The pre-build advisory scan of 2026-10-11 (NVD, OSV, the Debian security tracker and CISA KEV; the project's matcher at revision 28) names 281 shipped packages in 3,172 advisory–package pairs: 351 critical, 1,390 high, 1,180 medium, 160 low, 91 unscored. An advisory's score is its published severity (NVD CVSS base score, v3.x or v4), not proof that this build is affected; where the project's readers found a package not affected, the news entry says so. One row per package, the worst open pair first; `on the image` marks the packages a default installation carries.
| package | shipped version | tier | on the image | pairs | critical | high | medium | low | advisories (severity, CVSS) |
|---|---|---|---|---|---|---|---|---|---|
anyio | 4.14.2 | ai | 3 | 1 | 1 | 1 | 0 | CVE-2026-63374 (critical, 9.3); CVE-2026-63349 (high, 7.0); CVE-2026-64847 (medium, 6.8) | |
apache-httpd | 2.4.67 | extra | 41 | 6 | 21 | 10 | 4 | CVE-2026-29167 (critical, 9.8); CVE-2026-42535 (critical, 9.1); CVE-2026-44631 (critical, 9.8); CVE-2026-56154 (critical, 9.8); CVE-2026-57941 (critical, 9.8); CVE-2026-59797 (critical, 9.8); CVE-2007-0086 (high, 7.8); CVE-2026-34355 (high, 7.5); CVE-2026-34356 (high, 7.5); CVE-2026-42536 (high, 7.5); CVE-2026-44185 (high, 7.3); CVE-2026-44186 (high, 7.3); CVE-2026-46729 (high, 7.5); CVE-2026-47360 (high, 7.5); CVE-2026-48005 (high, 7.5); CVE-2026-48913 (high, 7.3); CVE-2026-49975 (high, 7.5); CVE-2026-56153 (high, 7.5); CVE-2026-56449 (high, 7.5); CVE-2026-59685 (high, 7.5); CVE-2026-63045 (high, 7.5); CVE-2026-63292 (high, 7.5); CVE-2026-63686 (high, 7.5); CVE-2026-63718 (high, 7.5); CVE-2026-73636 (high, 8.1); CVE-2026-73637 (high, 7.3); CVE-2026-93546 (high, 8.8); CVE-2003-1307 (medium, 4.3); CVE-2003-1580 (medium, 4.3); CVE-2007-1743 (medium, 4.4); CVE-2007-3303 (medium, 4.9); CVE-2026-29170 (medium, 6.1); CVE-2026-42528 (medium, 4.3); CVE-2026-43951 (medium, 6.5); CVE-2026-44119 (medium, 5.5); CVE-2026-58415 (medium, 5.3); CVE-2026-79768 (medium, 5.3); CVE-2001-1534 (low, 2.1); CVE-2003-1581 (low, 2.6); CVE-2008-0456 (low, 2.6); CVE-2026-42356 (low, 3.7) | |
apr-util | 1.6.3 | extra | 5 | 2 | 3 | 0 | 0 | CVE-2026-32327 (critical, 9.1); CVE-2026-34191 (critical, 9.1); CVE-2025-49506 (high, 7.5); CVE-2026-34501 (high, 7.5); CVE-2026-34502 (high, 7.5) | |
bind-utils | 9.20.19 | base | yes | 33 | 1 | 19 | 13 | 0 | CVE-2026-3593 (critical, 9.8); CVE-2026-11331 (high, 7.5); CVE-2026-11605 (high, 7.5); CVE-2026-11622 (high, 7.5); CVE-2026-11721 (high, 7.5); CVE-2026-12617 (high, 7.5); CVE-2026-13204 (high, 7.5); CVE-2026-13321 (high, 8.6); CVE-2026-1519 (high, 7.5); CVE-2026-19666 (high, 7.5); CVE-2026-19667 (high, 7.5); CVE-2026-3039 (high, 7.5); CVE-2026-3104 (high, 7.5); CVE-2026-5946 (high, 7.5); CVE-2026-5947 (high, 7.5); CVE-2026-76163 (high, 7.5); CVE-2026-77692 (high, 7.5); CVE-2026-80274 (high, 7.5); CVE-2026-81563 (high, 7.5); CVE-2026-81736 (high, 7.5); CVE-2026-10723 (medium, 6.8); CVE-2026-10822 (medium, 6.5); CVE-2026-19033 (medium, 6.5); CVE-2026-19662 (medium, 5.9); CVE-2026-19668 (medium, 5.3); CVE-2026-19941 (medium, 5.9); CVE-2026-3119 (medium, 6.5); CVE-2026-3591 (medium, 5.4); CVE-2026-3592 (medium, 5.3); CVE-2026-5950 (medium, 5.3); CVE-2026-75029 (medium, 5.3); CVE-2026-77119 (medium, 5.9); CVE-2026-78301 (medium, 5.8) |
containerd | 2.2.3 | extra | 14 | 6 | 4 | 4 | 0 | CVE-2026-50195 (critical, 9.9); CVE-2026-53488 (critical, 9.4); CVE-2026-53492 (critical, 9.6); GHSA-33vj-92qq-66hc (critical, 9.6); GHSA-cvxm-645q-p574 (critical, 9.9); GHSA-xhf5-7wjv-pqxp (critical, 9.4); CVE-2026-46680 (high, 7.8); CVE-2026-53489 (high, 8.2); GHSA-fqw6-gf59-qr4w (high, 7.8); GHSA-rgh6-rfwx-v388 (high, 8.2); CVE-2026-47262 (medium, 5.5); GHSA-7jxh-36q5-gcqv (medium, 6.8); GHSA-jpcc-p29g-p8mq (medium, 5.5); GHSA-pg57-6jwg-q645 (medium, 6.9) | |
curl | 8.19.0 | core | yes | 35 | 10 | 18 | 7 | 0 | CVE-2026-10536 (critical, 9.8); CVE-2026-11564 (critical, 9.1); CVE-2026-11856 (critical, 9.8); CVE-2026-18924 (critical, 9.1); CVE-2026-19931 (critical, 9.8); CVE-2026-8924 (critical, 9.1); CVE-2026-8925 (critical, 9.8); CVE-2026-8926 (critical, 9.1); CVE-2026-8927 (critical, 9.1); CVE-2026-9079 (critical, 9.8); CVE-2026-11352 (high, 7.5); CVE-2026-11586 (high, 7.5); CVE-2026-12064 (high, 7.5); CVE-2026-13608 (high, 7.4); CVE-2026-5773 (high, 7.5); CVE-2026-6276 (high, 7.5); CVE-2026-80229 (high, 7.5); CVE-2026-80230 (high, 7.5); CVE-2026-80231 (high, 7.5); CVE-2026-80255 (high, 7.5); CVE-2026-82208 (high, 7.5); CVE-2026-82209 (high, 8.2); CVE-2026-8286 (high, 8.1); CVE-2026-8932 (high, 7.5); CVE-2026-9080 (high, 7.3); CVE-2026-9545 (high, 7.5); CVE-2026-9546 (high, 7.5); CVE-2026-9547 (high, 7.4); CVE-2026-4873 (medium, 5.9); CVE-2026-5545 (medium, 6.5); CVE-2026-6253 (medium, 5.9); CVE-2026-6429 (medium, 5.3); CVE-2026-7009 (medium, 5.3); CVE-2026-7168 (medium, 5.3); CVE-2026-8458 (medium, 6.5) |
erlang | 29.0.3 | extra | 27 | 2 | 20 | 5 | 0 | CVE-2026-55953 (critical, 9.1); CVE-2026-89422 (critical, 9.3); CVE-2009-0130 (high, 7.5); CVE-2026-42792 (high, 7.5); CVE-2026-54890 (high, 8.2); CVE-2026-55737 (high, 7.5); CVE-2026-55951 (high, 8.2); CVE-2026-58227 (high, 8.7); CVE-2026-59250 (high, 8.3); CVE-2026-59251 (high, 8.7); CVE-2026-65634 (high, 8.2); CVE-2026-66357 (high, 8.3); CVE-2026-66835 (high, 8.2); CVE-2026-68956 (high, 7.1); CVE-2026-69664 (high, 8.7); CVE-2026-70399 (high, 8.7); CVE-2026-71380 (high, 8.7); CVE-2026-73270 (high, 8.2); CVE-2026-73276 (high, 8.3); CVE-2026-73812 (high, 8.3); CVE-2026-74835 (high, 8.7); CVE-2026-75538 (high, 8.2); CVE-2026-47078 (medium, 4.8); CVE-2026-59696 (medium, 6.9); CVE-2026-70405 (medium, 6.3); CVE-2026-70409 (medium, 6.3); CVE-2026-74994 (medium, 6.0) | |
exim | 4.99.1 | base | 12 | 3 | 5 | 4 | 0 | CVE-2026-40685 (critical, 9.8); CVE-2026-40687 (critical, 9.1); CVE-2026-45185 (critical, 9.8); CVE-2026-40684 (high, 7.5); CVE-2026-66140 (high, 8.4); CVE-2026-66141 (high, 7.8); CVE-2026-94054 (high, 7.0); CVE-2026-94056 (high, 7.5); CVE-2026-40686 (medium, 5.3); CVE-2026-48840 (medium, 5.3); CVE-2026-94055 (medium, 5.3); CVE-2026-94057 (medium, 5.3) | |
ffmpeg | 8.0.1 | desktop | yes | 69 | 2 | 39 | 25 | 3 | CVE-2026-40962 (critical, 9.8); CVE-2026-75143 (critical, 9.8); CVE-2023-51791 (high, 7.8); CVE-2023-51793 (high, 7.8); CVE-2023-51794 (high, 7.8); CVE-2023-51795 (high, 8.0); CVE-2023-51798 (high, 7.8); CVE-2026-107695 (high, 7.1); CVE-2026-107696 (high, 7.1); CVE-2026-30997 (high, 7.5); CVE-2026-30998 (high, 7.5); CVE-2026-30999 (high, 7.5); CVE-2026-38344 (high, 7.5); CVE-2026-38346 (high, 7.5); CVE-2026-38348 (high, 7.5); CVE-2026-38349 (high, 7.5); CVE-2026-58049 (high, 8.8); CVE-2026-64830 (high, 8.8); CVE-2026-64831 (high, 8.8); CVE-2026-64832 (high, 8.8); CVE-2026-64833 (high, 7.1); CVE-2026-64834 (high, 8.7); CVE-2026-64835 (high, 8.8); CVE-2026-65703 (high, 8.5); CVE-2026-65704 (high, 7.8); CVE-2026-65705 (high, 7.8); CVE-2026-65706 (high, 8.5); CVE-2026-66036 (high, 8.8); CVE-2026-66037 (high, 7.1); CVE-2026-66038 (high, 7.1); CVE-2026-66039 (high, 8.8); CVE-2026-66040 (high, 8.8); CVE-2026-66041 (high, 8.8); CVE-2026-70628 (high, 8.5); CVE-2026-70632 (high, 8.5); CVE-2026-75141 (high, 8.5); CVE-2026-75142 (high, 8.5); CVE-2026-75144 (high, 8.5); CVE-2026-75146 (high, 8.1); CVE-2026-75147 (high, 7.1); CVE-2026-8461 (high, 8.8); CVE-2023-51797 (medium, 6.7); CVE-2025-12343 (medium, 5.5); CVE-2025-22921 (medium, 6.5); CVE-2025-69693 (medium, 5.4); CVE-2026-107660 (medium, 6.3); CVE-2026-107675 (medium, 6.0); CVE-2026-107676 (medium, 4.8); CVE-2026-107677 (medium, 5.7); CVE-2026-107678 (medium, 5.7); CVE-2026-107697 (medium, 5.3); CVE-2026-107698 (medium, 5.4); CVE-2026-12706 (medium, 6.5); CVE-2026-13858 (medium, 6.5); CVE-2026-18393 (medium, 5.4); CVE-2026-38343 (medium, 6.5); CVE-2026-38345 (medium, 6.5); CVE-2026-52295 (medium, 6.2); CVE-2026-6385 (medium, 6.5); CVE-2026-70629 (medium, 6.8); CVE-2026-70630 (medium, 6.8); CVE-2026-70631 (medium, 6.8); CVE-2026-75145 (medium, 5.8); CVE-2026-90815 (medium, 6.3); CVE-2026-90816 (medium, 5.3); CVE-2026-96611 (medium, 6.9); CVE-2023-51796 (low, 3.6); CVE-2026-52296 (low, 2.9); CVE-2026-52297 (low, 2.9) |
firefox | 140.9.0esr | extra | yes | 215 | 63 | 115 | 37 | 0 | CVE-2026-100770 (critical, 9.6); CVE-2026-100775 (critical, 9.6); CVE-2026-100778 (critical, 9.6); CVE-2026-100781 (critical, 9.6); CVE-2026-100786 (critical, 9.6); CVE-2026-100811 (critical, 9.6); CVE-2026-100818 (critical, 9.6); CVE-2026-100819 (critical, 9.6); CVE-2026-12294 (critical, 9.6); CVE-2026-12295 (critical, 9.6); CVE-2026-12296 (critical, 9.6); CVE-2026-12297 (critical, 9.6); CVE-2026-12304 (critical, 9.1); CVE-2026-12315 (critical, 9.1); CVE-2026-16349 (critical, 9.8); CVE-2026-16350 (critical, 9.8); CVE-2026-16351 (critical, 9.8); CVE-2026-16352 (critical, 9.8); CVE-2026-16353 (critical, 9.8); CVE-2026-16355 (critical, 9.8); CVE-2026-16356 (critical, 9.8); CVE-2026-16357 (critical, 9.8); CVE-2026-16358 (critical, 9.8); CVE-2026-16359 (critical, 9.1); CVE-2026-16360 (critical, 9.8); CVE-2026-16361 (critical, 9.8); CVE-2026-16363 (critical, 9.8); CVE-2026-16368 (critical, 9.8); CVE-2026-16369 (critical, 9.8); CVE-2026-16375 (critical, 9.8); CVE-2026-16377 (critical, 9.8); CVE-2026-16381 (critical, 9.1); CVE-2026-16383 (critical, 9.8); CVE-2026-16387 (critical, 9.8); CVE-2026-16390 (critical, 9.1); CVE-2026-16412 (critical, 9.8); CVE-2026-5731 (critical, 9.8); CVE-2026-5734 (critical, 9.8); CVE-2026-6748 (critical, 9.8); CVE-2026-6771 (critical, 9.8); CVE-2026-7321 (critical, 9.6); CVE-2026-74936 (critical, 9.8); CVE-2026-74940 (critical, 9.8); CVE-2026-74943 (critical, 9.8); CVE-2026-74944 (critical, 9.8); CVE-2026-74959 (critical, 9.1); CVE-2026-74964 (critical, 9.8); CVE-2026-74987 (critical, 9.8); CVE-2026-74990 (critical, 9.8); CVE-2026-75874 (critical, 10.0); CVE-2026-8091 (critical, 9.8); CVE-2026-8094 (critical, 9.8); CVE-2026-8401 (critical, 9.8); CVE-2026-84119 (critical, 9.6); CVE-2026-84121 (critical, 9.6); CVE-2026-84143 (critical, 9.8); CVE-2026-8950 (critical, 9.3); CVE-2026-8953 (critical, 9.6); CVE-2026-8956 (critical, 9.8); CVE-2026-8959 (critical, 9.6); CVE-2026-92018 (critical, 9.6); CVE-2026-92032 (critical, 9.6); CVE-2026-92035 (critical, 9.6); CVE-2023-5217 (high, 8.8); CVE-2026-100756 (high, 8.1); CVE-2026-100767 (high, 8.8); CVE-2026-100769 (high, 8.8); CVE-2026-100771 (high, 8.1); CVE-2026-100772 (high, 8.8); CVE-2026-100773 (high, 8.8); CVE-2026-100774 (high, 8.8); CVE-2026-100776 (high, 8.8); CVE-2026-100777 (high, 8.8); CVE-2026-100779 (high, 8.8); CVE-2026-100780 (high, 8.8); CVE-2026-100782 (high, 8.8); CVE-2026-100784 (high, 8.8); CVE-2026-100785 (high, 8.8); CVE-2026-100820 (high, 8.8); CVE-2026-100832 (high, 8.8); CVE-2026-12289 (high, 8.8); CVE-2026-12290 (high, 8.1); CVE-2026-12291 (high, 8.8); CVE-2026-12292 (high, 8.1); CVE-2026-12298 (high, 7.5); CVE-2026-12299 (high, 7.5); CVE-2026-12305 (high, 7.5); CVE-2026-12310 (high, 7.5); CVE-2026-12312 (high, 7.5); CVE-2026-12314 (high, 7.5); CVE-2026-12324 (high, 7.3); CVE-2026-12327 (high, 8.1); CVE-2026-12328 (high, 8.1); CVE-2026-12329 (high, 7.5); CVE-2026-16354 (high, 7.5); CVE-2026-16362 (high, 8.8); CVE-2026-16365 (high, 8.8); CVE-2026-16371 (high, 8.8); CVE-2026-16374 (high, 