVE-2025-59474 CVE-2025-59475 CVE-2025-59476 |
DragonFly | 2 | 2 | |
| cups -- security vulnerabilities CVE-2025-58060 CVE-2025-58364 |
DragonFly | 1 | 1 | |
| Gitlab -- Vulnerabilities CVE-2025-2256 CVE-2025-6454 CVE-2025-1250 CVE-2025-7337 CVE-2025-10094 CVE-2025-6769 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2025-10200 CVE-2025-10201 |
DragonFly | 1 | 2 | |
| chromium -- multiple security fixes CVE-2025-9864 CVE-2025-9865 CVE-2025-9866 CVE-2025-9867 |
DragonFly | 1 | 2 | |
| Django -- multiple vulnerabilities CVE-2025-57833 |
DragonFly | 2 | 0 | |
| exiv2 -- Denial-of-service CVE-2025-55304 |
- | 0 | 2 | |
| exiv2 -- Out-of-bounds read in Exiv2::EpsImage::writeMetadata() CVE-2025-54080 |
- | 0 | 2 | |
| Shibboleth Service Provider -- SQL injection vulnerability in ODBC plugin | DragonFly | 1 | 1 | |
| Vieb -- Remote Code Execution via Visiting Untrusted URLs | - | 0 | 1 | |
| Gitlab -- vulnerabilities CVE-2025-3601 CVE-2025-2246 CVE-2025-4225 CVE-2025-5101 |
- | 0 | 1 | |
| qt6-base -- DoS in QColorTransferGenericFunction CVE-2025-5992 |
DragonFly | 1 | 1 | |
| qt6-webengine -- Multiple vulnerabilities CVE-2025-5063 CVE-2025-5064 CVE-2025-5065 CVE-2025-5068 CVE-2025-5280 CVE-2025-5281 CVE-2025-5283 CVE-2025-5419 CVE-2025-6191 CVE-2025-6192 CVE-2025-6554 CVE-2025-6556 CVE-2025-6557 CVE-2025-6558 CVE-2025-7656 CVE-2025-7657 CVE-2025-8010 CVE-2025-8576 CVE-2025-8578 CVE-2025-8580 CVE-2025-8582 CVE-2025-8879 CVE-2025-8880 CVE-2025-8881 CVE-2025-8901 |
- | 0 | 2 | |
| SQLite -- application crash CVE-2025-29088 |
DragonFly | 1 | 2 | |
| ISC KEA -- kea-dhcp4 aborts if client sends a broadcast request with particular options CVE-2025-40779 |
- | 0 | 3 | |
| p5-Catalyst-Authentication-Credential-HTTP -- Insecure source of randomness CVE-2025-40920 |
DragonFly | 1 | 1 | |
| Mozilla -- memory safety bugs CVE-2025-9187 |
DragonFly | 2 | 2 | |
| Mozilla -- memory corruption in GMP CVE-2025-9179 |
DragonFly | 2 | 4 | |
| Mozilla -- Same-origin policy bypass CVE-2025-9180 |
DragonFly | 2 | 4 | |
| Mozilla -- Uninitialized memory CVE-2025-9181 |
DragonFly | 2 | 4 | |
| Mozilla -- DoS in WebRender CVE-2025-9182 |
DragonFly | 2 | 4 | |
| Firefox -- Spoofing in the Address Bar CVE-2025-9183 |
DragonFly | 1 | 3 | |
| Mozilla -- memory safety bugs CVE-2025-9184 CVE-2025-9185 |
DragonFly | 2 | 4 | |
| nginx -- worker process memory disclosure CVE-2025-53859 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2025-7734 CVE-2025-7739 CVE-2025-6186 CVE-2025-8094 CVE-2024-12303 CVE-2025-2614 CVE-2024-10219 CVE-2025-8770 CVE-2025-2937 CVE-2025-1477 CVE-2025-5819 CVE-2025-2498 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2025-8579 CVE-2025-8580 CVE-2025-8901 CVE-2025-8881 CVE-2025-8882 |
DragonFly | 1 | 2 | |
| PostgreSQL -- vulnerabilities CVE-2025-8713 CVE-2025-8714 CVE-2025-8715 |
DragonFly | 3 | 5 | |
| p5-Authen-SASL -- Insecure source of randomness CVE-2025-40918 |
DragonFly | 1 | 1 | |
| www/varnish7 -- Denial of Service in HTTP/2 CVE-2025-8671 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-8576 CVE-2025-8577 CVE-2025-8578 CVE-2025-8579 CVE-2025-8580 CVE-2025-8581 CVE-2025-8582 CVE-2025-8583 |
DragonFly | 1 | 2 | |
| Apache httpd -- evaluation always true CVE-2025-54090 |
- | 0 | 2 | |
| sqlite -- integer overflow CVE-2025-3277 |
DragonFly, FreeBSD | 2 | 2 | |
| navidrome -- transcoding permission bypass vulnerability CVE-2025-48948 |
- | 0 | 1 | |
| SQLite -- integer overflow in key info allocation CVE-2025-7458 |
- | 0 | 2 | |
| p5-Crypt-CBC -- Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2025-2814 |
DragonFly | 1 | 1 | |
| rubygem-resolv -- Possible denial of service CVE-2025-24294 |
DragonFly | 3 | 3 | |
| Mozilla -- IonMonkey-JIT bad stack write CVE-2025-8027 |
DragonFly | 2 | 5 | |
| gdk-pixbuf2 -- a heap buffer overflow CVE-2025-7345 |
DragonFly | 1 | 1 | |
| Mozilla -- Incorrect computation of branch address CVE-2025-8028 |
DragonFly | 2 | 5 | |
| Mozilla -- 'javascript:' URLs execution CVE-2025-8029 |
DragonFly | 2 | 5 | |