7.5); CVE-2026-16379 (high, 8.8); CVE-2026-16391 (high, 7.5); CVE-2026-16396 (high, 8.8); CVE-2026-16405 (high, 7.5); CVE-2026-5732 (high, 8.8); CVE-2026-6746 (high, 7.5); CVE-2026-6747 (high, 7.5); CVE-2026-6749 (high, 7.5); CVE-2026-6750 (high, 8.8); CVE-2026-6751 (high, 7.5); CVE-2026-6752 (high, 7.5); CVE-2026-6753 (high, 7.5); CVE-2026-6754 (high, 7.5); CVE-2026-6759 (high, 7.5); CVE-2026-6761 (high, 8.8); CVE-2026-6766 (high, 7.5); CVE-2026-6769 (high, 8.8); CVE-2026-6772 (high, 7.5); CVE-2026-6776 (high, 7.8); CVE-2026-6785 (high, 7.5); CVE-2026-6786 (high, 7.5); CVE-2026-7320 (high, 7.5); CVE-2026-7322 (high, 8.8); CVE-2026-7323 (high, 7.5); CVE-2026-74934 (high, 7.5); CVE-2026-74935 (high, 8.8); CVE-2026-74939 (high, 8.8); CVE-2026-74941 (high, 8.8); CVE-2026-74942 (high, 8.8); CVE-2026-74946 (high, 8.8); CVE-2026-74949 (high, 8.8); CVE-2026-74953 (high, 8.8); CVE-2026-74957 (high, 8.1); CVE-2026-74960 (high, 8.1); CVE-2026-74962 (high, 8.1); CVE-2026-74965 (high, 8.8); CVE-2026-74969 (high, 8.8); CVE-2026-74983 (high, 8.1); CVE-2026-8090 (high, 7.5); CVE-2026-8092 (high, 8.1); CVE-2026-8388 (high, 7.5); CVE-2026-8391 (high, 7.5); CVE-2026-84131 (high, 8.8); CVE-2026-84145 (high, 7.5); CVE-2026-8946 (high, 7.5); CVE-2026-8947 (high, 7.5); CVE-2026-8949 (high, 7.5); CVE-2026-8954 (high, 7.5); CVE-2026-8955 (high, 8.8); CVE-2026-8957 (high, 8.8); CVE-2026-8958 (high, 8.6); CVE-2026-8962 (high, 8.1); CVE-2026-8968 (high, 7.5); CVE-2026-8970 (high, 8.8); CVE-2026-8974 (high, 8.8); CVE-2026-8975 (high, 8.8); CVE-2026-92006 (high, 8.8); CVE-2026-92007 (high, 8.8); CVE-2026-92008 (high, 8.8); CVE-2026-92009 (high, 8.8); CVE-2026-92010 (high, 8.8); CVE-2026-92011 (high, 8.8); CVE-2026-92012 (high, 8.8); CVE-2026-92013 (high, 8.8); CVE-2026-92014 (high, 8.8); CVE-2026-92015 (high, 8.8); CVE-2026-92016 (high, 8.8); CVE-2026-92017 (high, 8.8); CVE-2026-92019 (high, 8.1); CVE-2026-92020 (high, 8.8); CVE-2026-92021 (high, 8.8); CVE-2026-92022 (high, 8.8); CVE-2026-92023 (high, 8.8); CVE-2026-92024 (high, 8.8); CVE-2026-92025 (high, 8.8); CVE-2026-92026 (high, 8.8); CVE-2026-92027 (high, 8.8); CVE-2026-92028 (high, 8.8); CVE-2026-92029 (high, 8.8); CVE-2019-12383 (medium, 4.3); CVE-2026-100783 (medium, 4.3); CVE-2026-12302 (medium, 6.5); CVE-2026-12306 (medium, 5.3); CVE-2026-12307 (medium, 5.3); CVE-2026-12308 (medium, 5.3); CVE-2026-12309 (medium, 6.5); CVE-2026-12311 (medium, 4.7); CVE-2026-12313 (medium, 4.7); CVE-2026-12325 (medium, 6.5); CVE-2026-12330 (medium, 5.4); CVE-2026-15718 (medium, 4.3); CVE-2026-15719 (medium, 5.4); CVE-2026-6757 (medium, 6.3); CVE-2026-6762 (medium, 6.3); CVE-2026-6763 (medium, 6.5); CVE-2026-6764 (medium, 6.5); CVE-2026-6765 (medium, 5.3); CVE-2026-6767 (medium, 5.3); CVE-2026-6770 (medium, 6.5); CVE-2026-74945 (medium, 6.5); CVE-2026-74948 (medium, 6.5); CVE-2026-74963 (medium, 5.4); CVE-2026-74967 (medium, 5.4); CVE-2026-74971 (medium, 4.3); CVE-2026-74972 (medium, 4.3); CVE-2026-74973 (medium, 4.2); CVE-2026-74974 (medium, 5.4); CVE-2026-74976 (medium, 6.5); CVE-2026-84120 (medium, 5.4); CVE-2026-84122 (medium, 5.4); CVE-2026-84124 (medium, 5.4); CVE-2026-8961 (medium, 6.5); CVE-2026-92005 (medium, 5.3); CVE-2026-92030 (medium, 5.4); CVE-2026-92031 (medium, 6.5); CVE-2026-96869 (medium, 4.3) |
freerdp | 3.22.0 | desktop | yes | 101 | 26 | 57 | 15 | 3 | CVE-2026-25952 (critical, 9.8); CVE-2026-25953 (critical, 9.8); CVE-2026-25955 (critical, 9.8); CVE-2026-25959 (critical, 9.8); CVE-2026-25997 (critical, 9.8); CVE-2026-31806 (critical, 9.8); CVE-2026-31883 (critical, 9.8); CVE-2026-31885 (critical, 9.4); CVE-2026-31897 (critical, 9.1); CVE-2026-45700 (critical, 9.8); CVE-2026-55191 (critical, 9.8); CVE-2026-55194 (critical, 9.8); CVE-2026-57156 (critical, 9.8); CVE-2026-57158 (critical, 9.1); CVE-2026-63633 (critical, 9.8); CVE-2026-64620 (critical, 9.8); CVE-2026-64621 (critical, 9.3); CVE-2026-66402 (critical, 9.8); CVE-2026-67289 (critical, 9.8); CVE-2026-67292 (critical, 9.3); CVE-2026-67293 (critical, 9.3); CVE-2026-67294 (critical, 9.3); CVE-2026-67305 (critical, 9.4); CVE-2026-68579 (critical, 9.6); CVE-2026-73242 (critical, 9.1); CVE-2026-91949 (critical, 9.3); CVE-2026-25941 (high, 8.1); CVE-2026-25942 (high, 7.5); CVE-2026-25954 (high, 7.5); CVE-2026-26955 (high, 8.8); CVE-2026-26965 (high, 8.8); CVE-2026-26986 (high, 7.5); CVE-2026-27950 (high, 7.5); CVE-2026-27951 (high, 7.5); CVE-2026-29774 (high, 8.2); CVE-2026-29775 (high, 8.2); CVE-2026-31884 (high, 7.5); CVE-2026-33982 (high, 8.1); CVE-2026-33983 (high, 7.5); CVE-2026-33984 (high, 7.5); CVE-2026-33985 (high, 7.1); CVE-2026-33986 (high, 7.5); CVE-2026-33987 (high, 7.1); CVE-2026-40033 (high, 8.8); CVE-2026-44420 (high, 8.8); CVE-2026-44421 (high, 8.8); CVE-2026-44422 (high, 8.8); CVE-2026-55192 (high, 8.2); CVE-2026-55193 (high, 8.8); CVE-2026-55564 (high, 7.1); CVE-2026-55648 (high, 7.5); CVE-2026-55827 (high, 8.8); CVE-2026-63652 (high, 7.1); CVE-2026-64624 (high, 8.5); CVE-2026-67288 (high, 8.7); CVE-2026-67290 (high, 8.7); CVE-2026-67291 (high, 8.7); CVE-2026-67296 (high, 8.7); CVE-2026-67297 (high, 8.7); CVE-2026-67298 (high, 8.7); CVE-2026-67299 (high, 8.7); CVE-2026-67300 (high, 8.7); CVE-2026-67301 (high, 8.7); CVE-2026-67304 (high, 8.7); CVE-2026-68580 (high, 7.7); CVE-2026-73241 (high, 8.3); CVE-2026-85089 (high, 7.1); CVE-2026-91945 (high, 7.1); CVE-2026-91946 (high, 7.1); CVE-2026-91947 (high, 7.7); CVE-2026-91948 (high, 7.7); CVE-2026-91950 (high, 7.1); CVE-2026-91951 (high, 7.1); CVE-2026-91952 (high, 7.1); CVE-2026-91953 (high, 7.1); CVE-2026-91954 (high, 7.1); CVE-2026-91955 (high, 8.2); CVE-2026-91956 (high, 7.1); CVE-2026-91959 (high, 7.1); CVE-2026-91960 (high, 7.1); CVE-2026-91961 (high, 7.1); CVE-2026-91963 (high, 7.1); CVE-2026-91964 (high, 8.8); CVE-2026-26271 (medium, 5.5); CVE-2026-27015 (medium, 6.5); CVE-2026-33952 (medium, 6.5); CVE-2026-33977 (medium, 6.9); CVE-2026-33995 (medium, 5.3); CVE-2026-40254 (medium, 6.1); CVE-2026-57157 (medium, 6.5); CVE-2026-63117 (medium, 6.5); CVE-2026-67295 (medium, 6.3); CVE-2026-67302 (medium, 6.5); CVE-2026-67303 (medium, 5.3); CVE-2026-67306 (medium, 5.4); CVE-2026-85090 (medium, 5.4); CVE-2026-91958 (medium, 6.9); CVE-2026-91962 (medium, 6.3); CVE-2026-29776 (low, 3.1); CVE-2026-66401 (low, 2.4); CVE-2026-91957 (low, 3.1) |
gawk | 5.3.2 | core | yes | 4 | 2 | 2 | 0 | 0 | CVE-2026-40468 (critical, 9.1); CVE-2026-40469 (critical, 9.1); CVE-2026-40467 (high, 7.5); CVE-2026-40553 (high, 7.5) |
gh | 2.95.0 | extra | yes | 10 | 1 | 0 | 4 | 5 | CVE-2026-48501 (critical, 9.1); CVE-2026-59831 (medium, 4.4); CVE-2026-64653 (medium, 5.1); CVE-2026-64654 (medium, 5.3); GHSA-2m9h-r57g-45pj (medium, 6.3); CVE-2026-45803 (low, 3.5); CVE-2026-64652 (low, 3.3); CVE-2026-64655 (low, 2.1); CVE-2026-72924 (low, 2.1); GHSA-crc3-h8v6-qh57 (low, 3.5) |
ghostscript | 10.06.0 | desktop | yes | 3 | 1 | 1 | 1 | 0 | CVE-2026-39919 (critical, 9.8); CVE-2026-101258 (high, 7.8); CVE-2026-103226 (medium, 6.3) |
gimp | 3.2.4 | extra | yes | 47 | 1 | 24 | 18 | 1 | CVE-2026-59090 (critical, 9.9); CVE-2025-8672 (high, 7.8); CVE-2026-106062 (high, 7.8); CVE-2026-18301 (high, 7.8); CVE-2026-18302 (high, 7.8); CVE-2026-18303 (high, 7.8); CVE-2026-18304 (high, 7.8); CVE-2026-18305 (high, 7.8); CVE-2026-18306 (high, 7.8); CVE-2026-18307 (high, 7.8); CVE-2026-18308 (high, 7.8); CVE-2026-18309 (high, 7.8); CVE-2026-58379 (high, 7.3); CVE-2026-58380 (high, 7.8); CVE-2026-58384 (high, 7.8); CVE-2026-59087 (high, 7.8); CVE-2026-59091 (high, 7.8); CVE-2026-66758 (high, 7.8); CVE-2026-66759 (high, 7.1); CVE-2026-78465 (high, 7.0); CVE-2026-90947 (high, 7.8); CVE-2026-90948 (high, 7.8); CVE-2026-90949 (high, 7.8); CVE-2026-92248 (high, 7.8); CVE-2026-97185 (high, 7.8); CVE-2026-106061 (medium, 5.5); CVE-2026-106063 (medium, 6.3); CVE-2026-106064 (medium, 6.3); CVE-2026-106065 (medium, 6.3); CVE-2026-106066 (medium, 6.3); CVE-2026-106067 (medium, 6.3); CVE-2026-108093 (medium, 5.5); CVE-2026-59088 (medium, 5.5); CVE-2026-59089 (medium, 5.5); CVE-2026-66757 (medium, 5.5); CVE-2026-78475 (medium, 6.1); CVE-2026-79902 (medium, 5.5); CVE-2026-80101 (medium, 4.4); CVE-2026-82324 (medium, 6.1); CVE-2026-82328 (medium, 6.1); CVE-2026-82330 (medium, 6.1); CVE-2026-82343 (medium, 6.1); CVE-2026-96545 (medium, 4.4); CVE-2026-96546 (low, 2.5); CVE-2026-62439 (unscored); CVE-2026-96543 (unscored); CVE-2026-96544 (unscored) |
glib2 | 2.88.1 | core | yes | 5 | 1 | 2 | 2 | 0 | CVE-2026-58016 (critical, 9.1); CVE-2012-0039 (high, 7.5); CVE-2026-16118 (high, 7.1); CVE-2026-15588 (medium, 5.3); CVE-2026-86469 (medium, 5.3) |
glibc | 2.43 | core | yes | 14 | 2 | 7 | 5 | 0 | CVE-2019-1010022 (critical, 9.8); CVE-2026-5450 (critical, 9.8); CVE-2018-20796 (high, 7.5); CVE-2019-1010023 (high, 8.8); CVE-2019-9192 (high, 7.5); CVE-2026-4046 (high, 7.5); CVE-2026-4437 (high, 7.5); CVE-2026-5435 (high, 7.3); CVE-2026-5928 (high, 7.5); CVE-2010-4756 (medium, 4.0); CVE-2019-1010024 (medium, 5.3); CVE-2019-1010025 (medium, 5.3); CVE-2026-4438 (medium, 5.4); CVE-2026-6238 (medium, 6.5) |
gnutls | 3.8.12 | core | yes | 20 | 4 | 10 | 3 | 2 | CVE-2026-33845 (critical, 9.1); CVE-2026-42010 (critical, 9.8); CVE-2026-88647 (critical, 9.1); CVE-2026-95210 (critical, 9.1); CVE-2026-33846 (high, 7.5); CVE-2026-3833 (high, 7.4); CVE-2026-42009 (high, 7.5); CVE-2026-42011 (high, 7.4); CVE-2026-42012 (high, 7.1); CVE-2026-42013 (high, 8.2); CVE-2026-5260 (high, 8.2); CVE-2026-67693 (high, 7.5); CVE-2026-95184 (high, 7.5); CVE-2026-95209 (high, 7.5); CVE-2011-3389 (medium, 4.3); CVE-2026-42014 (medium, 6.6); CVE-2026-42015 (medium, 5.3); CVE-2026-3832 (low, 3.7); CVE-2026-5419 (low, 3.7); CVE-2026-88648 (unscored) |
gst-plugins-good | 1.28.1 | desktop | yes | 16 | 1 | 8 | 4 | 1 | CVE-2026-46470 (critical, 9.1); CVE-2026-18295 (high, 7.8); CVE-2026-18296 (high, 7.8); CVE-2026-18297 (high, 7.8); CVE-2026-18298 (high, 7.8); CVE-2026-18299 (high, 7.8); CVE-2026-18649 (high, 7.5); CVE-2026-5056 (high, 7.8); CVE-2026-53705 (high, 7.6); CVE-2026-46469 (medium, 5.5); CVE-2026-73433 (medium, 6.6); CVE-2026-73434 (medium, 6.1); CVE-2026-88914 (medium, 4.4); CVE-2026-17072 (low, 3.3); CVE-2026-39043 (unscored); CVE-2026-39044 (unscored) |
haproxy | 3.2.19 | extra | 3 | 1 | 1 | 1 | 0 | CVE-2026-55203 (critical, 9.1); CVE-2026-55204 (high, 8.7); CVE-2026-33555 (medium, 5.8) | |
hugo | 0.125.4 | extra | 27 | 3 | 6 | 18 | 0 | CVE-2026-75926 (critical, 9.3); CVE-2026-89258 (critical, 9.3); CVE-2026-89259 (critical, 9.8); CVE-2026-100690 (high, 8.7); CVE-2026-100692 (high, 8.7); CVE-2026-100693 (high, 8.6); CVE-2026-10582 (high, 8.3); CVE-2026-44301 (high, 8.1); GHSA-x597-9fr4-5857 (high, 8.1); CVE-2024-55601 (medium, 5.3); CVE-2026-100691 (medium, 5.4); CVE-2026-100694 (medium, 6.1); CVE-2026-10618 (medium, 5.4); CVE-2026-35166 (medium, 5.4); CVE-2026-50133 (medium, 6.1); CVE-2026-50134 (medium, 6.3); CVE-2026-50135 (medium, 6.9); CVE-2026-58402 (medium, 5.4); CVE-2026-58403 (medium, 6.5); CVE-2026-58404 (medium, 6.8); GHSA-c2xf-9v2r-r2rx (medium, 5.3); GHSA-c3wq-j5vh-68rc (medium, 6.5); GHSA-c54g-xjwj-8g82 (medium, 6.1); GHSA-fw87-fv5r-9fpw (medium, 6.9); GHSA-mcv8-8m8x-48pg (medium, 5.4); GHSA-q76j-gcg9-vxc6 (medium, 5.4); GHSA-vxgm-5rmg-5w8g (medium, 6.3) | |