| Mozilla -- Insufficient input escaping CVE-2025-8030 |
DragonFly | 2 | 5 | |
| Mozilla -- HTTP Basic Authentication credentials leak CVE-2025-8031 |
DragonFly | 2 | 5 | |
| Mozilla -- XSLT document CSP bypass CVE-2025-8032 |
DragonFly | 2 | 5 | |
| Mozilla -- nullptr dereference CVE-2025-8033 |
DragonFly | 2 | 5 | |
| Mozilla -- Memory safety bugs CVE-2025-8034 |
DragonFly | 2 | 5 | |
| Mozilla -- Memory safety bugs CVE-2025-8035 |
DragonFly | 2 | 5 | |
| Gitlab -- vulnerabilities CVE-2025-4700 CVE-2025-4439 CVE-2025-7001 CVE-2025-4976 CVE-2025-0765 CVE-2025-1299 |
- | 0 | 1 | |
| Mozilla -- CORS circumvention CVE-2025-8036 |
DragonFly | 2 | 5 | |
| Mozilla -- cookie shadowing CVE-2025-8037 |
DragonFly | 2 | 5 | |
| Mozilla -- Ignored paths while checking navigations CVE-2025-8038 |
DragonFly | 2 | 5 | |
| Mozilla -- Persisted search terms in the URL bar CVE-2025-8039 |
DragonFly | 2 | 5 | |
| Mozilla -- Memory safety bugs CVE-2025-8040 |
DragonFly | 2 | 5 | |
| Mozilla -- Multiple vulnerabilities CVE-2025-8044 CVE-2025-8043 |
DragonFly | 2 | 2 | |
| powerdns-recursor -- cache pollution CVE-2025-30192 |
- | 0 | 1 | |
| sqlite -- Integer Truncation on SQLite CVE-2025-6965 |
DragonFly, FreeBSD | 2 | 2 | |
| 7-Zip -- Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder CVE-2025-53816 |
DragonFly | 1 | 1 | |
| libwasmtime -- host panic with fd_renumber WASIp1 function CVE-2025-53901 |
- | 0 | 1 | |
| unbound -- Cache poisoning via the ECS-enabled Rebirthday Attack CVE-2025-5994 |
DragonFly | 1 | 1 | |
| liboqs -- Secret-dependent branching in HQC CVE-2025-52473 |
DragonFly | 1 | 1 | |
| GnuTLS -- multiple vulnerabilities CVE-2025-32989 CVE-2025-32988 CVE-2025-32990 CVE-2025-6395 |
DragonFly | 1 | 1 | |
| libxml2 -- multiple vulnerabilities CVE-2025-6021 CVE-2025-6170 CVE-2025-49794 CVE-2025-49795 CVE-2025-49795 |
DragonFly, FreeBSD | 2 | 2 | |
| libxslt -- multiple vulnerabilities CVE-2025-7424 CVE-2025-7425 CVE-2025-9714 CVE-2025-11731 |
DragonFly, NetBSD, FreeBSD | 4 | 1 | |
| Apache httpd -- Multiple vulnerabilities CVE-2024-42516 CVE-2024-43204 CVE-2024-43394 CVE-2024-47252 CVE-2025-23048 CVE-2025-49630 CVE-2025-49812 CVE-2025-53020 |
DragonFly | 1 | 1 | |
| Gitlab -- vulnerabilities CVE-2025-6948 CVE-2025-3396 CVE-2025-4972 CVE-2025-6168 |
- | 0 | 1 | |
| Apache Tomcat -- Multiple Vulnerabilities CVE-2025-52434 CVE-2025-52520 CVE-2025-53506 |
DragonFly | 3 | 3 | |
| git -- multiple vulnerabilities CVE-2025-27613 CVE-2025-27614 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 CVE-2025-48386 |
DragonFly | 5 | 5 | |
| MongoDB -- Incomplete Redaction of Sensitive Information in MongoDB Server Logs CVE-2025-6711 |
- | 0 | 2 | |
| MongoDB -- may be susceptible to DoS due to Accumulated Memory Allocation CVE-2025-6712 |
- | 0 | 1 | |
| MongoDB -- may be susceptible to privilege escalation due to $mergeCursors stage CVE-2025-6713 |
- | 0 | 1 | |
| MongoDB -- Incorrect Handling of incomplete data may prevent mongoS from Accepting New Connections CVE-2025-6714 |
- | 0 | 2 | |
| ModSecurity -- empty XML tag causes segmentation fault CVE-2025-52891 |
DragonFly | 1 | 1 | |
| redis,valkey -- {redis,valkey}-check-aof may lead to stack overflow and potential RCE CVE-2025-27151 |
- | 0 | 5 | |
| redis,valkey -- DoS Vulnerability due to bad connection error handling CVE-2025-48367 |
DragonFly | 1 | 6 | |
| redis,valkey -- Out of bounds write in hyperloglog commands leads to RCE CVE-2025-32023 |
DragonFly | 1 | 6 | |
| gstreamer1-plugins-bad -- stack buffer overflow in H.266 video parser CVE-2025-6663 |
DragonFly | 1 | 1 | |
| Mozilla -- persistent UUID that identifies browser CVE-2025-6425 |
DragonFly | 2 | 4 | |
| firefox -- multiple vulnerabilities CVE-2025-6429 CVE-2025-6430 |
DragonFly | 1 | 1 | |
| firefox -- multiple vulnerabilities CVE-2025-6427 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436 |
DragonFly | 1 | 1 | |
| Mozilla -- exploitable crash CVE-2025-6424 |
DragonFly | 2 | 4 | |
| php -- Multiple vulnerabilities CVE-2025-1735 CVE-2025-6491 CVE-2025-1220 |
DragonFly | 4 | 3 | |
| chromium -- multiple security fixes CVE-2025-6554 |
DragonFly | 1 | 2 | |
| chromium -- multiple security fixes CVE-2025-6555 CVE-2025-6556 CVE-2025-6557 |
DragonFly | 1 | 2 | |
| sudo -- privilege escalation vulnerability through host and chroot options CVE-2025-32462 CVE-2025-32463 |
- | 0 | 2 | |
| xorg server -- Multiple vulnerabilities CVE-2025-49176 |
DragonFly | 2 | 2 | |
| xorg server -- Multiple vulnerabilities CVE-2025-49175 CVE-2025-49177 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 |
DragonFly | 2 | 2 | |
| podman -- TLS connection used to pull VM images was not validated CVE-2025-6032 |
NetBSD | 1 | 1 | |
| MongoDB -- Pre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB CVE-2025-6710 |
- | 0 | 2 | |
| MongoDB -- Pre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC Authentication CVE-2025-6709 |
- | 0 | 2 | |
| MongoDB -- Race condition in privilege cache invalidation cycle CVE-2025-6707 |
- | 0 | 2 | |
| MongoDB -- Running certain aggregation operations with the SBE engine may lead to unexpected behavior CVE-2025-6706 |
- | 0 | 2 | |
| Gitlab -- Vulnerabilities CVE-2025-3279 CVE-2025-1754 CVE-2025-5315 CVE-2025-2938 CVE-2025-5846 |
- | 0 | 1 | |
| cisco -- OpenH264 Decoding Functions Heap Overflow Vulnerability CVE-2025-27091 |
DragonFly | 1 | 1 | |
| clamav -- ClamAV PDF Scanning Buffer Overflow Vulnerability CVE-2025-20260 |
DragonFly | 1 | 1 | |
| clamav -- ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2025-20234 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-6191 CVE-2025-6192 |
- | 0 | 3 | |
| Grafana -- DingDing contact points exposed in Grafana Alerting CVE-2025-3415 |
DragonFly | 1 | 1 | |
| Navidrome -- SQL Injection via role parameter CVE-2025-48949 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2025-5419 CVE-2025-5068 |
- | 0 | 3 | |
| Firefox -- Multiple vulnerabilities CVE-2025-49709 CVE-2025-49710 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2025-5958 CVE-2025-5959 |
- | 0 | 3 | |
| Mozilla -- control access bypass CVE-2025-2817 |
DragonFly | 1 | 5 | |
| webmin -- CGI Command Injection Remote Code Execution CVE-2024-12828 |
- | 0 | 2 | |
| Yelp -- arbitrary file read CVE-2025-3155 |
NetBSD | 1 | 2 | |
| Yelp -- arbitrary file read CVE-2025-3155 |
- | 0 | 2 | |
| PostgreSQL JDBC library -- Improper Authentication CVE-2025-49146 |
DragonFly | 1 | 1 | |
| Gitlab -- Vulnerabilities CVE-2025-4278 CVE-2025-2254 CVE-2025-5121 CVE-2025-0673 CVE-2025-1516 CVE-2025-1478 CVE-2024-9512 CVE-2025-5996 CVE-2025-5195 CVE-2025-5982 |
- | 0 | 1 | |
| ModSecurity -- possible DoS vulnerability CVE-2025-47947 |
DragonFly | 1 | 1 | |
| ModSecurity -- possible DoS vulnerability CVE-2025-48866 |
DragonFly | 1 | 1 | |
| Mozilla -- cross-origin leak attack CVE-2025-5263 |
DragonFly | 1 | 3 | |
| Mozilla -- local code execution CVE-2025-5264 |
DragonFly | 1 | 3 | |
| Mozilla -- XS-leak attack CVE-2025-5266 |
DragonFly | 1 | 3 | |
| Mozilla -- clickjacking vulnerability CVE-2025-5267 |
DragonFly | 1 | 3 | |
| Chrome -- Out of bounds read CVE-2025-5419 |
- | 0 | 2 | |
| Post-Auth Remote Code Execution found in Roundcube Webmail CVE-2025-49113 |
- | 0 | 2 | |
| Gimp -- GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability CVE-2025-2760 |
DragonFly, FreeBSD | 2 | 0 | |
| Gimp -- GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2025-2761 |
DragonFly, FreeBSD | 2 | 0 | |
| curl -- Multiple vulnerabilities CVE-2025-5025 CVE-2025-4947 |
- | 0 | 2 | |
| chromium -- multiple security fixes CVE-2025-5063 CVE-2025-5280 CVE-2025-5064 CVE-2025-5065 CVE-2025-5066 CVE-2025-5281 CVE-2025-5283 CVE-2025-5067 |
- | 0 | 3 | |
| libxml2 -- Out-of-bounds memory access CVE-2025-32414 |
- | 0 | 1 | |
| libxml2 -- Use After Free CVE-2024-56171 |
- | 0 | 2 | |
| libxml2 -- Stack-based Buffer Overflow CVE-2025-24928 |
- | 0 | 2 | |
| Chrome -- Heap corruption exploitation CVE-2025-5063 |
- | 0 | 2 | |
| Mozilla -- Memory safety bugs CVE-2025-5272 |