imagemagick | 7.1.2-13 | desktop | yes | 206 | 15 | 60 | 118 | 13 | CVE-2023-34152 (critical, 9.8); CVE-2025-57807 (critical, 9.8); CVE-2026-22770 (critical, 9.8); CVE-2026-23876 (critical, 9.8); CVE-2026-25897 (critical, 9.8); CVE-2026-25898 (critical, 9.1); CVE-2026-25968 (critical, 9.8); CVE-2026-25971 (critical, 9.8); CVE-2026-25983 (critical, 9.8); CVE-2026-25986 (critical, 9.8); CVE-2026-25987 (critical, 9.1); CVE-2026-26284 (critical, 9.1); CVE-2026-56367 (critical, 9.1); CVE-2026-56372 (critical, 9.1); CVE-2026-56379 (critical, 9.2); CVE-2025-55004 (high, 7.6); CVE-2025-55154 (high, 8.8); CVE-2025-55212 (high, 7.5); CVE-2025-55298 (high, 8.8); CVE-2025-57803 (high, 8.8); CVE-2025-62171 (high, 7.5); CVE-2025-66628 (high, 7.5); CVE-2025-68618 (high, 7.5); CVE-2025-69204 (high, 7.5); CVE-2026-23952 (high, 7.5); CVE-2026-24481 (high, 7.5); CVE-2026-24485 (high, 7.5); CVE-2026-25794 (high, 8.2); CVE-2026-25795 (high, 7.5); CVE-2026-25796 (high, 7.5); CVE-2026-25798 (high, 7.5); CVE-2026-25799 (high, 7.5); CVE-2026-25965 (high, 8.6); CVE-2026-25966 (high, 7.8); CVE-2026-25967 (high, 7.5); CVE-2026-25969 (high, 7.5); CVE-2026-25970 (high, 7.5); CVE-2026-25985 (high, 7.5); CVE-2026-25988 (high, 7.5); CVE-2026-25989 (high, 7.5); CVE-2026-26066 (high, 7.5); CVE-2026-26283 (high, 7.5); CVE-2026-27798 (high, 7.1); CVE-2026-28494 (high, 7.1); CVE-2026-28691 (high, 7.5); CVE-2026-28693 (high, 8.1); CVE-2026-30883 (high, 7.8); CVE-2026-30929 (high, 7.8); CVE-2026-30931 (high, 7.8); CVE-2026-32636 (high, 7.5); CVE-2026-33900 (high, 7.5); CVE-2026-33901 (high, 7.5); CVE-2026-33905 (high, 7.1); CVE-2026-33908 (high, 7.5); CVE-2026-45031 (high, 7.5); CVE-2026-45359 (high, 7.1); CVE-2026-45664 (high, 7.5); CVE-2026-46520 (high, 7.5); CVE-2026-46522 (high, 7.5); CVE-2026-46523 (high, 7.5); CVE-2026-49218 (high, 7.5); CVE-2026-53460 (high, 7.5); CVE-2026-53461 (high, 7.5); CVE-2026-56361 (high, 7.1); CVE-2026-56368 (high, 7.5); CVE-2026-56370 (high, 7.8); CVE-2026-56374 (high, 7.1); CVE-2026-56378 (high, 8.2); CVE-2026-61857 (high, 7.5); CVE-2026-61861 (high, 7.5); CVE-2026-61863 (high, 7.5); CVE-2026-61866 (high, 7.5); CVE-2026-61870 (high, 7.5); CVE-2026-86420 (high, 7.5); CVE-2026-86421 (high, 7.5); CVE-2005-0406 (medium, 5.5); CVE-2008-3134 (medium, 5.0); CVE-2016-8678 (medium, 5.5); CVE-2017-11754 (medium, 6.5); CVE-2017-11755 (medium, 6.5); CVE-2017-7275 (medium, 5.5); CVE-2018-15607 (medium, 6.5); CVE-2025-55005 (medium, 5.5); CVE-2025-55160 (medium, 6.1); CVE-2025-62594 (medium, 5.5); CVE-2025-65955 (medium, 6.1); CVE-2025-68950 (medium, 6.2); CVE-2026-102635 (medium, 6.3); CVE-2026-106564 (medium, 5.3); CVE-2026-106565 (medium, 5.9); CVE-2026-106566 (medium, 4.0); CVE-2026-106567 (medium, 5.9); CVE-2026-106568 (medium, 5.3); CVE-2026-106569 (medium, 5.3); CVE-2026-106570 (medium, 4.3); CVE-2026-106571 (medium, 5.1); CVE-2026-106572 (medium, 5.3); CVE-2026-106573 (medium, 5.3); CVE-2026-106574 (medium, 5.3); CVE-2026-106575 (medium, 5.3); CVE-2026-106576 (medium, 5.3); CVE-2026-106577 (medium, 5.3); CVE-2026-106578 (medium, 5.9); CVE-2026-106579 (medium, 6.2); CVE-2026-106580 (medium, 4.0); CVE-2026-107208 (medium, 5.3); CVE-2026-107209 (medium, 5.9); CVE-2026-107210 (medium, 5.3); CVE-2026-23874 (medium, 5.5); CVE-2026-24484 (medium, 5.3); CVE-2026-25576 (medium, 5.5); CVE-2026-25637 (medium, 5.3); CVE-2026-25638 (medium, 5.3); CVE-2026-25797 (medium, 5.7); CVE-2026-25982 (medium, 6.5); CVE-2026-26983 (medium, 5.3); CVE-2026-27799 (medium, 4.4); CVE-2026-28493 (medium, 6.5); CVE-2026-28686 (medium, 6.8); CVE-2026-28687 (medium, 5.3); CVE-2026-28688 (medium, 5.3); CVE-2026-28689 (medium, 6.3); CVE-2026-28690 (medium, 6.9); CVE-2026-28692 (medium, 4.8); CVE-2026-30935 (medium, 4.4); CVE-2026-30936 (medium, 5.5); CVE-2026-30937 (medium, 6.8); CVE-2026-31853 (medium, 5.7); CVE-2026-32259 (medium, 6.7); CVE-2026-33535 (medium, 5.5); CVE-2026-33536 (medium, 5.1); CVE-2026-33899 (medium, 5.3); CVE-2026-33902 (medium, 5.5); CVE-2026-34238 (medium, 5.5); CVE-2026-40169 (medium, 6.2); CVE-2026-40183 (medium, 5.5); CVE-2026-40310 (medium, 5.5); CVE-2026-40311 (medium, 5.5); CVE-2026-40312 (medium, 6.2); CVE-2026-42050 (medium, 5.5); CVE-2026-42326 (medium, 5.1); CVE-2026-45358 (medium, 5.3); CVE-2026-45624 (medium, 5.1); CVE-2026-46521 (medium, 5.5); CVE-2026-46557 (medium, 6.2); CVE-2026-46559 (medium, 4.0); CVE-2026-46692 (medium, 4.1); CVE-2026-46693 (medium, 4.1); CVE-2026-47165 (medium, 4.1); CVE-2026-47166 (medium, 5.7); CVE-2026-48724 (medium, 5.5); CVE-2026-48733 (medium, 4.7); CVE-2026-48734 (medium, 5.5); CVE-2026-48994 (medium, 5.9); CVE-2026-49219 (medium, 5.5); CVE-2026-53462 (medium, 5.9); CVE-2026-53463 (medium, 4.3); CVE-2026-53464 (medium, 4.0); CVE-2026-53465 (medium, 6.2); CVE-2026-53466 (medium, 6.5); CVE-2026-53467 (medium, 5.3); CVE-2026-55510 (medium, 5.5); CVE-2026-55577 (medium, 5.9); CVE-2026-55594 (medium, 5.3); CVE-2026-55595 (medium, 4.7); CVE-2026-55597 (medium, 5.5); CVE-2026-55628 (medium, 5.5); CVE-2026-56362 (medium, 4.2); CVE-2026-56363 (medium, 4.8); CVE-2026-56365 (medium, 6.3); CVE-2026-56366 (medium, 6.5); CVE-2026-56369 (medium, 6.3); CVE-2026-56371 (medium, 6.9); CVE-2026-56373 (medium, 6.3); CVE-2026-56375 (medium, 4.8); CVE-2026-56376 (medium, 6.3); CVE-2026-56377 (medium, 4.8); CVE-2026-61465 (medium, 6.5); CVE-2026-61858 (medium, 5.3); CVE-2026-61859 (medium, 4.8); CVE-2026-61860 (medium, 6.3); CVE-2026-61868 (medium, 6.3); CVE-2026-61871 (medium, 6.3); CVE-2026-62343 (medium, 4.7); CVE-2026-62363 (medium, 5.0); CVE-2026-62946 (medium, 5.1); CVE-2026-64685 (medium, 5.3); CVE-2026-66011 (medium, 4.8); CVE-2026-86423 (medium, 5.5); CVE-2026-86425 (medium, 5.5); CVE-2026-93587 (medium, 4.8); CVE-2026-93589 (medium, 6.3); CVE-2026-93590 (medium, 6.3); CVE-2026-105083 (low, 3.9); CVE-2026-56364 (low, 1.9); CVE-2026-61464 (low, 1.8); CVE-2026-61862 (low, 2.9); CVE-2026-61864 (low, 2.9); CVE-2026-61865 (low, 2.9); CVE-2026-61867 (low, 2.9); CVE-2026-61869 (low, 2.9); CVE-2026-61872 (low, 2.5); CVE-2026-86422 (low, 3.3); CVE-2026-86424 (low, 2.5); CVE-2026-93586 (low, 2.9); CVE-2026-93588 (low, 3.1) |
influxdb | 3.9.0 | extra | 1 | 1 | 0 | 0 | 0 | CVE-2022-36640 (critical, 9.8) | |
iperf3 | 3.21 | extra | 4 | 2 | 2 | 0 | 0 | CVE-2026-101276 (critical, 9.2); CVE-2026-101283 (critical, 9.2); CVE-2026-102253 (high, 8.7); CVE-2026-71217 (high, 7.5) | |
jinja2 | 3.1.6 | core | yes | 1 | 1 | 0 | 0 | 0 | CVE-2019-8341 (critical, 9.8) |
lib32-glibc | 2.43 | core | yes | 14 | 2 | 7 | 5 | 0 | CVE-2019-1010022 (critical, 9.8); CVE-2026-5450 (critical, 9.8); CVE-2018-20796 (high, 7.5); CVE-2019-1010023 (high, 8.8); CVE-2019-9192 (high, 7.5); CVE-2026-4046 (high, 7.5); CVE-2026-4437 (high, 7.5); CVE-2026-5435 (high, 7.3); CVE-2026-5928 (high, 7.5); CVE-2010-4756 (medium, 4.0); CVE-2019-1010024 (medium, 5.3); CVE-2019-1010025 (medium, 5.3); CVE-2026-4438 (medium, 5.4); CVE-2026-6238 (medium, 6.5) |
lib32-libglvnd | 1.7.0 | desktop | 1 | 1 | 0 | 0 | 0 | CVE-2023-45924 (critical, 9.8) | |
lib32-mesa | 25.3.5 | desktop | 5 | 1 | 1 | 3 | 0 | CVE-2026-40393 (critical, 9.8); CVE-2023-45931 (high, 7.5); CVE-2023-45913 (medium, 6.2); CVE-2023-45919 (medium, 5.3); CVE-2023-45922 (medium, 4.3) | |
lib32-nss | 3.121 | core | 9 | 1 | 7 | 1 | 0 | CVE-2026-16389 (critical, 9.8); CVE-2017-11695 (high, 7.8); CVE-2017-11696 (high, 7.8); CVE-2017-11697 (high, 7.8); CVE-2017-11698 (high, 7.8); CVE-2026-12318 (high, 7.3); CVE-2026-6766 (high, 7.5); CVE-2026-6772 (high, 7.5); CVE-2026-6767 (medium, 5.3) | |
libXfont2 | 2.0.7 | desktop | yes | 5 | 2 | 3 | 0 | 0 | CVE-2026-44950 (critical, 9.5); CVE-2026-59679 (critical, 9.2); CVE-2026-56001 (high, 8.8); CVE-2026-56002 (high, 8.8); CVE-2026-56003 (high, 8.8) |
libarchive | 3.8.6 | core | yes | 8 | 1 | 2 | 3 | 2 | CVE-2026-5121 (critical, 9.8); CVE-2026-14164 (high, 7.5); CVE-2026-4424 (high, 7.5); CVE-2023-30571 (medium, 5.3); CVE-2026-4426 (medium, 6.5); CVE-2026-5745 (medium, 5.5); CVE-2026-15028 (low, 3.9); CVE-2026-16517 (low, 2.9) |
libevent | 2.1.12 | desktop | yes | 8 | 2 | 4 | 2 | 0 | CVE-2026-63382 (critical, 9.2); CVE-2026-63385 (critical, 9.2); CVE-2026-63383 (high, 8.7); CVE-2026-63384 (high, 8.7); CVE-2026-63387 (high, 7.0); CVE-2026-63388 (high, 8.4); CVE-2026-63379 (medium, 6.3); CVE-2026-63381 (medium, 5.8) |
libglvnd | 1.7.0 | desktop | yes | 1 | 1 | 0 | 0 | 0 | CVE-2023-45924 (critical, 9.8) |
libheif | 1.21.2 | desktop | yes | 32 | 2 | 13 | 15 | 2 | CVE-2026-84383 (critical, 9.8); GHSA-26w7-cxv4-gfx2 (critical, 9.0); CVE-2026-32740 (high, 8.8); CVE-2026-32741 (high, 7.1); CVE-2026-32882 (high, 7.1); CVE-2026-41071 (high, 8.1); CVE-2026-47178 (high, 7.8); CVE-2026-47247 (high, 7.5); CVE-2026-48029 (high, 7.1); CVE-2026-50142 (high, 7.5); CVE-2026-62292 (high, 8.7); CVE-2026-84384 (high, 7.5); CVE-2026-84444 (high, 7.4); CVE-2026-84446 (high, 7.5); CVE-2026-84447 (high, 7.5); CVE-2026-32738 (medium, 6.5); CVE-2026-32739 (medium, 6.5); CVE-2026-32814 (medium, 6.5); CVE-2026-41069 (medium, 6.5); CVE-2026-47251 (medium, 6.8); CVE-2026-47254 (medium, 6.1); CVE-2026-47709 (medium, 6.9); CVE-2026-47714 (medium, 6.1); CVE-2026-49271 (medium, 6.5); CVE-2026-62289 (medium, 4.3); CVE-2026-62291 (medium, 5.3); CVE-2026-62377 (medium, 4.3); CVE-2026-84448 (medium, 4.0); CVE-2026-84450 (medium, 4.3); CVE-2026-84451 (medium, 6.5); CVE-2026-3949 (low, 3.3); CVE-2026-3950 (low, 3.3) |
libinput | 1.31.0 | desktop | yes | 3 | 1 | 1 | 1 | 0 | CVE-2026-50292 (critical, 9.8); CVE-2026-35093 (high, 8.8); CVE-2026-35094 (medium, 5.5) |
libmad | 0.15.1b | desktop | yes | 5 | 1 | 1 | 3 | 0 | CVE-2018-7263 (critical, 9.8); CVE-2017-8373 (high, 7.8); CVE-2017-11552 (medium, 6.5); CVE-2017-8372 (medium, 4.7); CVE-2017-8374 (medium, 5.5) |
libssh2 | 1.11.1 | core | yes | 10 | 2 | 8 | 0 | 0 | CVE-2026-55200 (critical, 9.2); CVE-2026-7598 (critical, 9.1); CVE-2025-15661 (high, 8.3); CVE-2026-55199 (high, 8.2); CVE-2026-58050 (high, 8.3); CVE-2026-58051 (high, 8.3); CVE-2026-66032 (high, 8.8); CVE-2026-66033 (high, 8.7); CVE-2026-66034 (high, 7.7); CVE-2026-66035 (high, 7.7) |
libtiff | 4.7.1 | desktop | yes | 7 | 1 | 4 | 2 | 0 | CVE-2026-52490 (critical, 9.8); CVE-2017-16232 (high, 7.5); CVE-2026-12912 (high, 7.3); CVE-2026-52491 (high, 8.4); CVE-2026-52492 (high, 7.8); CVE-2018-10126 (medium, 6.5); CVE-2022-1210 (medium, 6.5) |
linux-kernel | 6.18.51 | core | yes | 222 | 8 | 70 | 139 | 4 | CVE-2026-100075 (critical, 9.8); CVE-2026-31501 (critical, 9.8); CVE-2026-31589 (critical, 9.8); CVE-2026-43414 (critical, 9.8); CVE-2026-53260 (critical, 9.8); CVE-2026-64067 (critical, 9.8); CVE-2026-64068 (critical, 9.8); CVE-2026-64160 (critical, 9.8); CVE-2008-4609 (high, 7.1); CVE-2013-7445 (high, 7.8); CVE-2019-12456 (high, 7.8); CVE-2019-19070 (high, 7.5); CVE-2019-19378 (high, 7.8); CVE-2019-19449 (high, 7.8); CVE-2019-19814 (high, 7.8); CVE-2020-11725 (high, 7.8); CVE-2020-27815 (high, 7.8); CVE-2021-20194 (high, 7.8); CVE-2021-26934 (high, 7.8); CVE-2021-3847 (high, 7.8); CVE-2021-3864 (high, 7.0); CVE-2022-0400 (high, 7.5); CVE-2022-1247 (high, 7.0); CVE-2022-25265 (high, 7.8); CVE-2022-2961 (high, 7.0); CVE-2022-3238 (high, 7.8); CVE-2022-45884 (high, 7.0); CVE-2022-45885 (high, 7.0); CVE-2023-26242 (high, 7.8); CVE-2023-3397 (high, 7.0); CVE-2023-3640 (high, 7.8); CVE-2024-21803 (high, 7.8); CVE-2024-56709 (high, 7.8); CVE-2025-71074 (high, 7.8); CVE-2025-71289 (high, 7.1); CVE-2025-71306 (high, 7.1); CVE-2026-23327 (high, 7.1); CVE-2026-23459 (high, 8.2); CVE-2026-31709 (high, 8.8); CVE-2026-31771 (high, 8.1); CVE-2026-43009 (high, 7.8); CVE-2026-43042 (high, 7.1); CVE-2026-43391 (high, 8.8); CVE-2026-45945 (high, 8.8); CVE-2026-45991 (high, 7.8); CVE-2026-46054 (high, 7.1); CVE-2026-46130 (high, 7.1); CVE-2026-46203 (high, 7.1); CVE-2026-46210 (high, 7.8); CVE-2026-46311 (high, 7.8); CVE-2026-46330 (high, 7.8); CVE-2026-52956 (high, 7.5); CVE-2026-52960 (high, 7.5); CVE-2026-52988 (high, 7.1); CVE-2026-53005 (high, 7.8); CVE-2026-53009 (high, 7.8); CVE-2026-53024 (high, 7.8); CVE-2026-53025 (high, 7.8); CVE-2026-53078 (high, 7.8); CVE-2026-53089 (high, 7.8); CVE-2026-53090 (high, 7.8); CVE-2026-53091 (high, 8.4); CVE-2026-53178 (high, 8.1); CVE-2026-53232 (high, 8.8); CVE-2026-53401 (high, 7.8); CVE-2026-64057 (high, 7.8); CVE-2026-64082 (high, 7.8); CVE-2026-64117 (high, 8.8); CVE-2026-64123 (high, 7.8); CVE-2026-64210 (high, 7.5); CVE-2026-64283 (high, 7.0); CVE-2026-64341 (high, 7.8); CVE-2026-64388 (high, 7.8); CVE-2026-64400 (high, 8.6); CVE-2026-98050 (high, 7.5); CVE-2026-98052 (high, 7.8); CVE-2026-98083 (high, 7.0); CVE-2026-98115 (high, 8.8); CVE-2004-0230 (medium, 5.0); CVE-2005-3660 (medium, 4.9); CVE-2008-2544 (medium, 5.5); CVE-2010-4563 (medium, 5.0); CVE-2010-5321 (medium, 4.3); CVE-2011-4915 (medium, 5.5); CVE-2011-4916 (medium, 5.5); CVE-2011-4917 (medium, 5.5); CVE-2012-4542 (medium, 4.6); CVE-2014-9892 (medium, 5.5); CVE-2014-9900 (medium, 5.5); CVE-2016-10723 (medium, 5.5); CVE-2016-8660 (medium, 5.5); CVE-2017-0630 (medium, 4.7); CVE-2017-13693 (medium, 5.5); CVE-2017-13694 (medium, 5.5); CVE-2018-1121 (medium, 5.9); CVE-2018-12928 (medium, 5.5); CVE-2018-17977 (medium, 4.4); CVE-2019-12378 (medium, 5.5); CVE-2019-12379 (medium, 5.5); CVE-2019-12380 (medium, 5.5); CVE-2019-12381 (medium, 5.5); CVE-2019-12382 (medium, 5.5); CVE-2019-12455 (medium, 5.5); CVE-2019-15213 (medium, 4.6); CVE-2019-16089 (medium, 4.1); CVE-2019-16229 (medium, 4.1); CVE-2019-16230 (medium, 4.7); CVE-2019-16231 (medium, 4.1); CVE-2019-16232 (medium, 4.1); CVE-2019-16233 (medium, 4.1); CVE-2019-16234 (medium, 4.7); CVE-2019-20794 (medium, 4.7); CVE-2019-3016 (medium, 6.2); CVE-2019-3819 (medium, 4.4); CVE-2019-3887 (medium, 6.7); CVE-2020-14304 (medium, 4.4); CVE-2020-36694 (medium, 6.7); CVE-2021-3564 (medium, 5.5); CVE-2021-3714 (medium, 5.9); CVE-2022-38096 (medium, 6.3); CVE-2022-41848 (medium, 4.2); CVE-2022-44032 (medium, 6.4); CVE-2022-44033 (medium, 6.4); CVE-2022-4543 (medium, 5.5); CVE-2023-23039 (medium, 5.7); CVE-2023-31081 (medium, 5.5); CVE-2023-31082 (medium, 5.5); CVE-2023-31085 (medium, 5.5); CVE-2023-37454 (medium, 5.5); CVE-2023-6238 (medium, 6.7); CVE-2023-6240 (medium, 6.5); CVE-2024-0564 (medium, 6.5); CVE-2024-2193 (medium, 5.7); CVE-2024-24864 (medium, 5.3); CVE-2025-71308 (medium, 5.5); CVE-2025-71313 (medium, 5.5); CVE-2026-100074 (medium, 5.5); CVE-2026-100076 (medium, 5.5); CVE-2026-100077 (medium, 5.5); CVE-2026-100078 (medium, 5.5); CVE-2026-100079 (medium, 5.5); CVE-2026-23328 (medium, 5.5); CVE-2026-23371 (medium, 5.5); CVE-2026-23374 (medium, 5.5); CVE-2026-23377 (medium, 5.5); CVE-2026-23442 (medium, 5.5); CVE-2026-31420 (medium, 5.5); CVE-2026-31560 (medium, 5.5); CVE-2026-31777 (medium, 5.5); CVE-2026-43022 (medium, 5.5); CVE-2026-43045 (medium, 5.5); CVE-2026-43053 (medium, 4.7); CVE-2026-43095 (medium, 5.5); CVE-2026-43115 (medium, 5.5); CVE-2026-43131 (medium, 5.5); CVE-2026-43174 (medium, 5.5); CVE-2026-43191 (medium, 5.5); CVE-2026-43204 (medium, 5.5); CVE-2026-43228 (medium, 5.5); CVE-2026-43299 (medium, 5.5); CVE-2026-43308 (medium, 5.5); CVE-2026-43310 (medium, 5.5); CVE-2026-43311 (medium, 5.5); CVE-2026-43326 (medium, 5.5); CVE-2026-43344 (medium, 5.5); CVE-2026-43443 (medium, 5.5); CVE-2026-45897 (medium, 5.5); CVE-2026-45901 (medium, 5.5); CVE-2026-45961 (medium, 5.5); CVE-2026-45963 (medium, 5.5); CVE-2026-46008 (medium, 4.7); CVE-2026-46017 (medium, 4.7); CVE-2026-46032 (medium, 5.5); CVE-2026-46092 (medium, 5.5); CVE-2026-46153 (medium, 5.5); CVE-2026-46245 (medium, 5.5); CVE-2026-46252 (medium, 5.5); CVE-2026-46298 (medium, 4.7); CVE-2026-46302 (medium, 5.5); CVE-2026-52949 (medium, 5.5); CVE-2026-52965 (medium, 5.5); CVE-2026-53007 (medium, 5.5); CVE-2026-53008 (medium, 4.7); CVE-2026-53017 (medium, 5.5); CVE-2026-53027 (medium, 5.5); CVE-2026-53102 (medium, 5.5); CVE-2026-53106 (medium, 5.5); CVE-2026-53108 (medium, 4.7); CVE-2026-53113 (medium, 5.5); CVE-2026-53124 (medium, 5.5); CVE-2026-53222 (medium, 5.5); CVE-2026-53257 (medium, 5.5); CVE-2026-53285 (medium, 5.5); CVE-2026-53292 (medium, 5.5); CVE-2026-53308 (medium, 5.5); CVE-2026-53313 (medium, 5.5); CVE-2026-64040 (medium, 5.5); CVE-2026-64079 (medium, 5.5); CVE-2026-64146 (medium, 5.5); CVE-2026-64154 (medium, 5.5); CVE-2026-64159 (medium, 5.5); CVE-2026-64325 (medium, 5.5); CVE-2026-98049 (medium, 5.5); CVE-2026-98051 (medium, 5.5); CVE-2026-98053 (medium, 5.5); CVE-2026-98054 (medium, 5.5); CVE-2026-98062 (medium, 5.5); CVE-2026-98078 (medium, 4.4); CVE-2026-98080 (medium, 5.5); CVE-2026-98082 (medium, 5.5); CVE-2026-98109 (medium, 4.7); CVE-2026-98131 (medium, 5.5); CVE-2026-98134 (medium, 5.5); CVE-2026-98152 (medium, 5.5); CVE-2026-98160 (medium, 5.5); CVE-2026-98161 (medium, 5.5); CVE-2026-98162 (medium, 5.5); CVE-2007-3719 (low, 2.1); CVE-2015-2877 (low, 3.3); CVE-2019-11191 (low, 2.5); CVE-2020-35501 (low, 3.4); CVE-2026-98375 (unscored) |
llama-cpp | b8796 | ai | yes | 13 | 4 | 3 | 4 | 2 | CVE-2026-107183 (critical, 9.2); CVE-2026-43629 (critical, 9.2); CVE-2026-43631 (critical, 9.2); CVE-2026-43632 (critical, 9.2); CVE-2026-43627 (high, 8.5); CVE-2026-43628 (high, 8.5); CVE-2026-78147 (high, 7.3); CVE-2026-17500 (medium, 6.9); CVE-2026-17501 (medium, 6.9); CVE-2026-78148 (medium, 6.9); CVE-2026-86317 (medium, 6.9); CVE-2026-18581 (low, 3.3); CVE-2026-2069 (low, 3.3) |
llama-cpp-cuda | b8796 | compute | 13 | 4 | 3 | 4 | 2 | CVE-2026-107183 (critical, 9.2); CVE-2026-43629 (critical, 9.2); CVE-2026-43631 (critical, 9.2); CVE-2026-43632 (critical, 9.2); CVE-2026-43627 (high, 8.5); CVE-2026-43628 (high, 8.5); CVE-2026-78147 (high, 7.3); CVE-2026-17500 (medium, 6.9); CVE-2026-17501 (medium, 6.9); CVE-2026-78148 (medium, 6.9); CVE-2026-86317 (medium, 6.9); CVE-2026-18581 (low, 3.3); CVE-2026-2069 (low, 3.3) | |
llama-cpp-hip | b8796 | compute | 13 | 4 | 3 | 4 | 2 | CVE-2026-107183 (critical, 9.2); CVE-2026-43629 (critical, 9.2); CVE-2026-43631 (critical, 9.2); CVE-2026-43632 (critical, 9.2); CVE-2026-43627 (high, 8.5); CVE-2026-43628 (high, 8.5); CVE-2026-78147 (high, 7.3); CVE-2026-17500 (medium, 6.9); CVE-2026-17501 (medium, 6.9); CVE-2026-78148 (medium, 6.9); CVE-2026-86317 (medium, 6.9); CVE-2026-18581 (low, 3.3); CVE-2026-2069 (low, 3.3) | |
lmdb | 0.9.35 | core | yes | 6 | 3 | 2 | 1 | 0 | CVE-2019-16224 (critical, 9.8); CVE-2019-16225 (critical, 9.8); CVE-2019-16227 (critical, 9.8); CVE-2019-16226 (high, 7.5); CVE-2019-16228 (high, 7.5); CVE-2026-22185 (medium, 4.6) |
mariadb | 11.8.6 | extra | 22 | 5 | 7 | 9 | 1 | CVE-2026-44170 (critical, 9.9); CVE-2026-44172 (critical, 9.1); CVE-2026-48163 (critical, 9.1); CVE-2026-48165 (critical, 9.1); CVE-2026-49261 (critical, 10.0); CVE-2026-107815 (high, 8.5); CVE-2026-107818 (high, 8.4); CVE-2026-107821 (high, 8.0); CVE-2026-107823 (high, 7.2); CVE-2026-44168 (high, 8.0); CVE-2026-44171 (high, 7.8); CVE-2026-44173 (high, 8.1); CVE-2026-107816 (medium, 6.4); CVE-2026-107817 (medium, 4.4); CVE-2026-107822 (medium, 6.4); CVE-2026-44169 (medium, 4.3); CVE-2026-47023 (medium, 4.9); CVE-2026-60184 (medium, 4.4); CVE-2026-60331 (medium, 6.4); CVE-2026-60585 (medium, 6.6); CVE-2026-60747 (medium, 6.2); CVE-2026-61081 (low, 2.7) | |
memcached | 1.6.41 | extra | 4 | 1 | 2 | 1 | 0 | CVE-2022-26635 (critical, 9.8); CVE-2026-47783 (high, 8.1); CVE-2026-47784 (high, 8.1); CVE-2026-90698 (medium, 5.5) | |
mesa | 25.3.5 | desktop | yes | 5 | 1 | 1 | 3 | 0 | CVE-2026-40393 (critical, 9.8); CVE-2023-45931 (high, 7.5); CVE-2023-45913 (medium, 6.2); CVE-2023-45919 (medium, 5.3); CVE-2023-45922 (medium, 4.3) |
nasm | 3.01 | core | yes | 29 | 1 | 9 | 18 | 1 | CVE-2026-6068 (critical, 9.6); CVE-2019-8343 (high, 7.8); CVE-2022-46456 (high, 7.8); CVE-2023-31722 (high, 7.8); CVE-2025-8842 (high, 7.8); CVE-2025-8843 (high, 7.8); CVE-2025-8845 (high, 7.8); CVE-2025-8846 (high, 7.8); CVE-2026-6067 (high, 7.5); CVE-2026-6069 (high, 7.5); CVE-2018-1000886 (medium, 5.5); CVE-2018-19213 (medium, 5.5); CVE-2018-20538 (medium, 5.5); CVE-2019-20334 (medium, 5.5); CVE-2019-6290 (medium, 5.5); CVE-2019-6291 (medium, 5.5); CVE-2021-33450 (medium, 5.5); CVE-2021-33452 (medium, 5.5); CVE-2021-45256 (medium, 5.5); CVE-2021-45257 (medium, 5.5); CVE-2022-41420 (medium, 5.5); CVE-2022-44368 (medium, 5.5); CVE-2022-44369 (medium, 5.5); CVE-2022-46457 (medium, 5.5); CVE-2023-38665 (medium, 5.5); CVE-2023-38667 (medium, 5.5); CVE-2023-38668 (medium, 5.5); CVE-2025-8844 (medium, 5.5); CVE-2020-18974 (low, 3.3) |
networkmanager | 1.56.0 | desktop | yes | 2 | 1 | 0 | 1 | 0 | CVE-2026-19685 (critical, 9.8); CVE-2026-10805 (medium, 6.7) |
nginx | 1.29.8 | extra | 15 | 4 | 4 | 7 | 0 | CVE-2026-42055 (critical, 9.2); CVE-2026-42533 (critical, 9.2); CVE-2026-42945 (critical, 9.2); CVE-2026-9256 (critical, 9.2); CVE-2013-0337 (high, 7.5); CVE-2026-42946 (high, 8.3); CVE-2026-56434 (high, 8.3); CVE-2026-60005 (high, 8.8); CVE-2009-4487 (medium, 6.8); CVE-2026-40460 (medium, 6.9); CVE-2026-40701 (medium, 6.3); CVE-2026-42926 (medium, 6.3); CVE-2026-42934 (medium, 6.3); CVE-2026-48142 (medium, 6.3); CVE-2026-90439 (medium, 6.9) | |
ninja | 1.13.2 | core | yes | 1 | 1 | 0 | 0 | 0 | CVE-2021-4336 (critical, 9.8) |
nodejs | 22.22.0 | core | yes | 30 | 1 | 11 | 11 | 7 | CVE-2026-48930 (critical, 9.8); CVE-2026-21637 (high, 7.5); CVE-2026-21710 (high, 7.5); CVE-2026-48615 (high, 7.5); CVE-2026-48617 (high, 8.2); CVE-2026-48618 (high, 7.7); CVE-2026-48619 (high, 7.5); CVE-2026-48933 (high, 7.5); CVE-2026-48937 (high, 7.5); CVE-2026-56846 (high, 7.5); CVE-2026-56848 (high, 7.5); CVE-2026-58043 (high, 8.4); CVE-2026-21713 (medium, 5.9); CVE-2026-21714 (medium, 5.3); CVE-2026-21717 (medium, 5.9); CVE-2026-48928 (medium, 5.4); CVE-2026-48934 (medium, 4.3); CVE-2026-56847 (medium, 6.1); CVE-2026-56850 (medium, 4.4); CVE-2026-58040 (medium, 6.3); CVE-2026-58041 (medium, 5.3); CVE-2026-58042 (medium, 5.9); CVE-2026-58045 (medium, 6.2); CVE-2026-21715 (low, 3.3); CVE-2026-21716 (low, 3.3); CVE-2026-48931 (low, 3.7); CVE-2026-48932 (low, 3.7); CVE-2026-48935 (low, 3.3); CVE-2026-58039 (low, 3.3); CVE-2026-58044 (low, 3.7) |
nss | 3.121 | core | yes | 9 | 1 | 7 | 1 | 0 | CVE-2026-16389 (critical, 9.8); CVE-2017-11695 (high, 7.8); CVE-2017-11696 (high, 7.8); CVE-2017-11697 (high, 7.8); CVE-2017-11698 (high, 7.8); CVE-2026-12318 (high, 7.3); CVE-2026-6766 (high, 7.5); CVE-2026-6772 (high, 7.5); CVE-2026-6767 (medium, 5.3) |