DragonFly | 2 | 2 | |
| Firefox -- content injection attack CVE-2025-5271 |
DragonFly | 1 | 1 | |
| ModSecurity -- Possible DoS Vulnerability CVE-2025-47947 |
DragonFly | 1 | 1 | |
| Firefox -- unencrypted SNI CVE-2025-5270 |
DragonFly | 1 | 1 | |
| Mozilla -- Memory safety bugs CVE-2025-5268 |
DragonFly | 2 | 4 | |
| Mozilla -- memory corruption CVE-2025-5269 |
DragonFly | 1 | 3 | |
| traefik -- Path traversal vulnerability CVE-2025-47952 |
- | 0 | 2 | |
| glpi-project -- GLPI multiple vulnerabilities CVE-2024-11955 CVE-2025-23024 CVE-2025-23046 CVE-2025-25192 CVE-2025-21626 CVE-2025-21627 CVE-2025-21619 CVE-2025-24799 CVE-2025-24801 |
- | 0 | 2 | |
| ISC KEA -- Multiple vulnerabilities CVE-2025-32801 CVE-2025-32802 CVE-2025-32803 |
- | 0 | 2 | |
| grafana -- XSS vulnerability CVE-2025-4123 |
DragonFly | 1 | 1 | |
| cpython -- Use-after-free in "unicode_escape" decoder with error handler CVE-2025-4516 |
- | 0 | 6 | |
| OpenSSL -- Inverted security logic in x509 app CVE-2025-4575 |
- | 0 | 2 | |
| Gitlab -- vulnerabilities CVE-2025-0993 CVE-2024-12093 CVE-2024-7803 CVE-2025-3111 CVE-2025-2853 CVE-2025-4979 CVE-2025-0605 CVE-2025-0679 CVE-2024-9163 CVE-2025-1110 |
- | 0 | 1 | |
| Grafana -- User deletion issue CVE-2025-3580 |
DragonFly | 1 | 1 | |
| Firefox -- memory corruption due to race condition CVE-2025-3608 |
DragonFly | 1 | 1 | |
| screen -- multiple vulnerabilities CVE-2025-46805 CVE-2025-46804 CVE-2025-46803 CVE-2025-46802 CVE-2025-23395 |
DragonFly | 1 | 1 | |
| firefox -- out-of-bounds read/write CVE-2025-4918 CVE-2025-4919 |
DragonFly | 1 | 3 | |
| WeeChat -- Multiple vulnerabilities | - | 0 | 2 | |
| chromium -- multiple security fixes CVE-2025-4664 CVE-2025-4609 |
- | 0 | 3 | |
| Mozilla -- memory corruption CVE-2025-4093 |
DragonFly | 1 | 3 | |
| Mozilla -- memory safety bugs CVE-2025-4091 |
DragonFly | 2 | 4 | |
| vscode -- security feature bypass vulnerability CVE-2025-21264 |
- | 0 | 1 | |
| libxslt -- multiple vulnerabilities CVE-2024-55549 CVE-2025-24855 |
- | 0 | 2 | |
| www/varnish7 -- Request Smuggling Attack | DragonFly | 1 | 1 | |
| Mozilla -- javascript content execution CVE-2025-4083 |
DragonFly | 2 | 4 | |
| Mozilla -- Information leak CVE-2025-4085 |
DragonFly | 2 | 2 | |
| Mozilla -- XPath parsing undefined behavior CVE-2025-4087 |
DragonFly | 2 | 4 | |
| Mozilla -- Cross-Site Request Forgery CVE-2025-4088 |
DragonFly | 2 | 2 | |
| Mozilla -- insufficient character escaping CVE-2025-4089 |
DragonFly | 2 | 2 | |
| Mozilla -- memory corruption CVE-2025-4092 |
DragonFly | 2 | 2 | |
| Gitlab -- vulnerabilities CVE-2025-0549 CVE-2024-8973 CVE-2025-1278 |
- | 0 | 1 | |
| PostgreSQL -- PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation CVE-2025-4207 |
- | 0 | 17 | |
| chromium -- multiple security fixes CVE-2025-4372 |
- | 0 | 3 | |
| chromium -- multiple security fixes CVE-2025-4096 CVE-2025-4050 CVE-2025-4051 CVE-2025-4052 |
- | 0 | 3 | |
| sqlite -- integer overflow CVE-2025-29087 |
FreeBSD, DragonFly | 2 | 0 | |
| h11 accepts some malformed Chunked-Encoding bodies CVE-2025-43859 |
DragonFly | 1 | 1 | |
| Gitlab -- Vulnerabilities CVE-2025-1763 CVE-2025-2443 CVE-2025-1908 CVE-2025-0639 CVE-2024-12244 |
- | 0 | 1 | |
| Grafana -- Authorization bypass in data source proxy API CVE-2025-3454 |
DragonFly | 1 | 1 | |
| Grafana -- Bypass Viewer and Editor permissions CVE-2025-3260 |
- | 0 | 2 | |
| redis,valkey -- DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client CVE-2025-21605 |
- | 0 | 6 | |
| Grafana -- DOM XSS vulnerability CVE-2025-2703 |
- | 0 | 2 | |
| chromium -- multiple security fixes | - | 0 | 3 | |
| Navidrome -- Authentication bypass in Subsonic API CVE-2025-27112 |
- | 0 | 1 | |
| powerdns-recursor -- denial of service CVE-2025-30195 |
- | 0 | 1 | |
| Erlang -- Erlang/OTP SSH Vulnerable to Pre-Authentication RCE CVE-2025-32433 |
DragonFly | 4 | 6 | |
| ejabberd -- mod_muc_occupantid: Fix handling multiple occupant-id | - | 0 | 2 | |
| chromium -- multiple security fixes CVE-2025-3619 CVE-2025-3620 |