openssh | 10.2p1 | core | yes | 34 | 1 | 6 | 16 | 11 | CVE-2026-60002 (critical, 9.4); CVE-2020-15778 (high, 7.8); CVE-2026-35385 (high, 8.1); CVE-2026-35386 (high, 8.1); CVE-2026-35414 (high, 8.1); CVE-2026-59999 (high, 7.5); CVE-2026-60000 (high, 7.5); CVE-2007-2243 (medium, 5.0); CVE-2007-2768 (medium, 4.3); CVE-2008-3234 (medium, 6.5); CVE-2016-20012 (medium, 5.3); CVE-2018-15919 (medium, 5.3); CVE-2019-6110 (medium, 6.8); CVE-2020-14145 (medium, 5.9); CVE-2026-106552 (medium, 4.2); CVE-2026-106585 (medium, 6.5); CVE-2026-35387 (medium, 6.5); CVE-2026-59995 (medium, 5.4); CVE-2026-59996 (medium, 5.4); CVE-2026-59997 (medium, 5.4); CVE-2026-59998 (medium, 6.5); CVE-2026-60001 (medium, 6.5); CVE-2026-73282 (medium, 4.8); CVE-2026-106553 (low, 2.2); CVE-2026-106555 (low, 2.2); CVE-2026-106582 (low, 3.7); CVE-2026-106583 (low, 2.5); CVE-2026-106584 (low, 2.5); CVE-2026-106586 (low, 2.5); CVE-2026-106587 (low, 3.6); CVE-2026-35388 (low, 2.5); CVE-2026-55654 (low, 3.7); CVE-2026-73281 (low, 3.5); CVE-2026-73283 (low, 2.5) |
openssl | 3.6.1 | core | yes | 50 | 5 | 26 | 13 | 6 | CVE-2026-28386 (critical, 9.1); CVE-2026-31789 (critical, 9.8); CVE-2026-34182 (critical, 9.1); CVE-2026-63073 (critical, 9.8); CVE-2026-75803 (critical, 9.1); CVE-2026-14456 (high, 7.5); CVE-2026-14457 (high, 7.5); CVE-2026-18798 (high, 7.5); CVE-2026-28387 (high, 8.1); CVE-2026-28388 (high, 7.5); CVE-2026-28389 (high, 7.5); CVE-2026-28390 (high, 7.5); CVE-2026-31790 (high, 7.5); CVE-2026-34180 (high, 7.5); CVE-2026-34181 (high, 7.4); CVE-2026-34183 (high, 7.5); CVE-2026-42764 (high, 7.5); CVE-2026-42765 (high, 7.5); CVE-2026-45445 (high, 7.5); CVE-2026-45447 (high, 8.8); CVE-2026-54873 (high, 7.5); CVE-2026-54874 (high, 7.5); CVE-2026-54876 (high, 7.5); CVE-2026-63072 (high, 7.5); CVE-2026-63075 (high, 7.5); CVE-2026-63076 (high, 7.5); CVE-2026-72897 (high, 7.5); CVE-2026-7383 (high, 8.1); CVE-2026-84782 (high, 8.2); CVE-2026-84784 (high, 7.5); CVE-2026-9076 (high, 7.5); CVE-2026-2673 (medium, 6.5); CVE-2026-35188 (medium, 5.0); CVE-2026-35189 (medium, 5.3); CVE-2026-42766 (medium, 5.9); CVE-2026-42767 (medium, 5.9); CVE-2026-42769 (medium, 5.3); CVE-2026-42772 (medium, 5.3); CVE-2026-45446 (medium, 4.8); CVE-2026-63074 (medium, 5.9); CVE-2026-75804 (medium, 5.3); CVE-2026-75805 (medium, 5.3); CVE-2026-75806 (medium, 5.3); GHSA-9v9h-cgj8-h64p (medium, 5.5); CVE-2026-35191 (low, 3.7); CVE-2026-42768 (low, 3.7); CVE-2026-42770 (low, 3.7); CVE-2026-54872 (low, 3.7); CVE-2026-54875 (low, 3.7); CVE-2026-77696 (low, 3.7) |
orc | 0.4.42 | desktop | yes | 1 | 1 | 0 | 0 | 0 | CVE-2025-47436 (critical, 9.8) |
pandas | 3.0.3 | extra | 1 | 1 | 0 | 0 | 0 | CVE-2020-13091 (critical, 9.8) | |
patchelf | 0.18.0 | core | yes | 1 | 1 | 0 | 0 | 0 | CVE-2022-44940 (critical, 9.1) |
perl | 5.42.0 | core | yes | 13 | 5 | 5 | 2 | 1 | CVE-2026-12087 (critical, 9.1); CVE-2026-13221 (critical, 9.1); CVE-2026-4176 (critical, 9.8); CVE-2026-42496 (critical, 9.1); CVE-2026-8376 (critical, 9.8); CVE-2026-42497 (high, 7.5); CVE-2026-57432 (high, 8.4); CVE-2026-7017 (high, 7.1); CVE-2026-82560 (high, 7.5); CVE-2026-9538 (high, 7.5); CVE-2026-15534 (medium, 5.7); CVE-2026-19487 (medium, 5.3); CVE-2011-4116 (low, 3.3) |
php | 8.4.11 | extra | 17 | 6 | 8 | 3 | 0 | CVE-2025-14179 (critical, 9.8); CVE-2026-17543 (critical, 9.8); CVE-2026-17544 (critical, 9.8); CVE-2026-6104 (critical, 9.1); CVE-2026-6722 (critical, 9.8); CVE-2026-7261 (critical, 9.8); CVE-2025-14177 (high, 7.5); CVE-2025-14178 (high, 8.2); CVE-2025-14180 (high, 8.2); CVE-2026-6735 (high, 7.3); CVE-2026-7258 (high, 7.5); CVE-2026-7262 (high, 7.5); CVE-2026-7263 (high, 7.5); CVE-2026-7568 (high, 7.5); CVE-2026-14355 (medium, 5.6); CVE-2026-7259 (medium, 6.5); CVE-2026-7260 (medium, 5.5) | |
python | 3.14.3 | core | yes | 42 | 2 | 17 | 18 | 5 | CVE-2026-19445 (critical, 9.2); CVE-2026-6100 (critical, 9.1); CVE-2020-1171 (high, 8.8); CVE-2020-1192 (high, 7.8); CVE-2020-17163 (high, 7.8); CVE-2024-49050 (high, 8.8); CVE-2025-49714 (high, 7.8); CVE-2026-11940 (high, 7.8); CVE-2026-11972 (high, 8.2); CVE-2026-15308 (high, 8.7); CVE-2026-19553 (high, 7.6); CVE-2026-3087 (high, 7.5); CVE-2026-3644 (high, 7.5); CVE-2026-4224 (high, 7.5); CVE-2026-4519 (high, 7.1); CVE-2026-4786 (high, 7.1); CVE-2026-7210 (high, 7.5); CVE-2026-82049 (high, 8.4); CVE-2026-9669 (high, 8.2); CVE-2025-12781 (medium, 6.3); CVE-2025-15366 (medium, 5.9); CVE-2025-15367 (medium, 5.9); CVE-2026-0864 (medium, 5.5); CVE-2026-12003 (medium, 5.3); CVE-2026-12345 (medium, 5.9); CVE-2026-1502 (medium, 5.7); CVE-2026-15806 (medium, 6.0); CVE-2026-17084 (medium, 6.0); CVE-2026-19672 (medium, 6.3); CVE-2026-3276 (medium, 6.3); CVE-2026-3446 (medium, 6.0); CVE-2026-4360 (medium, 5.3); CVE-2026-5713 (medium, 5.3); CVE-2026-6019 (medium, 6.1); CVE-2026-7774 (medium, 6.9); CVE-2026-8328 (medium, 5.9); CVE-2026-87910 (medium, 5.7); CVE-2025-13462 (low, 3.3); CVE-2026-15310 (low, 2.1); CVE-2026-18503 (low, 2.4); CVE-2026-3479 (low, 0.0); CVE-2026-6879 (low, 2.0) |
python-cryptography | 44.0.0 | core | yes | 19 | 1 | 11 | 7 | 0 | CVE-2026-39892 (critical, 9.8); CVE-2026-26007 (high, 8.2); CVE-2026-69247 (high, 8.2); CVE-2026-69249 (high, 8.7); GHSA-537c-gmf6-5ccf (high, 7.0); GHSA-g6cj-pr64-35w5 (high, 8.2); GHSA-jwv3-5hgf-82ww (high, 8.7); GHSA-r6ph-v2qm-q3c2 (high, 8.2); GHSA-x4qr-2fvf-3mr5 (high, 7.4); PYSEC-2026-2141 (high, 8.2); PYSEC-2026-3552 (high, 8.2); PYSEC-2026-3553 (high, 8.7); CVE-2026-34073 (medium, 5.3); CVE-2026-69248 (medium, 6.9); GHSA-79v4-65xg-pq4g (medium, 6.3); GHSA-m959-cc7f-wv43 (medium, 5.3); PYSEC-2026-1284 (medium, 6.3); PYSEC-2026-35 (medium, 5.3); PYSEC-2026-3554 (medium, 6.9) |
python-ply | 3.11 | core | yes | 1 | 1 | 0 | 0 | 0 | CVE-2025-56005 (critical, 9.8) |
pytorch | 2.10.0 | ai | 33 | 2 | 10 | 18 | 3 | CVE-2024-48063 (critical, 9.8); GHSA-m9mp-6x32-5rhg (critical, 9.0); CVE-2025-2148 (high, 7.5); CVE-2025-55551 (high, 7.5); CVE-2025-55552 (high, 7.5); CVE-2025-55553 (high, 7.5); CVE-2025-55557 (high, 7.5); CVE-2025-55558 (high, 7.5); CVE-2025-55560 (high, 7.5); CVE-2026-24747 (high, 8.8); CVE-2026-4538 (high, 7.8); GHSA-c678-jfcj-6jmf (high, 7.5); CVE-2025-2953 (medium, 5.5); CVE-2025-2998 (medium, 5.3); CVE-2025-2999 (medium, 5.3); CVE-2025-3000 (medium, 5.3); CVE-2025-3001 (medium, 5.3); CVE-2025-3121 (medium, 5.5); CVE-2025-3136 (medium, 4.8); CVE-2025-3730 (medium, 5.5); CVE-2025-4287 (medium, 4.8); CVE-2025-46148 (medium, 5.3); CVE-2025-46149 (medium, 5.3); CVE-2025-46150 (medium, 5.3); CVE-2025-46152 (medium, 5.3); CVE-2025-46153 (medium, 5.3); CVE-2025-55554 (medium, 5.3); GHSA-f4hp-rmr7-r7v8 (medium, 5.3); GHSA-hw6r-g8gj-2987 (medium, 4.0); GHSA-rrmf-rvhw-rf47 (medium, 5.3); CVE-2025-2149 (low, 2.5); CVE-2025-63396 (low, 3.3); GHSA-x3gm-94wq-g975 (low, 2.5) | |
qemu | 11.0.2 | extra | yes | 57 | 3 | 6 | 4 | 4 | CVE-2019-12928 (critical, 9.8); CVE-2019-12929 (critical, 9.8); CVE-2022-36648 (critical, 10.0); CVE-2019-12247 (high, 7.5); CVE-2022-3872 (high, 8.6); CVE-2023-1386 (high, 7.8); CVE-2026-12080 (high, 7.3); CVE-2026-81627 (high, 8.2); CVE-2026-93834 (high, 8.8); CVE-2019-12067 (medium, 6.5); CVE-2020-35503 (medium, 6.0); CVE-2021-3735 (medium, 4.4); CVE-2026-6426 (medium, 4.4); CVE-2020-25741 (low, 3.2); CVE-2020-25742 (low, 3.2); CVE-2020-25743 (low, 3.2); CVE-2024-8612 (low, 3.8); CVE-2026-15264 (unscored); CVE-2026-15578 (unscored); CVE-2026-15705 (unscored); CVE-2026-16043 (unscored); CVE-2026-16271 (unscored); CVE-2026-16288 (unscored); CVE-2026-16457 (unscored); CVE-2026-17516 (unscored); CVE-2026-17588 (unscored); CVE-2026-18054 (unscored); CVE-2026-48002 (unscored); CVE-2026-50624 (unscored); CVE-2026-50626 (unscored); CVE-2026-58581 (unscored); CVE-2026-58582 (unscored); CVE-2026-61402 (unscored); CVE-2026-61404 (unscored); CVE-2026-61405 (unscored); CVE-2026-61406 (unscored); CVE-2026-61475 (unscored); CVE-2026-61476 (unscored); CVE-2026-63109 (unscored); CVE-2026-63110 (unscored); CVE-2026-63318 (unscored); CVE-2026-63319 (unscored); CVE-2026-63320 (unscored); CVE-2026-63321 (unscored); CVE-2026-63322 (unscored); CVE-2026-63323 (unscored); CVE-2026-65928 (unscored); CVE-2026-65929 (unscored); CVE-2026-66020 (unscored); CVE-2026-66021 (unscored); CVE-2026-66022 (unscored); CVE-2026-66899 (unscored); CVE-2026-66900 (unscored); CVE-2026-77913 (unscored); CVE-2026-8348 (unscored); CVE-2026-84788 (unscored); CVE-2026-9238 (unscored) |
raptor2 | 2.0.16 | desktop | yes | 2 | 1 | 0 | 1 | 0 | CVE-2024-57823 (critical, 9.3); CVE-2024-57822 (medium, 5.5) |
rsync | 3.4.1 | base | yes | 40 | 5 | 24 | 10 | 1 | CVE-2026-53790 (critical, 9.2); CVE-2026-53791 (critical, 9.1); CVE-2026-53793 (critical, 9.1); CVE-2026-70452 (critical, 9.1); CVE-2026-70460 (critical, 9.2); CVE-2026-29518 (high, 7.8); CVE-2026-41035 (high, 7.8); CVE-2026-43618 (high, 8.1); CVE-2026-43619 (high, 7.2); CVE-2026-53783 (high, 8.6); CVE-2026-53784 (high, 8.4); CVE-2026-53785 (high, 7.1); CVE-2026-53789 (high, 8.1); CVE-2026-53792 (high, 7.1); CVE-2026-53795 (high, 8.1); CVE-2026-53799 (high, 7.2); CVE-2026-53801 (high, 8.2); CVE-2026-53802 (high, 8.4); CVE-2026-53803 (high, 8.5); CVE-2026-70453 (high, 8.7); CVE-2026-70454 (high, 8.0); CVE-2026-70455 (high, 8.7); CVE-2026-70456 (high, 8.8); CVE-2026-70457 (high, 8.3); CVE-2026-70458 (high, 8.8); CVE-2026-70461 (high, 8.8); CVE-2026-70462 (high, 7.1); CVE-2026-70463 (high, 8.6); CVE-2026-70464 (high, 8.7); CVE-2026-43617 (medium, 6.3); CVE-2026-43620 (medium, 6.9); CVE-2026-53786 (medium, 6.9); CVE-2026-53788 (medium, 6.9); CVE-2026-53794 (medium, 6.9); CVE-2026-53796 (medium, 6.3); CVE-2026-53797 (medium, 5.7); CVE-2026-53798 (medium, 6.9); CVE-2026-53800 (medium, 5.7); CVE-2026-70459 (medium, 6.9); CVE-2026-45232 (low, 3.7) |
samba | 4.23.5 | desktop | yes | 13 | 2 | 4 | 5 | 0 | CVE-2026-4408 (critical, 9.8); CVE-2026-4480 (critical, 9.8); CVE-2026-1933 (high, 7.1); CVE-2026-3012 (high, 8.0); CVE-2026-3238 (high, 7.5); CVE-2026-58222 (high, 8.8); CVE-2026-15779 (medium, 6.1); CVE-2026-2340 (medium, 6.5); CVE-2026-58216 (medium, 5.3); CVE-2026-58218 (medium, 5.3); CVE-2026-58224 (medium, 6.5); CVE-2026-58221 (unscored); CVE-2026-6949 (unscored) |
slang | 2.3.3 | desktop | yes | 2 | 2 | 0 | 0 | 0 | CVE-2023-45927 (critical, 9.1); CVE-2023-45929 (critical, 9.1) |
snappy | 1.2.2 | extra | yes | 2 | 2 | 0 | 0 | 0 | CVE-2023-28115 (critical, 9.8); CVE-2023-41330 (critical, 9.8) |
tar | 1.35 | core | yes | 5 | 1 | 1 | 3 | 0 | CVE-2005-2541 (critical, 10.0); CVE-2018-20834 (high, 7.5); CVE-2026-18477 (medium, 4.4); CVE-2026-18508 (medium, 4.4); CVE-2026-5704 (medium, 5.5) |
thrift | 0.24.0 | extra | 70 | 3 | 57 | 10 | 0 | CVE-2021-24028 (critical, 9.8); CVE-2026-83632 (critical, 9.2); CVE-2026-91135 (critical, 9.2); CVE-2019-11938 (high, 7.5); CVE-2019-11939 (high, 7.5); CVE-2019-3552 (high, 7.5); CVE-2019-3553 (high, 7.5); CVE-2019-3558 (high, 7.5); CVE-2019-3559 (high, 7.5); CVE-2019-3564 (high, 7.5); CVE-2019-3565 (high, 7.5); CVE-2026-61373 (high, 8.7); CVE-2026-61374 (high, 7.1); CVE-2026-63772 (high, 8.7); CVE-2026-66055 (high, 8.2); CVE-2026-66081 (high, 8.7); CVE-2026-66837 (high, 8.7); CVE-2026-66858 (high, 8.7); CVE-2026-66859 (high, 8.7); CVE-2026-82458 (high, 8.7); CVE-2026-82459 (high, 8.2); CVE-2026-83663 (high, 8.7); CVE-2026-83745 (high, 8.7); CVE-2026-85476 (high, 8.2); CVE-2026-85493 (high, 8.7); CVE-2026-85494 (high, 8.7); CVE-2026-86535 (high, 8.7); CVE-2026-86537 (high, 8.7); CVE-2026-87117 (high, 8.7); CVE-2026-90440 (high, 8.2); CVE-2026-91137 (high, 8.7); CVE-2026-93925 (high, 8.7); CVE-2026-93926 (high, 8.7); CVE-2026-94633 (high, 8.7); CVE-2026-94634 (high, 8.2); CVE-2026-94635 (high, 8.7); CVE-2026-94636 (high, 8.2); CVE-2026-94637 (high, 8.2); CVE-2026-94639 (high, 8.2); CVE-2026-94642 (high, 8.7); CVE-2026-94644 (high, 8.2); CVE-2026-94645 (high, 8.2); CVE-2026-94646 (high, 8.7); CVE-2026-94648 (high, 8.2); CVE-2026-94650 (high, 8.2); CVE-2026-94651 (high, 8.2); CVE-2026-94653 (high, 8.2); CVE-2026-94654 (high, 8.2); CVE-2026-94655 (high, 8.2); CVE-2026-94656 (high, 8.2); CVE-2026-94657 (high, 8.2); CVE-2026-94658 (high, 8.7); CVE-2026-96277 (high, 8.7); CVE-2026-96286 (high, 8.2); CVE-2026-96287 (high, 8.2); CVE-2026-96288 (high, 8.2); CVE-2026-96289 (high, 8.2); CVE-2026-96292 (high, 8.2); CVE-2026-96294 (high, 8.7); CVE-2026-96990 (high, 8.2); CVE-2026-66054 (medium, 6.9); CVE-2026-66331 (medium, 6.9); CVE-2026-85086 (medium, 6.9); CVE-2026-85087 (medium, 6.9); CVE-2026-85088 (medium, 6.9); CVE-2026-85483 (medium, 6.3); CVE-2026-86536 (medium, 6.3); CVE-2026-92834 (medium, 6.3); CVE-2026-94638 (medium, 6.3); CVE-2026-94652 (medium, 6.3) | |
thunderbird | 140.8.0esr | extra | yes | 258 | 83 | 136 | 39 | 0 | CVE-2026-100770 (critical, 9.6); CVE-2026-100775 (critical, 9.6); CVE-2026-100778 (critical, 9.6); CVE-2026-100781 (critical, 9.6); CVE-2026-100786 (critical, 9.6); CVE-2026-100811 (critical, 9.6); CVE-2026-100818 (critical, 9.6); CVE-2026-100819 (critical, 9.6); CVE-2026-12294 (critical, 9.6); CVE-2026-12295 (critical, 9.6); CVE-2026-12296 (critical, 9.6); CVE-2026-12297 (critical, 9.6); CVE-2026-12304 (critical, 9.1); CVE-2026-12315 (critical, 9.1); CVE-2026-16349 (critical, 9.8); CVE-2026-16350 (critical, 9.8); CVE-2026-16351 (critical, 9.8); CVE-2026-16352 (critical, 9.8); CVE-2026-16353 (critical, 9.8); CVE-2026-16355 (critical, 9.8); CVE-2026-16356 (critical, 9.8); CVE-2026-16357 (critical, 9.8); CVE-2026-16358 (critical, 9.8); CVE-2026-16359 (critical, 9.1); CVE-2026-16360 (critical, 9.8); CVE-2026-16361 (critical, 9.8); CVE-2026-16363 (critical, 9.8); CVE-2026-16368 (critical, 9.8); CVE-2026-16369 (critical, 9.8); CVE-2026-16375 (critical, 9.8); CVE-2026-16377 (critical, 9.8); CVE-2026-16381 (critical, 9.1); CVE-2026-16383 (critical, 9.8); CVE-2026-16387 (critical, 9.8); CVE-2026-16390 (critical, 9.1); CVE-2026-16412 (critical, 9.8); CVE-2026-4687 (critical, 9.6); CVE-2026-4688 (critical, 10.0); CVE-2026-4689 (critical, 10.0); CVE-2026-4690 (critical, 9.6); CVE-2026-4691 (critical, 9.8); CVE-2026-4692 (critical, 10.0); CVE-2026-4696 (critical, 9.8); CVE-2026-4698 (critical, 9.8); CVE-2026-4700 (critical, 9.8); CVE-2026-4701 (critical, 9.8); CVE-2026-4702 (critical, 9.8); CVE-2026-4705 (critical, 9.8); CVE-2026-4710 (critical, 9.8); CVE-2026-4715 (critical, 9.1); CVE-2026-4716 (critical, 9.1); CVE-2026-4717 (critical, 9.8); CVE-2026-4720 (critical, 9.8); CVE-2026-4721 (critical, 9.8); CVE-2026-5731 (critical, 9.8); CVE-2026-5734 (critical, 9.8); CVE-2026-6748 (critical, 9.8); CVE-2026-6771 (critical, 9.8); CVE-2026-7321 (critical, 9.6); CVE-2026-74936 (critical, 9.8); CVE-2026-74940 (critical, 9.8); CVE-2026-74943 (critical, 9.8); CVE-2026-74944 (critical, 9.8); CVE-2026-74959 (critical, 9.1); CVE-2026-74964 (critical, 9.8); CVE-2026-74987 (critical, 9.8); CVE-2026-74990 (critical, 9.8); CVE-2026-8091 (critical, 9.8); CVE-2026-8094 (critical, 9.8); CVE-2026-8401 (critical, 9.8); CVE-2026-84119 (critical, 9.6); CVE-2026-84121 (critical, 9.6); CVE-2026-84143 (critical, 9.8); CVE-2026-84639 (critical, 9.1); CVE-2026-8950 (critical, 9.3); CVE-2026-8953 (critical, 9.6); CVE-2026-8956 (critical, 9.8); CVE-2026-8959 (critical, 9.6); CVE-2026-92018 (critical, 9.6); CVE-2026-92032 (critical, 9.6); CVE-2026-92035 (critical, 9.6); CVE-2026-92238 (critical, 9.8); CVE-2026-92240 (critical, 9.1); CVE-2025-59375 (high, 7.5); CVE-2026-100756 (high, 8.1); CVE-2026-100767 (high, 8.8); CVE-2026-100769 (high, 8.8); CVE-2026-100771 (high, 8.1); CVE-2026-100772 (high, 8.8); CVE-2026-100773 (high, 8.8); CVE-2026-100774 (high, 8.8); CVE-2026-100776 (high, 8.8); CVE-2026-100777 (high, 8.8); CVE-2026-100779 (high, 8.8); CVE-2026-100780 (high, 8.8); CVE-2026-100782 (high, 8.8); CVE-2026-100784 (high, 8.8); CVE-2026-100785 (high, 8.8); CVE-2026-100820 (high, 8.8); CVE-2026-100832 (high, 8.8); CVE-2026-12289 (high, 8.8); CVE-2026-12290 (high, 8.1); CVE-2026-12291 (high, 8.8); CVE-2026-12292 (high, 8.1); CVE-2026-12298 (high, 7.5); CVE-2026-12299 (high, 7.5); CVE-2026-12305 (high, 7.5); CVE-2026-12310 (high, 7.5); CVE-2026-12312 (high, 7.5); CVE-2026-12314 (high, 7.5); CVE-2026-12324 (high, 7.3); CVE-2026-12327 (high, 8.1); CVE-2026-12328 (high, 8.1); CVE-2026-12329 (high, 7.5); CVE-2026-14899 (high, 7.5); CVE-2026-16354 (high, 7.5); CVE-2026-16362 (high, 8.8); CVE-2026-16371 (high, 8.8); CVE-2026-16374 (high, 7.5); CVE-2026-16379 (high, 8.8); CVE-2026-16391 (high, 7.5); CVE-2026-16396 (high, 8.8); CVE-2026-16405 (high, 7.5); CVE-2026-4371 (high, 8.2); CVE-2026-4684 (high, 7.5); CVE-2026-4685 (high, 7.5); CVE-2026-4686 (high, 7.5); CVE-2026-4693 (high, 7.5); CVE-2026-4694 (high, 7.5); CVE-2026-4695 (high, 7.5); CVE-2026-4697 (high, 7.5); CVE-2026-4699 (high, 7.5); CVE-2026-4704 (high, 7.5); CVE-2026-4706 (high, 7.5); CVE-2026-4707 (high, 7.5); CVE-2026-4708 (high, 7.5); CVE-2026-4709 (high, 7.5); CVE-2026-4713 (high, 7.5); CVE-2026-4714 (high, 7.5); CVE-2026-4718 (high, 8.1); CVE-2026-4719 (high, 7.5); CVE-2026-5732 (high, 8.8); CVE-2026-6746 (high, 7.5); CVE-2026-6747 (high, 7.5); CVE-2026-6749 (high, 7.5); CVE-2026-6750 (high, 8.8); CVE-2026-6751 (high, 7.5); CVE-2026-6752 (high, 7.5); CVE-2026-6753 (high, 7.5); CVE-2026-6754 (high, 7.5); CVE-2026-6759 (high, 7.5); CVE-2026-6761 (high, 8.8); CVE-2026-6766 (high, 7.5); CVE-2026-6769 (high, 8.8); CVE-2026-6772 (high, 7.5); CVE-2026-6776 (high, 7.8); CVE-2026-6785 (high, 7.5); CVE-2026-6786 (high, 7.5); CVE-2026-7320 (high, 7.5); CVE-2026-7322 (high, 8.8); CVE-2026-7323 (high, 7.5); CVE-2026-74934 (high, 7.5); CVE-2026-74935 (high, 8.8); CVE-2026-74939 (high, 8.8); CVE-2026-74941 (high, 8.8); CVE-2026-74942 (high, 8.8); CVE-2026-74946 (high, 8.8); CVE-2026-74949 (high, 8.8); CVE-2026-74953 (high, 8.8); CVE-2026-74957 (high, 8.1); CVE-2026-74960 (high, 8.1); CVE-2026-74962 (high, 8.1); CVE-2026-74965 (high, 8.8); CVE-2026-74969 (high, 8.8); CVE-2026-74983 (high, 8.1); CVE-2026-8090 (high, 7.5); CVE-2026-8092 (high, 8.1); CVE-2026-8388 (high, 7.5); CVE-2026-8391 (high, 7.5); CVE-2026-84131 (high, 8.8); CVE-2026-84145 (high, 7.5); CVE-2026-84640 (high, 7.5); CVE-2026-84641 (high, 7.5); CVE-2026-8946 (high, 7.5); CVE-2026-8947 (high, 7.5); CVE-2026-8949 (high, 7.5); CVE-2026-8954 (high, 7.5); CVE-2026-8955 (high, 8.8); CVE-2026-8957 (high, 8.8); CVE-2026-8958 (high, 8.6); CVE-2026-8962 (high, 8.1); CVE-2026-8968 (high, 7.5); CVE-2026-8970 (high, 8.8); CVE-2026-8974 (high, 8.8); CVE-2026-8975 (high, 8.8); CVE-2026-92006 (high, 8.8); CVE-2026-92007 (high, 8.8); CVE-2026-92008 (high, 8.8); CVE-2026-92009 (high, 8.8); CVE-2026-92010 (high, 8.8); CVE-2026-92011 (high, 8.8); CVE-2026-92012 (high, 8.8); CVE-2026-92013 (high, 8.8); CVE-2026-92014 (high, 8.8); CVE-2026-92015 (high, 8.8); CVE-2026-92016 (high, 8.8); CVE-2026-92017 (high, 8.8); CVE-2026-92019 (high, 8.1); CVE-2026-92020 (high, 8.8); CVE-2026-92021 (high, 8.8); CVE-2026-92022 (high, 8.8); CVE-2026-92023 (high, 8.8); CVE-2026-92024 (high, 8.8); CVE-2026-92025 (high, 8.8); CVE-2026-92026 (high, 8.8); CVE-2026-92027 (high, 8.8); CVE-2026-92028 (high, 8.8); CVE-2026-92029 (high, 8.8); CVE-2026-92239 (high, 8.1); CVE-2026-100783 (medium, 4.3); CVE-2026-12302 (medium, 6.5); CVE-2026-12306 (medium, 5.3); CVE-2026-12307 (medium, 5.3); CVE-2026-12308 (medium, 5.3); CVE-2026-12309 (medium, 6.5); CVE-2026-12311 (medium, 4.7); CVE-2026-12313 (medium, 4.7); CVE-2026-12325 (medium, 6.5); CVE-2026-12330 (medium, 5.4); CVE-2026-15718 (medium, 4.3); CVE-2026-15719 (medium, 5.4); CVE-2026-3889 (medium, 6.5); CVE-2026-57962 (medium, 5.3); CVE-2026-57963 (medium, 6.5); CVE-2026-6757 (medium, 6.3); CVE-2026-6762 (medium, 6.3); CVE-2026-6763 (medium, 6.5); CVE-2026-6764 (medium, 6.5); CVE-2026-6765 (medium, 5.3); CVE-2026-6767 (medium, 5.3); CVE-2026-6770 (medium, 6.5); CVE-2026-74945 (medium, 6.5); CVE-2026-74948 (medium, 6.5); CVE-2026-74963 (medium, 5.4); CVE-2026-74967 (medium, 5.4); CVE-2026-74971 (medium, 4.3); CVE-2026-74972 (medium, 4.3); CVE-2026-74973 (medium, 4.2); CVE-2026-74974 (medium, 5.4); CVE-2026-74976 (medium, 6.5); CVE-2026-84120 (medium, 5.4); CVE-2026-84122 (medium, 5.4); CVE-2026-84124 (medium, 5.4); CVE-2026-8961 (medium, 6.5); CVE-2026-92005 (medium, 5.3); CVE-2026-92030 (medium, 5.4); CVE-2026-92031 (medium, 6.5); CVE-2026-96869 (medium, 4.3) |
transformers | 5.5.0 | ai | 13 | 1 | 12 | 0 | 0 | PYSEC-2026-2290 (critical, 9.6); GHSA-x9r9-c232-4q39 (high, 7.8); GHSA-xrqw-3rrv-vx5w (high, 7.1); PYSEC-2025-211 (high, 7.8); PYSEC-2025-212 (high, 7.8); PYSEC-2025-213 (high, 7.8); PYSEC-2025-214 (high, 7.8); PYSEC-2025-215 (high, 7.8); PYSEC-2025-216 (high, 7.8); PYSEC-2025-217 (high, 7.8); PYSEC-2025-218 (high, 7.8); PYSEC-2026-3929 (high, 7.1); PYSEC-2026-4174 (high, 7.8) | |
triton | 3.6.0 | ai | 1 | 1 | 0 | 0 | 0 | CVE-2023-30859 (critical, 9.8) | |
vim | 9.2.0078 | core | yes | 49 | 1 | 28 | 18 | 2 | CVE-2026-34714 (critical, 9.2); CVE-2026-26269 (high, 7.5); CVE-2026-28417 (high, 7.8); CVE-2026-28421 (high, 7.8); CVE-2026-33412 (high, 7.3); CVE-2026-34982 (high, 8.2); CVE-2026-35177 (high, 7.1); CVE-2026-39881 (high, 7.8); CVE-2026-43961 (high, 7.8); CVE-2026-46483 (high, 7.0); CVE-2026-47162 (high, 8.8); CVE-2026-51400 (high, 8.4); CVE-2026-51401 (high, 7.7); CVE-2026-52858 (high, 7.8); CVE-2026-52859 (high, 8.2); CVE-2026-52860 (high, 8.0); CVE-2026-55693 (high, 7.8); CVE-2026-55895 (high, 7.8); CVE-2026-57453 (high, 7.3); CVE-2026-57455 (high, 7.8); CVE-2026-57456 (high, 8.4); CVE-2026-59856 (high, 8.4); CVE-2026-59858 (high, 8.4); CVE-2026-73072 (high, 8.5); CVE-2026-73073 (high, 7.1); CVE-2026-73074 (high, 7.1); CVE-2026-73076 (high, 8.4); CVE-2026-73077 (high, 8.4); CVE-2026-73078 (high, 8.8); CVE-2008-4677 (medium, 4.3); CVE-2017-1000382 (medium, 5.5); CVE-2026-28418 (medium, 5.5); CVE-2026-28419 (medium, 6.6); CVE-2026-28420 (medium, 4.4); CVE-2026-32249 (medium, 5.5); CVE-2026-41411 (medium, 6.6); CVE-2026-42307 (medium, 4.4); CVE-2026-44656 (medium, 5.3); CVE-2026-45130 (medium, 6.6); CVE-2026-47167 (medium, 5.3); CVE-2026-55892 (medium, 5.5); CVE-2026-57451 (medium, 6.1); CVE-2026-57452 (medium, 5.5); CVE-2026-57454 (medium, 6.8); CVE-2026-59857 (medium, 5.6); CVE-2026-73070 (medium, 6.8); CVE-2026-73075 (medium, 4.6); CVE-2026-28422 (low, 2.2); CVE-2026-73071 (low, 3.3) |
x264 | 20250815 | desktop | yes | 1 | 1 | 0 | 0 | 0 | CVE-2025-25467 (critical, 9.8) |
xwayland | 24.1.9 | desktop | yes | 28 | 3 | 11 | 2 | 0 | CVE-2026-34000 (critical, 9.1); CVE-2026-34002 (critical, 9.1); CVE-2026-56000 (critical, 9.0); CVE-2026-33999 (high, 7.8); CVE-2026-34001 (high, 7.8); CVE-2026-34003 (high, 7.8); CVE-2026-50256 (high, 7.8); CVE-2026-50257 (high, 7.8); CVE-2026-50258 (high, 7.8); CVE-2026-50259 (high, 7.8); CVE-2026-50260 (high, 7.8); CVE-2026-50261 (high, 7.8); CVE-2026-50264 (high, 7.8); CVE-2026-55999 (high, 8.5); CVE-2026-50262 (medium, 5.5); CVE-2026-50263 (medium, 5.5); CVE-2026-88812 (unscored); CVE-2026-93515 (unscored); CVE-2026-93516 (unscored); CVE-2026-93517 (unscored); CVE-2026-93518 (unscored); CVE-2026-93519 (unscored); CVE-2026-93520 (unscored); CVE-2026-93521 (unscored); CVE-2026-93522 (unscored); CVE-2026-93523 (unscored); CVE-2026-93524 (unscored); CVE-2026-93536 (unscored) |