- | 0 | 3 | |
| chromium -- multiple security fixes CVE-2025-3066 |
- | 0 | 3 | |
| Perl -- heap buffer overflow when transliterating non-ASCII bytes CVE-2024-56406 |
DragonFly | 1 | 4 | |
| gogs -- Multiple vulnerabilities CVE-2024-44625 CVE-2024-39933 CVE-2024-39932 CVE-2024-39931 CVE-2024-39930 |
- | 0 | 1 | |
| mozilla -- double free error CVE-2024-11704 |
DragonFly | 2 | 4 | |
| Mozilla -- null pointer dereference CVE-2024-11706 |
DragonFly | 2 | 2 | |
| jenkins -- multiple vulnerabilities CVE-2025-31720 CVE-2025-31721 |
- | 0 | 4 | |
| Gitlab -- Vulnerabilities CVE-2025-1677 CVE-2025-0362 CVE-2025-2408 CVE-2024-11129 CVE-2025-2469 |
- | 0 | 1 | |
| expat: improper restriction of xml entity expansion depth CVE-2024-8176 |
- | 0 | 2 | |
| Mozilla -- use-after-free error CVE-2025-3028 |
DragonFly | 2 | 5 | |
| Mozilla -- URL spoofing attack CVE-2025-3029 |
DragonFly | 2 | 5 | |
| Mozilla -- Memory corruption CVE-2025-3030 |
- | 0 | 4 | |
| Mozilla -- stack memory read CVE-2025-3031 |
DragonFly | 2 | 3 | |
| Mozilla -- privilege escalation attack CVE-2025-3032 |
DragonFly | 2 | 3 | |
| Mozilla -- memory corruption CVE-2025-3034 |
DragonFly | 2 | 3 | |
| chromium -- multiple security fixes CVE-2025-3067 CVE-2025-3068 CVE-2025-3069 CVE-2025-3070 CVE-2025-3071 CVE-2025-3072 CVE-2025-3073 CVE-2025-3074 |
- | 0 | 3 | |
| Mozilla -- Memory corruption bug CVE-2025-0243 |
DragonFly | 2 | 5 | |
| Mozilla -- privilege escalation attack CVE-2025-0237 |
DragonFly | 2 | 5 | |
| Mozilla -- use-after-free after failed memory allocation CVE-2025-0238 |
DragonFly | 2 | 5 | |
| Mozilla -- redirection to insecure site CVE-2025-0239 |
DragonFly | 2 | 5 | |
| Mozilla -- use-after-free while parsing JSON CVE-2025-0240 |
DragonFly | 2 | 5 | |
| Mozilla -- DoS via segmentation fault CVE-2025-0241 |
DragonFly | 2 | 5 | |
| Mozilla -- Memory safety bugs CVE-2025-0242 |
DragonFly | 2 | 5 | |
| firefox -- authentication bypass CVE-2025-0245 |
DragonFly | 1 | 2 | |
| Mozilla -- Memory safety bugs CVE-2025-0247 |
DragonFly | 2 | 3 | |
| MongoDB -- Unauthorized access to underlying data CVE-2025-3082 |
- | 0 | 1 | |
| MongoDB -- Malformed wire protocol messages may cause mongos to crash CVE-2025-3083 |
- | 0 | 1 | |
| MongoDB -- crash due to improper validation of explain command CVE-2025-3084 |
- | 0 | 2 | |
| mozilla -- memory corruption CVE-2025-1943 |
DragonFly | 2 | 3 | |
| mozilla -- 64 bit JIT WASM read on left over memory CVE-2025-1933 |
DragonFly | 2 | 5 | |
| mozilla -- use-after-free in WebTransport connection CVE-2025-1931 |
DragonFly | 2 | 5 | |
| mozilla -- Memory safety bugs CVE-2025-1937 |
DragonFly | 2 | 5 | |
| mozilla -- memory corruption CVE-2025-1938 CVE-2025-1935 CVE-2025-1934 |
DragonFly | 2 | 5 | |
| openvpn -- server-side denial-of-service vulnerability with tls-crypt-v2 CVE-2025-2704 |
- | 0 | 3 | |
| gitea -- Multiple vulnerabilities CVE-2025-22870 CVE-2025-29923 CVE-2025-30204 |
- | 0 | 2 | |
| mozilla -- multiple vulnerabilities CVE-2025-1932 CVE-2025-1941 CVE-2025-1942 CVE-2025-27424 |
DragonFly | 2 | 5 | |
| suricata -- Multiple vulnerabilities CVE-2025-29915 CVE-2025-29916 CVE-2025-29917 CVE-2025-29918 |
- | 0 | 2 | |
| qt6-webengine -- Multiple vulnerabilities CVE-2024-11477 CVE-2025-0762 CVE-2025-0996 CVE-2025-0998 CVE-2025-0999 CVE-2025-1006 CVE-2025-1426 CVE-2025-1918 CVE-2025-1919 CVE-2025-1921 CVE-2025-2036 |
- | 0 | 2 | |
| Gitlab -- Vulnerabilities CVE-2025-2255 CVE-2025-0811 CVE-2025-2242 CVE-2024-12619 CVE-2024-10307 CVE-2024-9773 |
- | 0 | 1 | |
| py-matrix-synapse -- federation denial of service via malformed events CVE-2025-30355 |
- | 0 | 1 | |
| qt5-webengine -- Use after free in Compositing CVE-2024-12694 |
- | 0 | 3 | |
| www/varnish7 -- client-side desync vulnerability CVE-2025-30346 |
- | 0 | 2 | |
| chromium -- multiple security fixes CVE-2025-2476 |
- | 0 | 3 | |
| shibboleth-sp -- Parameter manipulation allows the forging of signed SAML messages | - | 0 | 2 | |