zip | 3.0 | base | yes | 1 | 1 | 0 | 0 | 0 | CVE-2018-13410 (critical, 9.8) |
Mako | 1.3.10 | desktop | yes | 6 | 0 | 5 | 1 | 0 | CVE-2026-41205 (high, 7.7); GHSA-2h4p-vjrc-8xpq (high, 8.7); GHSA-v92g-xgxw-vvmm (high, 7.7); PYSEC-2026-2617 (high, 8.7); PYSEC-2026-88 (high, 7.7); GHSA-5639-2j2p-m4mx (medium, 6.5) |
accelerate | 1.14.0 | ai | 2 | 0 | 2 | 0 | 0 | GHSA-4j2p-28q2-5m79 (high, 7.1); PYSEC-2026-3804 (high, 7.1) | |
accountsservice | 23.13.9 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2023-3297 (high, 8.1) |
acl | 2.3.2 | core | yes | 2 | 0 | 2 | 0 | 0 | CVE-2026-54369 (high, 8.4); CVE-2026-54370 (high, 7.2) |
aiohttp | 3.13.5 | core | yes | 42 | 0 | 33 | 9 | 0 | CVE-2026-34993 (high, 7.3); CVE-2026-47265 (high, 7.5); CVE-2026-50269 (high, 7.5); CVE-2026-54273 (high, 7.5); CVE-2026-54274 (high, 7.5); CVE-2026-54275 (high, 7.5); CVE-2026-54277 (high, 7.5); CVE-2026-54278 (high, 7.5); CVE-2026-54279 (high, 7.5); CVE-2026-54280 (high, 7.5); CVE-2026-69244 (high, 7.1); GHSA-2fqr-mr3j-6wp8 (high, 7.5); GHSA-4fvr-rgm6-gqmc (high, 7.5); GHSA-4m7w-qmgq-4wj5 (high, 7.5); GHSA-63hw-fmq6-xxg2 (high, 7.5); GHSA-9x8q-7h8h-wcw9 (high, 7.5); GHSA-cq5v-8q36-5273 (high, 7.1); GHSA-g3cq-j2xw-wf74 (high, 7.5); GHSA-hg6j-4rv6-33pg (high, 7.5); GHSA-jg22-mg44-37j8 (high, 7.3); GHSA-m6qw-4cw2-hm4m (high, 7.5); GHSA-xcgm-r5h9-7989 (high, 7.5); PYSEC-2026-2104 (high, 7.3); PYSEC-2026-2105 (high, 7.5); PYSEC-2026-2106 (high, 7.5); PYSEC-2026-2107 (high, 7.5); PYSEC-2026-2108 (high, 7.5); PYSEC-2026-2110 (high, 7.5); PYSEC-2026-2111 (high, 7.5); PYSEC-2026-2112 (high, 7.5); PYSEC-2026-2113 (high, 7.5); PYSEC-2026-237 (high, 7.5); PYSEC-2026-3545 (high, 7.1); CVE-2026-54276 (medium, 6.3); CVE-2026-59881 (medium, 6.9); CVE-2026-69243 (medium, 6.3); GHSA-hpj7-wq8m-9hgp (medium, 6.3); GHSA-mfx4-hv73-q22v (medium, 6.3); GHSA-mq44-7p77-q5h7 (medium, 6.9); PYSEC-2026-2109 (medium, 6.3); PYSEC-2026-3546 (medium, 6.3); PYSEC-2026-3547 (medium, 6.9) |
alsa-lib | 1.2.15.3 | desktop | yes | 5 | 0 | 1 | 4 | 0 | CVE-2026-56109 (high, 7.0); CVE-2026-25068 (medium, 4.6); CVE-2026-90781 (medium, 4.8); CVE-2026-96674 (medium, 4.8); CVE-2026-96675 (medium, 4.8) |
attr | 2.5.2 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-54371 (high, 8.4) |
avahi | 0.8 | desktop | yes | 14 | 0 | 1 | 13 | 0 | CVE-2021-26720 (high, 7.8); CVE-2021-3468 (medium, 5.5); CVE-2023-38469 (medium, 6.2); CVE-2023-38470 (medium, 6.2); CVE-2023-38471 (medium, 6.2); CVE-2023-38472 (medium, 6.2); CVE-2023-38473 (medium, 6.2); CVE-2024-52615 (medium, 5.3); CVE-2025-59529 (medium, 5.5); CVE-2025-68276 (medium, 5.5); CVE-2025-68468 (medium, 6.5); CVE-2025-68471 (medium, 6.5); CVE-2026-24401 (medium, 6.5); CVE-2026-34933 (medium, 5.5) |
bash-completion | 2.17.0 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2018-7738 (high, 7.8) |
binutils | 2.46.0 | core | yes | 32 | 0 | 9 | 18 | 5 | CVE-2025-66862 (high, 7.5); CVE-2025-66863 (high, 7.5); CVE-2025-66864 (high, 7.5); CVE-2025-66865 (high, 7.5); CVE-2025-66866 (high, 7.5); CVE-2026-18220 (high, 7.8); CVE-2026-3441 (high, 7.1); CVE-2026-3442 (high, 7.1); CVE-2026-6846 (high, 7.8); CVE-2017-13716 (medium, 5.5); CVE-2018-20673 (medium, 5.5); CVE-2018-20712 (medium, 6.5); CVE-2018-9996 (medium, 5.5); CVE-2021-32256 (medium, 6.5); CVE-2026-15003 (medium, 5.6); CVE-2026-19548 (medium, 5.5); CVE-2026-4647 (medium, 6.1); CVE-2026-6844 (medium, 5.5); CVE-2026-6845 (medium, 5.0); CVE-2026-90801 (medium, 6.6); CVE-2026-90802 (medium, 4.4); CVE-2026-90803 (medium, 6.8); CVE-2026-90804 (medium, 6.1); CVE-2026-90828 (medium, 6.6); CVE-2026-90829 (medium, 5.3); CVE-2026-90830 (medium, 5.3); CVE-2026-90831 (medium, 5.3); CVE-2025-66861 (low, 2.5); CVE-2026-91779 (low, 3.3); CVE-2026-91780 (low, 3.3); CVE-2026-91781 (low, 3.3); CVE-2026-91782 (low, 3.3) |
bison | 3.8.2 | core | yes | 2 | 0 | 1 | 1 | 0 | CVE-2026-56389 (high, 8.6); CVE-2026-56390 (medium, 6.3) |
bluez | 5.86 | desktop | yes | 21 | 0 | 6 | 14 | 0 | CVE-2016-9917 (high, 7.5); CVE-2016-9918 (high, 7.5); CVE-2023-44431 (high, 8.0); CVE-2023-51596 (high, 7.1); CVE-2026-19774 (high, 7.1); CVE-2026-80186 (high, 7.6); CVE-2016-9797 (medium, 5.3); CVE-2016-9798 (medium, 5.3); CVE-2016-9799 (medium, 5.3); CVE-2016-9800 (medium, 5.3); CVE-2016-9801 (medium, 5.3); CVE-2016-9802 (medium, 5.3); CVE-2016-9803 (medium, 5.3); CVE-2016-9804 (medium, 5.3); CVE-2023-51580 (medium, 5.7); CVE-2023-51589 (medium, 5.7); CVE-2023-51592 (medium, 5.7); CVE-2023-51594 (medium, 5.7); CVE-2026-75032 (medium, 6.3); CVE-2026-80185 (medium, 5.7); CVE-2026-85218 (unscored) |
brotli | 1.2.0 | core | yes | 2 | 0 | 2 | 0 | 0 | GHSA-2qfp-q593-8484 (high, 7.5); GHSA-fc2v-vcwj-269v (high, 7.5) |
bubblewrap | 0.11.0 | desktop | yes | 2 | 0 | 2 | 0 | 0 | CVE-2026-41163 (high, 8.7); CVE-2026-87766 (high, 8.8) |
buildah | 1.45.0 | extra | 5 | 0 | 1 | 3 | 1 | GHSA-874v-pj72-92f3 (high, 8.6); CVE-2022-4122 (medium, 5.3); CVE-2026-79705 (medium, 4.5); GHSA-fhqq-8f65-5xfc (medium, 4.7); CVE-2022-4123 (low, 3.3) | |
busybox-static | 1.37.0 | core | yes | 18 | 0 | 8 | 7 | 2 | CVE-2018-1000500 (high, 8.1); CVE-2026-29004 (high, 8.8); CVE-2026-38752 (high, 7.5); CVE-2026-38753 (high, 7.5); CVE-2026-38754 (high, 7.5); CVE-2026-38755 (high, 7.5); CVE-2026-88830 (high, 7.5); CVE-2026-88832 (high, 7.3); CVE-2025-60876 (medium, 6.5); CVE-2026-108119 (medium, 6.3); CVE-2026-88831 (medium, 5.3); CVE-2026-88835 (medium, 6.1); CVE-2026-88837 (medium, 6.5); CVE-2026-88839 (medium, 6.7); CVE-2026-88840 (medium, 5.3); CVE-2025-46394 (low, 3.3); CVE-2026-76014 (low, 3.3); CVE-2026-88841 (unscored) |
c-ares | 1.34.6 | core | yes | 3 | 0 | 2 | 1 | 0 | CVE-2026-33630 (high, 7.5); CVE-2026-69184 (high, 7.5); CVE-2026-69186 (medium, 5.3) |
caddy | 2.11.3 | extra | 12 | 0 | 6 | 6 | 0 | CVE-2026-45135 (high, 8.1); CVE-2026-52844 (high, 7.5); CVE-2026-52845 (high, 8.1); GHSA-f59h-q822-g45g (high, 8.1); GHSA-qppj-fm5r-hxr3 (high, 7.5); GHSA-qrp7-cvwr-j2c6 (high, 7.5); CVE-2026-45692 (medium, 5.4); CVE-2026-52846 (medium, 4.2); CVE-2026-77281 (medium, 6.5); GHSA-j8px-rmrx-76h9 (medium, 6.9); GHSA-vcc4-2c75-vc9v (medium, 4.2); GHSA-wwhq-w58m-w29c (medium, 4.0) | |
cairosvg | 2.9.0 | extra | 2 | 0 | 2 | 0 | 0 | CVE-2026-31899 (high, 7.5); GHSA-c3jg-qh8m-j3h2 (high, 8.7) | |
composer | 2.10.2 | extra | 2 | 0 | 1 | 1 | 0 | CVE-2026-84361 (high, 7.7); CVE-2026-59944 (medium, 6.1) | |
coreutils | 9.10 | core | yes | 4 | 0 | 1 | 3 | 0 | CVE-2017-18018 (high, 7.1); CVE-2025-5278 (medium, 4.4); CVE-2026-56391 (medium, 6.1); CVE-2026-56392 (medium, 6.1) |
cups | 2.4.16 | desktop | yes | 21 | 0 | 3 | 10 | 5 | CVE-2014-8166 (high, 8.8); CVE-2026-34980 (high, 7.5); CVE-2026-34990 (high, 7.8); CVE-2022-26691 (medium, 6.7); CVE-2026-107655 (medium, 4.0); CVE-2026-107888 (medium, 5.1); CVE-2026-27447 (medium, 6.3); CVE-2026-34978 (medium, 6.5); CVE-2026-34979 (medium, 5.3); CVE-2026-39314 (medium, 6.2); CVE-2026-39316 (medium, 6.2); CVE-2026-41079 (medium, 5.4); CVE-2026-87875 (medium, 4.3); CVE-2026-105326 (low, 2.5); CVE-2026-107885 (low, 3.3); CVE-2026-107886 (low, 2.3); CVE-2026-107890 (low, 3.3); CVE-2026-87876 (low, 3.0); CVE-2026-55453 (unscored); CVE-2026-55480 (unscored); CVE-2026-61702 (unscored) |
cups-filters | 2.0.1 | desktop | yes | 3 | 0 | 2 | 1 | 0 | CVE-2024-47850 (high, 7.5); CVE-2026-64612 (high, 7.5); CVE-2025-64524 (medium, 5.5) |
cyrus-sasl | 2.1.28 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-107161 (high, 7.5) |
docker | 29.5.2 | extra | 4 | 0 | 3 | 1 | 0 | GHSA-pxq6-2prw-chj9 (high, 8.4); GHSA-rg2x-37c3-w2rh (high, 7.2); GHSA-x86f-5xw2-fm2r (high, 7.5); GHSA-vp62-88p7-qqf5 (medium, 6.1) | |
editorconfig-core-c | 0.12.9 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-40489 (high, 8.6) |
elfutils | 0.194 | core | yes | 7 | 0 | 3 | 4 | 0 | CVE-2025-1352 (high, 7.5); CVE-2025-1365 (high, 7.8); CVE-2025-1372 (high, 7.8); CVE-2024-25260 (medium, 4.0); CVE-2025-1371 (medium, 5.5); CVE-2025-1376 (medium, 4.7); CVE-2025-1377 (medium, 5.5) |
elfutils-libdw | 0.194 | extra | yes | 7 | 0 | 3 | 4 | 0 | CVE-2025-1352 (high, 7.5); CVE-2025-1365 (high, 7.8); CVE-2025-1372 (high, 7.8); CVE-2024-25260 (medium, 4.0); CVE-2025-1371 (medium, 5.5); CVE-2025-1376 (medium, 4.7); CVE-2025-1377 (medium, 5.5) |
etcd | 3.6.11 | extra | 9 | 0 | 8 | 1 | 0 | CVE-2022-34038 (high, 7.5); CVE-2026-59818 (high, 8.1); CVE-2026-73499 (high, 7.1); CVE-2026-73500 (high, 8.7); GHSA-6vch-q96h-7gc3 (high, 8.7); GHSA-q8m4-xhhv-38mg (high, 8.8); GHSA-qppj-fm5r-hxr3 (high, 7.5); GHSA-xg4h-6gfc-h4m8 (high, 7.1); GHSA-rfx7-8w68-q57q (medium, 6.5) | |
evince | 48.1 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-46529 (high, 8.4) |
exiv2 | 0.28.7 | desktop | yes | 12 | 0 | 3 | 6 | 0 | CVE-2018-14338 (high, 8.1); CVE-2026-25884 (high, 8.1); CVE-2026-27596 (high, 7.5); CVE-2020-18773 (medium, 6.5); CVE-2020-18774 (medium, 6.5); CVE-2020-18898 (medium, 6.5); CVE-2026-27631 (medium, 5.3); GHSA-496f-x7cq-cq39 (medium, 5.5); GHSA-m54q-mm9w-fp6g (medium, 5.5); CVE-2026-49275 (unscored); CVE-2026-68546 (unscored); CVE-2026-68547 (unscored) |
expat | 2.7.4 | core | yes | 26 | 0 | 8 | 18 | 0 | CVE-2026-102633 (high, 8.2); CVE-2026-41080 (high, 7.5); CVE-2026-45186 (high, 7.5); CVE-2026-66046 (high, 8.7); CVE-2026-76956 (high, 7.5); CVE-2026-76957 (high, 7.8); CVE-2026-77214 (high, 8.3); CVE-2026-93990 (high, 8.7); CVE-2025-66382 (medium, 5.5); CVE-2026-32776 (medium, 5.5); CVE-2026-32777 (medium, 5.5); CVE-2026-32778 (medium, 5.5); CVE-2026-50219 (medium, 5.9); CVE-2026-56131 (medium, 4.9); CVE-2026-56132 (medium, 6.9); CVE-2026-56403 (medium, 6.9); CVE-2026-56404 (medium, 6.9); CVE-2026-56405 (medium, 6.9); CVE-2026-56406 (medium, 6.9); CVE-2026-56407 (medium, 6.9); CVE-2026-56408 (medium, 6.9); CVE-2026-56409 (medium, 6.5); CVE-2026-56410 (medium, 6.9); CVE-2026-56411 (medium, 6.9); CVE-2026-56412 (medium, 5.9); CVE-2026-72522 (medium, 6.2) |
fsspec | 2025.9.0 | ai | 2 | 0 | 2 | 0 | 0 | CVE-2026-104851 (high, 8.8); GHSA-27vj-qcqg-25rc (high, 8.8) | |
fuse3 | 3.18.1 | core | yes | 4 | 0 | 2 | 2 | 0 | CVE-2019-14860 (high, 7.4); CVE-2026-33150 (high, 7.8); CVE-2019-14900 (medium, 6.5); CVE-2026-33179 (medium, 5.5) |
gdk-pixbuf | 2.44.5 | desktop | yes | 4 | 0 | 1 | 3 | 0 | CVE-2026-5201 (high, 7.5); CVE-2026-16768 (medium, 5.3); CVE-2026-18090 (medium, 6.1); CVE-2026-81893 (medium, 4.7) |
gegl | 0.4.66 | desktop | yes | 2 | 0 | 1 | 1 | 0 | CVE-2026-18300 (high, 7.8); CVE-2026-103641 (medium, 5.5) |
giflib | 5.2.2 | desktop | yes | 5 | 0 | 3 | 2 | 0 | CVE-2025-31344 (high, 7.3); CVE-2026-23868 (high, 7.0); CVE-2026-26740 (high, 8.2); CVE-2023-39742 (medium, 5.5); CVE-2024-45993 (medium, 6.5) |