| php -- Multiple vulnerabilities CVE-2024-11235 CVE-2025-1219 CVE-2025-1736 CVE-2025-1861 CVE-2025-1734 CVE-2025-1217 |
- | 0 | 7 | |
| Gitlab -- Vulnerabilities CVE-2025-25291 CVE-2025-25292 CVE-2025-27407 CVE-2024-13054 CVE-2024-12380 CVE-2025-1257 CVE-2025-0652 CVE-2024-8402 CVE-2024-7296 |
- | 0 | 1 | |
| vim -- potential data loss with zip.vim and specially crafted zip files CVE-2025-29768 |
- | 0 | 2 | |
| chromium -- multiple security fixes CVE-2025-1920 CVE-2025-2135 CVE-2025-2136 CVE-2025-2137 |
- | 0 | 3 | |
| vim -- Improper Input Validation in Vim CVE-2025-27423 |
- | 0 | 2 | |
| libreoffice -- Macro URL arbitrary script execution CVE-2025-1080 |
- | 0 | 2 | |
| Jinja2 -- Sandbox breakout through attr filter selecting format method CVE-2025-27516 |
- | 0 | 1 | |
| caldera -- Remote Code Execution CVE-2025-27364 |
- | 0 | 1 | |
| xorg server -- Multiple vulnerabilities CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 CVE-2025-26597 CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 CVE-2025-26601 |
- | 0 | 4 | |
| Spotipy -- Spotipy's cache file, containing spotify auth token, is created with overly broad permissions CVE-2025-27154 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2025-1914 CVE-2025-1915 CVE-2025-1916 CVE-2025-1917 CVE-2025-1918 CVE-2025-1919 CVE-2025-1921 CVE-2025-1922 CVE-2025-1923 |
- | 0 | 3 | |
| jenkins -- multiple vulnerabilities CVE-2025-27622 CVE-2025-27623 CVE-2025-27624 CVE-2025-27625 |
- | 0 | 4 | |
| unit -- potential security issue CVE-2025-1695 |
DragonFly | 1 | 0 | |
| vim -- Potential code execution | - | 0 | 2 | |
| Gitlab -- Vulnerabilities CVE-2025-0475 CVE-2025-0555 CVE-2024-8186 CVE-2024-10925 CVE-2025-0307 |
- | 0 | 1 | |
| chromium -- multiple security fixes | - | 0 | 3 | |
| exiv2 -- Use after free in TiffSubIfd CVE-2025-26623 |
- | 0 | 2 | |
| exim -- SQL injection CVE-2025-26794 |
- | 0 | 2 | |
| Emacs -- Shell injection vulnerability CVE-2024-53920 |
DragonFly | 2 | 2 | |
| FreeBSD -- Multiple vulnerabilities in OpenSSH CVE-2025-26465 CVE-2025-26466 |
- | 0 | 1 | |
| Emacs -- Arbitrary code execution vulnerability CVE-2025-1244 |
- | 0 | 4 | |
| chromium -- multiple security fixes CVE-2025-0999 CVE-2025-1426 CVE-2025-1006 |
- | 0 | 3 | |
| chromium -- multiple security fixes CVE-2025-0444 CVE-2025-0445 CVE-2025-0451 |
- | 0 | 3 | |
| chromium -- multiple security fixes CVE-2025-0995 CVE-2025-0996 CVE-2025-0997 CVE-2025-0998 |
- | 0 | 3 | |
| Gitlab -- Vulnerabilities CVE-2025-0376 CVE-2024-12379 CVE-2024-3303 CVE-2025-1042 CVE-2025-1212 CVE-2024-9870 CVE-2025-0516 CVE-2025-1198 |
- | 0 | 1 | |
| vscode -- multiple vulnerabilities CVE-2025-24042 CVE-2025-24039 |
- | 0 | 1 | |
| security/openvpn-auth-ldap -- Fix buffer overflow in challenge/response CVE-2024-28820 |
- | 0 | 1 | |
| PostgreSQL -- PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 |
- | 0 | 9 | |
| Intel CPUs -- multiple vulnerabilities CVE-2024-31068 CVE-2024-36293 CVE-2023-43758 CVE-2024-39355 CVE-2024-37020 |
- | 0 | 2 | |
| OpenSSL -- Man-in-the-Middle vulnerability CVE-2024-12797 |
- | 0 | 1 | |
| mozilla -- multiple vulnerabilities CVE-2025-1011 CVE-2025-1013 CVE-2025-1014 CVE-2025-1017 |
DragonFly | 2 | 4 | |
| MariaDB -- DoS vulnerability in InnoDB CVE-2025-21490 |
DragonFly | 2 | 2 | |
| libcaca -- Multiple vulnerabilities CVE-2018-20545 CVE-2018-20546 CVE-2018-20547 CVE-2018-20548 CVE-2018-20549 CVE-2021-3410 CVE-2021-30498 CVE-2021-30499 |
- | 0 | 2 | |
| mozilla -- multiple vulnerabilities CVE-2025-1009 CVE-2025-1010 CVE-2025-1012 CVE-2025-1016 |
DragonFly | 2 | 4 | |
| nginx-devel -- SSL session reuse vulnerability CVE-2025-23419 |
- | 0 | 4 | |
| qt6-webengine -- Multiple vulnerabilities CVE-2024-12693 CVE-2024-12694 CVE-2025-0436 CVE-2025-0437 CVE-2025-0438 CVE-2025-0441 CVE-2025-0443 CVE-2025-0447 CVE-2025-0611 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2025-0762 |
- | 0 | 3 | |
| oauth2-proxy -- Non-linear parsing of case-insensitive content CVE-2024-45338 |
- | 0 | 2 | |
| dendrite -- Server-side request forgery vulnerability CVE-2024-52594 |
- | 0 | 2 | |
| Vaultwarden -- Multiple vulnerabilities CVE-2025-24364 CVE-2025-24365 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2025-0434 CVE-2025-0435 CVE-2025-0436 CVE-2025-0437 CVE-2025-0438 CVE-2025-0439 CVE-2025-0440 CVE-2025-0441 CVE-2025-0442 CVE-2025-0443 CVE-2025-0446 CVE-2025-0447 CVE-2025-0448 |
- | 0 | 3 | |
| chromium -- multiple security fixes CVE-2025-0611 CVE-2025-0612 |
- | 0 | 3 | |
| clamav -- Possbile denial-of-service vulnerability CVE-2025-20128 |
- | 0 | 3 | |
| Gitlab -- Vulnerabilities CVE-2025-0314 CVE-2024-11931 CVE-2024-6324 |
- | 0 | 1 | |
| go -- multiple vulnerabilities CVE-2024-45341 CVE-2024-45336 |
- | 0 | 2 | |
| age -- age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution | - | 0 | 2 | |
| openvpn -- too long a username or password from a client can confuse openvpn servers | - | 0 | 2 | |
| rsync -- Multiple security fixes CVE-2024-12084 CVE-2024-12085 CVE-2024-12086 CVE-2024-12087 CVE-2024-12088 CVE-2024-12747 |
- | 0 | 2 | |
| git -- multiple vulnerabilities CVE-2024-50349 CVE-2024-52006 |
- | 0 | 10 | |
| keycloak -- Multiple security fixes CVE-2024-11734 CVE-2024-11736 |
- | 0 | 2 | |
| asterisk - path traversal CVE-2024-53566 |
- | 0 | 2 | |
| redis,valkey -- Denial-of-service valnerability due to malformed ACL selectors CVE-2024-51741 |
- | 0 | 5 | |
| redis,valkey -- Remote code execution valnerability CVE-2024-46981 |
- | 0 | 7 | |
| Gitlab -- Vulnerabilities CVE-2025-0194 CVE-2024-6324 CVE-2024-12431 CVE-2024-13041 |
- | 0 | 1 | |
| Apache Tomcat -- RCE due to TOCTOU issue in JSP compilation CVE-2024-56337 |
- | 0 | 6 | |
| Vaultwarden -- Admin organization permissions | - | 0 | 1 | |
| chromium -- multiple security fixes CVE-2024-12692 CVE-2024-12693 CVE-2024-12694 CVE-2024-12695 |
- | 0 | 3 | |
| liboqs -- Correctness error in HQC decapsulation CVE-2024-54137 |
- | 0 | 2 | |
| forgejo -- unauthorized user impersonation | - | 0 | 2 | |
| gitea -- Fix misuse of PublicKeyCallback | - | 0 | 2 | |
| gitea -- multiple vulnerabilities | - | 0 | 2 | |
| forgejo -- multiple vulnerabilities | DragonFly | 1 | 2 | |
| forgejo -- multiple vulnerabilities | DragonFly | 1 | 1 | |
| gitea -- multiple vulnerabilities | - | 0 | 2 | |
| zeek -- potential DoS vulnerability | - | 0 | 1 | |
| py-matrix-synapse -- multiple vulnerabilities in versions prior to 1.120.1 CVE-2024-52805 CVE-2024-52815 CVE-2024-53863 CVE-2024-53867 CVE-2024-37302 CVE-2024-37303 |
- | 0 | 1 | |
| Gitlab -- Vulnerabilities CVE-2024-11274 CVE-2024-8233 CVE-2024-9387 CVE-2024-8647 CVE-2024-8179 CVE-2024-8116 CVE-2024-8650 CVE-2024-9367 CVE-2024-12292 CVE-2024-12292 CVE-2024-10043 |
- | 0 | 1 | |
| chromium -- multiple security fixes CVE-2024-12053 |
- | 0 | 3 | |
| chromium -- multiple security fixes CVE-2024-12381 CVE-2024-12382 |
- | 0 | 3 | |
| firefox -- multiple vulnerabilities CVE-2024-11692 CVE-2024-11696 CVE-2024-11697 CVE-2024-11699 |
DragonFly | 2 | 4 | |
| qt6-webengine -- Multiple vulnerabilities CVE-2024-11110 CVE-2024-11112 CVE-2024-11114 CVE-2024-11116 CVE-2024-11117 |
- | 0 | 1 | |
| gstreamer1-plugins -- multiple vulnerabilities CVE-2024-47542 CVE-2024-47600 CVE-2024-47541 |
- | 0 | 2 | |
| gstreamer1-plugins-good -- multiple vulnerabilities CVE-2024-47537 CVE-2024-47598 CVE-2024-47539 CVE-2024-47543 CVE-2024-47545 CVE-2024-47544 CVE-2024-47597 CVE-2024-47546 CVE-2024-47606 CVE-2024-47596 CVE-2024-47540 CVE-2024-47602 CVE-2024-47601 CVE-2024-47603 CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 CVE-2024-47835 CVE-2024-47834 |
- | 0 | 2 | |
| gstreamer1-plugins-gdkpixbuf -- NULL-pointer dereference CVE-2024-47613 |
- | 0 | 2 | |
| gstreamer1-plugins-jpeg -- NULL-pointer dereferences in JPEG decoder CVE-2024-47599 |
- | 0 | 2 | |
| gstreamer1-plugins-ogg -- Out-of-bounds write in Ogg demuxer CVE-2024-47615 |
- | 0 | 2 | |
| gstreamer1-plugins-opus -- Stack buffer-overflow in Opus decoder CVE-2024-47607 |
- | 0 | 2 | |
| gstreamer1-plugins-vorbis -- Stack buffer-overflow in Vorbis decoder CVE-2024-47538 |
- | 0 | 2 | |
| jenkins -- Denial of service vulnerability in bundled json-lib CVE-2024-47855 |
- | 0 | 4 | |
| Gitlab -- vulnerabilities CVE-2024-8114 CVE-2024-8237 CVE-2024-11669 CVE-2024-8177 CVE-2024-11828 CVE-2024-11668 |
- | 0 | 1 | |
| keycloak -- Multiple security fixes CVE-2021-9666 CVE-2021-10039 CVE-2021-10270 CVE-2021-10451 CVE-2021-10492 |
- | 0 | 2 | |
| chromium -- multiple security fixes CVE-2024-11395 |
- | 0 | 3 | |
| qt6-webengine -- Multiple vulnerabilities CVE-2024-9120 CVE-2024-9122 CVE-2024-9123 CVE-2024-9369 CVE-2024-9602 CVE-2024-9603 CVE-2024-9965 CVE-2024-9966 CVE-2024-10229 CVE-2024-10230 CVE-2024-10231 CVE-2024-10487 CVE-2024-10827 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 |
- | 0 | 1 | |
| qt5-webengine -- Use after free in Serial CVE-2024-10827 |
- | 0 | 3 | |
| xorg server -- _XkbSetCompatMap vulnerability CVE-2024-9632 |
- | 0 | 2 | |
| Vaultwarden -- Multiple vulnerabilities | - | 0 | 1 | |
| mongodb -- Buffer over-reads in MongoDB Server CVE-2024-10921 |
- | 0 | 2 | |
| chromium -- multiple security fixes CVE-2024-11110 CVE-2024-11111 CVE-2024-11112 CVE-2024-11113 CVE-2024-11114 CVE-2024-11115 CVE-2024-11116 CVE-2024-11117 |
- | 0 | 3 | |
| Vaultwarden -- Multiple vulnerabilities | - | 0 | 1 | |
| PostgreSQL -- SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 |
- | 0 | 8 | |
| Gitlab -- vulnerabilities CVE-2024-9693 CVE-2024-7404 CVE-2024-8648 CVE-2024-8180 CVE-2024-10240 |
- | 0 | 1 | |
| PostgreSQL -- PostgreSQL row security below e.g. subqueries disregards user ID changes CVE-2024-10976 |
- | 0 | 8 | |
| PostgreSQL -- PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 |
- | 0 | 8 | |
| PostgreSQL -- libpq retains an error message from man-in-the-middle CVE-2024-10977 |
- | 0 | 9 | |
| icinga2 -- TLS Certificate Validation Bypass CVE-2024-49369 |
- | 0 | 1 | |
| Matrix clients -- mxc uri validation in js sdk CVE-2024-50336 |
- | 0 | 4 | |
| element-web -- several vulnerabilities CVE-2024-51749 CVE-2024-51750 |
- | 0 | 2 | |
| x11vnc -- access to shared memory segments CVE-2020-29074 |
- | 0 | 2 | |
| lrzsz -- Integer overflow in zmodem, crash and information leak CVE-2018-10195 |
NetBSD | 1 | 2 | |
| gstreamer1-rtsp-server -- Potential Denial-of-Service (DoS) with specially crafted client requests CVE-2024-44331 |
- | 0 | 2 | |
| chromium -- multiple security fixes CVE-2024-10826 CVE-2024-10827 |
- | 0 | 3 | |
| libqb -- Buffer overflow CVE-2023-39976 |
DragonFly | 1 | 1 | |
| chromium -- multiple security fixes CVE-2024-10487 CVE-2024-10488 |
- | 0 | 3 | |
| qt5-webengine -- Multiple vulnerabilities CVE-2024-4761 CVE-2024-5158 CVE-2024-7532 CVE-2024-7965 CVE-2024-7967 CVE-2024-7971 CVE-2024-8198 CVE-2024-8636 CVE-2024-9123 CVE-2024-9602 CVE-2024-9603 CVE-2024-10229 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 |
- | 0 | 3 | |
| keycloak -- Missing server identity checks when sending mails via SMTPS CVE-2021-44549 |
- | 0 | 2 | |
| librewolf -- Undefined behavior in selection node cache CVE-2024-9936 |
- | 0 | 1 | |
| hwloc2 -- Denial of service or other unspecified impacts CVE-2022-47022 |
- | 0 | 2 | |
| forgejo -- multiple vulnerabilities | DragonFly | 1 | 2 | |
| chromium -- multiple security fixes CVE-2024-9954 CVE-2024-9955 CVE-2024-9956 CVE-2024-9957 CVE-2024-9958 CVE-2024-9959 CVE-2024-9960 CVE-2024-9961 CVE-2024-9962 CVE-2024-9963 CVE-2024-9964 CVE-2024-9965 CVE-2024-9966 |
- | 0 | 3 | |
| halibut -- Segmentation fault, denial of service or possibly other unspecified impact via a crafted text document CVE-2021-42612 CVE-2021-42613 CVE-2021-42614 |
- | 0 | 2 | |
| tnef -- Invalid read and write operations, controlled by an attacker CVE-2017-6307 CVE-2017-6308 CVE-2017-6309 CVE-2017-6310 |
- | 0 | 2 | |
| tnef -- An attacker may be able to write to the victim's .ssh/authorized_keys file via an e-mail message CVE-2019-18849 |
- | 0 | 2 | |
| chromium -- multiple security fixes CVE-2024-10229 CVE-2024-10230 CVE-2024-10231 |
- | 0 | 3 |