git | 2.53.0 | core | yes | 14 | 0 | 6 | 8 | 0 | CVE-2022-24975 (high, 7.5); CVE-2022-30947 (high, 7.5); CVE-2022-36882 (high, 8.8); CVE-2022-36883 (high, 7.5); CVE-2024-52005 (high, 8.8); CVE-2025-66413 (high, 7.4); CVE-2018-1000021 (medium, 5.0); CVE-2018-1000110 (medium, 5.3); CVE-2018-1000182 (medium, 6.4); CVE-2019-1003010 (medium, 4.3); CVE-2020-2136 (medium, 5.4); CVE-2021-21684 (medium, 6.1); CVE-2022-36884 (medium, 5.3); CVE-2022-38663 (medium, 6.5) |
gnome-keyring | 48.0 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2018-19358 (high, 7.8) |
gopls | 0.21.1 | extra | 1 | 0 | 1 | 0 | 0 | CVE-2026-42503 (high, 8.8) | |
graphite2 | 1.3.14 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-50593 (high, 7.3) |
graphviz | 14.1.2 | desktop | 1 | 0 | 1 | 0 | 0 | CVE-2019-11023 (high, 8.8) | |
grub | 2.14 | core | yes | 2 | 0 | 1 | 1 | 0 | CVE-2025-61662 (high, 7.8); CVE-2024-56738 (medium, 5.3) |
gst-plugins-bad | 1.28.1 | desktop | yes | 20 | 0 | 11 | 8 | 1 | CVE-2026-18295 (high, 7.8); CVE-2026-18296 (high, 7.8); CVE-2026-18297 (high, 7.8); CVE-2026-18298 (high, 7.8); CVE-2026-18299 (high, 7.8); CVE-2026-19387 (high, 7.6); CVE-2026-52719 (high, 7.1); CVE-2026-52720 (high, 8.8); CVE-2026-52722 (high, 7.1); CVE-2026-59691 (high, 7.1); CVE-2026-59692 (high, 7.5); CVE-2026-12891 (medium, 4.3); CVE-2026-12892 (medium, 4.4); CVE-2026-52718 (medium, 6.5); CVE-2026-52721 (medium, 5.3); CVE-2026-53701 (medium, 6.5); CVE-2026-53702 (medium, 6.5); CVE-2026-73433 (medium, 6.6); CVE-2026-73434 (medium, 6.1); CVE-2026-14935 (low, 3.7) |
gst-plugins-base | 1.28.1 | desktop | yes | 8 | 0 | 6 | 2 | 0 | CVE-2026-18295 (high, 7.8); CVE-2026-18296 (high, 7.8); CVE-2026-18297 (high, 7.8); CVE-2026-18298 (high, 7.8); CVE-2026-18299 (high, 7.8); CVE-2026-85150 (high, 7.5); CVE-2026-73433 (medium, 6.6); CVE-2026-73434 (medium, 6.1) |
gst-plugins-ugly | 1.28.1 | desktop | yes | 10 | 0 | 8 | 2 | 0 | CVE-2026-18295 (high, 7.8); CVE-2026-18296 (high, 7.8); CVE-2026-18297 (high, 7.8); CVE-2026-18298 (high, 7.8); CVE-2026-18299 (high, 7.8); CVE-2026-19389 (high, 7.1); CVE-2026-53703 (high, 7.1); CVE-2026-53704 (high, 7.1); CVE-2026-73433 (medium, 6.6); CVE-2026-73434 (medium, 6.1) |
gstreamer | 1.28.1 | desktop | yes | 7 | 0 | 5 | 2 | 0 | CVE-2026-18295 (high, 7.8); CVE-2026-18296 (high, 7.8); CVE-2026-18297 (high, 7.8); CVE-2026-18298 (high, 7.8); CVE-2026-18299 (high, 7.8); CVE-2026-73433 (medium, 6.6); CVE-2026-73434 (medium, 6.1) |
gvfs | 1.58.2 | desktop | yes | 7 | 0 | 2 | 5 | 0 | CVE-2026-84268 (high, 8.8); CVE-2026-88924 (high, 7.0); CVE-2026-28295 (medium, 4.3); CVE-2026-28296 (medium, 4.3); CVE-2026-84267 (medium, 4.3); CVE-2026-84269 (medium, 6.5); CVE-2026-84270 (medium, 4.3) |
iptables | 1.8.12 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2012-2663 (high, 7.5) |
kbd | 2.9.0 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-72693 (high, 7.8) |
lcms2 | 2.18 | desktop | yes | 3 | 0 | 2 | 1 | 0 | CVE-2025-29070 (high, 7.5); CVE-2026-41254 (high, 7.5); CVE-2026-42798 (medium, 4.0) |
lego | 5.0.2 | extra | 2 | 0 | 1 | 0 | 1 | GHSA-qqx8-2xmm-jrv8 (high, 8.8); GHSA-q82r-2j7m-9rv4 (low, 2.3) | |
lib32-alsa-lib | 1.2.15.3 | desktop | 5 | 0 | 1 | 4 | 0 | CVE-2026-56109 (high, 7.0); CVE-2026-25068 (medium, 4.6); CVE-2026-90781 (medium, 4.8); CVE-2026-96674 (medium, 4.8); CVE-2026-96675 (medium, 4.8) | |
lib32-elfutils | 0.194 | core | 7 | 0 | 3 | 4 | 0 | CVE-2025-1352 (high, 7.5); CVE-2025-1365 (high, 7.8); CVE-2025-1372 (high, 7.8); CVE-2024-25260 (medium, 4.0); CVE-2025-1371 (medium, 5.5); CVE-2025-1376 (medium, 4.7); CVE-2025-1377 (medium, 5.5) | |
lib32-expat | 2.7.4 | core | 26 | 0 | 8 | 18 | 0 | CVE-2026-102633 (high, 8.2); CVE-2026-41080 (high, 7.5); CVE-2026-45186 (high, 7.5); CVE-2026-66046 (high, 8.7); CVE-2026-76956 (high, 7.5); CVE-2026-76957 (high, 7.8); CVE-2026-77214 (high, 8.3); CVE-2026-93990 (high, 8.7); CVE-2025-66382 (medium, 5.5); CVE-2026-32776 (medium, 5.5); CVE-2026-32777 (medium, 5.5); CVE-2026-32778 (medium, 5.5); CVE-2026-50219 (medium, 5.9); CVE-2026-56131 (medium, 4.9); CVE-2026-56132 (medium, 6.9); CVE-2026-56403 (medium, 6.9); CVE-2026-56404 (medium, 6.9); CVE-2026-56405 (medium, 6.9); CVE-2026-56406 (medium, 6.9); CVE-2026-56407 (medium, 6.9); CVE-2026-56408 (medium, 6.9); CVE-2026-56409 (medium, 6.5); CVE-2026-56410 (medium, 6.9); CVE-2026-56411 (medium, 6.9); CVE-2026-56412 (medium, 5.9); CVE-2026-72522 (medium, 6.2) | |
lib32-libX11 | 1.8.13 | desktop | 4 | 0 | 1 | 3 | 0 | CVE-2026-88806 (high, 7.5); CVE-2026-94283 (medium, 6.5); CVE-2026-94284 (medium, 5.5); CVE-2026-94285 (medium, 5.1) | |
lib32-libXrender | 0.9.12 | desktop | 1 | 0 | 1 | 0 | 0 | CVE-2026-88807 (high, 8.9) | |
lib32-libsndfile | 1.2.2 | desktop | 7 | 0 | 3 | 4 | 0 | CVE-2025-52194 (high, 7.5); CVE-2026-37555 (high, 8.2); CVE-2026-88372 (high, 7.5); CVE-2024-50612 (medium, 5.5); CVE-2024-50613 (medium, 6.5); CVE-2025-56226 (medium, 5.3); CVE-2026-88386 (medium, 5.5) | |
lib32-systemd-libs | 259.1 | core | 15 | 0 | 1 | 13 | 1 | CVE-2026-40224 (high, 7.3); CVE-2013-4392 (medium, 5.0); CVE-2023-31437 (medium, 5.3); CVE-2023-31438 (medium, 5.3); CVE-2023-31439 (medium, 5.3); CVE-2026-15059 (medium, 5.5); CVE-2026-15060 (medium, 4.7); CVE-2026-16742 (medium, 6.7); CVE-2026-29111 (medium, 5.5); CVE-2026-40223 (medium, 5.5); CVE-2026-40225 (medium, 6.4); CVE-2026-40226 (medium, 6.4); CVE-2026-40227 (medium, 6.2); CVE-2026-4105 (medium, 6.7); CVE-2026-40228 (low, 3.3) | |
lib32-zlib | 1.3.2 | core | 1 | 0 | 1 | 0 | 0 | CVE-2026-85091 (high, 8.3) | |
libX11 | 1.8.13 | desktop | yes | 4 | 0 | 1 | 3 | 0 | CVE-2026-88806 (high, 7.5); CVE-2026-94283 (medium, 6.5); CVE-2026-94284 (medium, 5.5); CVE-2026-94285 (medium, 5.1) |
libXi | 1.8.2 | desktop | yes | 7 | 0 | 1 | 6 | 0 | CVE-2026-93543 (high, 7.4); CVE-2026-93541 (medium, 6.5); CVE-2026-93542 (medium, 6.5); CVE-2026-93544 (medium, 6.5); CVE-2026-93545 (medium, 6.5); CVE-2026-94281 (medium, 6.5); CVE-2026-94282 (medium, 5.6) |
libXrender | 0.9.12 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-88807 (high, 8.9) |
libXtst | 1.2.5 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-94286 (high, 7.1) |
libaom | 3.13.1 | desktop | yes | 4 | 0 | 4 | 0 | 0 | CVE-2026-56208 (high, 7.6); CVE-2026-56209 (high, 7.1); CVE-2026-56210 (high, 7.1); CVE-2026-56211 (high, 7.1) |
libcap | 2.77 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-4878 (high, 7.0) |
libcdio | 2.1.0 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2024-36600 (high, 8.4) |
libcupsfilters | 2.1.1 | desktop | yes | 3 | 0 | 2 | 1 | 0 | CVE-2026-64611 (high, 7.5); CVE-2026-64612 (high, 7.5); CVE-2025-64503 (medium, 4.0) |
libde265 | 1.0.16 | desktop | yes | 13 | 0 | 6 | 7 | 0 | CVE-2026-33164 (high, 8.7); CVE-2026-49295 (high, 7.1); CVE-2026-49346 (high, 7.1); CVE-2026-54240 (high, 7.4); CVE-2026-54241 (high, 7.4); CVE-2026-88373 (high, 7.5); CVE-2024-38949 (medium, 6.5); CVE-2024-38950 (medium, 6.5); CVE-2025-61147 (medium, 6.2); CVE-2026-33165 (medium, 5.5); CVE-2026-45382 (medium, 6.9); CVE-2026-45383 (medium, 6.9); CVE-2026-49337 (medium, 4.3) |
libexif | 0.6.25 | desktop | yes | 3 | 0 | 3 | 0 | 0 | CVE-2026-32775 (high, 7.8); CVE-2026-40385 (high, 7.1); CVE-2026-40386 (high, 7.1) |
libgcrypt | 1.12.0 | core | yes | 4 | 0 | 1 | 3 | 0 | CVE-2018-6829 (high, 7.5); CVE-2024-2236 (medium, 5.9); CVE-2026-41989 (medium, 6.7); CVE-2026-41990 (medium, 4.0) |
libid3tag | 0.15.1b | extra | yes | 3 | 0 | 1 | 2 | 0 | CVE-2004-2779 (high, 7.5); CVE-2017-11550 (medium, 5.5); CVE-2017-11551 (medium, 5.5) |
libjxl | 0.11.2 | desktop | yes | 2 | 0 | 1 | 1 | 0 | CVE-2021-36691 (high, 7.5); CVE-2026-82522 (medium, 5.4) |
libpcap | 1.10.6 | desktop | yes | 7 | 0 | 1 | 6 | 0 | CVE-2026-0799 (high, 8.7); CVE-2026-18238 (medium, 5.0); CVE-2026-18313 (medium, 4.3); CVE-2026-31911 (medium, 5.5); CVE-2026-31912 (medium, 5.5); CVE-2026-6244 (medium, 5.5); CVE-2026-6554 (medium, 5.5) |
libpng | 1.6.55 | desktop | yes | 6 | 0 | 2 | 3 | 0 | CVE-2026-33416 (high, 7.5); CVE-2026-33636 (high, 7.6); CVE-2021-4214 (medium, 5.5); CVE-2026-34757 (medium, 5.1); CVE-2026-3713 (medium, 5.3); CVE-2026-46675 (unscored) |
libreoffice | 26.2.1.2 | extra | yes | 23 | 0 | 5 | 18 | 0 | CVE-2018-10583 (high, 7.5); CVE-2026-4430 (high, 7.8); CVE-2026-6040 (high, 7.3); CVE-2026-63277 (high, 8.5); CVE-2026-8357 (high, 7.8); CVE-2012-5639 (medium, 6.5); CVE-2026-6039 (medium, 5.4); CVE-2026-6045 (medium, 5.4); CVE-2026-6047 (medium, 5.4); CVE-2026-63266 (medium, 6.8); CVE-2026-63267 (medium, 6.7); CVE-2026-63268 (medium, 6.7); CVE-2026-63269 (medium, 6.7); CVE-2026-63270 (medium, 6.7); CVE-2026-63272 (medium, 5.4); CVE-2026-63273 (medium, 5.4); CVE-2026-63274 (medium, 5.4); CVE-2026-63275 (medium, 5.4); CVE-2026-63276 (medium, 5.4); CVE-2026-63278 (medium, 6.7); CVE-2026-63279 (medium, 5.4); CVE-2026-8356 (medium, 5.4); CVE-2026-8358 (medium, 5.4) |
librsvg | 2.61.4 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-96889 (high, 7.8) |
libslirp | 4.7.0 | extra | yes | 3 | 0 | 1 | 1 | 0 | CVE-2026-95508 (high, 7.4); CVE-2026-9539 (medium, 6.5); CVE-2026-95507 (unscored) |
libsndfile | 1.2.2 | desktop | yes | 7 | 0 | 3 | 4 | 0 | CVE-2025-52194 (high, 7.5); CVE-2026-37555 (high, 8.2); CVE-2026-88372 (high, 7.5); CVE-2024-50612 (medium, 5.5); CVE-2024-50613 (medium, 6.5); CVE-2025-56226 (medium, 5.3); CVE-2026-88386 (medium, 5.5) |
libsoup3 | 3.6.6 | desktop | yes | 36 | 0 | 16 | 19 | 1 | CVE-2025-32049 (high, 7.5); CVE-2026-0719 (high, 8.6); CVE-2026-102555 (high, 8.2); CVE-2026-102556 (high, 8.6); CVE-2026-102557 (high, 8.6); CVE-2026-102558 (high, 8.6); CVE-2026-102559 (high, 8.6); CVE-2026-102560 (high, 8.6); CVE-2026-15709 (high, 7.5); CVE-2026-15711 (high, 7.5); CVE-2026-2436 (high, 8.2); CVE-2026-3099 (high, 7.3); CVE-2026-4271 (high, 7.5); CVE-2026-5119 (high, 8.2); CVE-2026-66338 (high, 7.2); CVE-2026-85197 (high, 7.6); CVE-2025-4035 (medium, 4.3); CVE-2025-9901 (medium, 5.9); CVE-2026-103399 (medium, 5.3); CVE-2026-12478 (medium, 4.8); CVE-2026-12548 (medium, 4.2); CVE-2026-12549 (medium, 4.8); CVE-2026-15712 (medium, 5.9); CVE-2026-15713 (medium, 5.9); CVE-2026-15714 (medium, 6.5); CVE-2026-2708 (medium, 5.3); CVE-2026-3632 (medium, 5.5); CVE-2026-3633 (medium, 6.5); CVE-2026-3634 (medium, 6.5); CVE-2026-6324 (medium, 4.8); CVE-2026-66337 (medium, 6.5); CVE-2026-66339 (medium, 6.5); CVE-2026-77014 (medium, 5.3); CVE-2026-77680 (medium, 5.3); CVE-2026-85534 (medium, 5.9); CVE-2026-12547 (low, 3.4) |
libtheora | 1.2.0 | extra | 1 | 0 | 1 | 0 | 0 | CVE-2026-5673 (high, 7.1) | |
libvirt | 12.5.0 | extra | yes | 6 | 0 | 2 | 2 | 1 | CVE-2026-18917 (high, 7.8); CVE-2026-63622 (high, 7.8); CVE-2026-63623 (medium, 5.5); CVE-2026-77159 (medium, 5.5); CVE-2026-61477 (low, 2.3); CVE-2026-61478 (unscored) |
libvncserver | 0.9.15 | extra | yes | 1 | 0 | 1 | 0 | 0 | CVE-2019-15680 (high, 7.5) |
libvpx | 1.16.0 | desktop | yes | 1 | 0 | 1 | 0 | 0 | GHSA-qqvq-6xgj-jw8g (high, 8.8) |
libxml2 | 2.15.1 | core | yes | 17 | 0 | 9 | 4 | 4 | CVE-2026-11979 (high, 7.8); CVE-2026-6732 (high, 7.5); CVE-2026-74860 (high, 8.5); CVE-2026-86138 (high, 7.8); CVE-2026-86139 (high, 7.8); CVE-2026-86140 (high, 8.0); CVE-2026-86142 (high, 7.8); CVE-2026-86143 (high, 7.3); CVE-2026-86144 (high, 7.8); CVE-2026-0990 (medium, 5.9); CVE-2026-1757 (medium, 6.2); CVE-2026-76781 (medium, 5.5); CVE-2026-86137 (medium, 6.1); CVE-2025-8732 (low, 3.3); CVE-2026-0989 (low, 3.7); CVE-2026-0992 (low, 2.9); CVE-2026-86141 (low, 3.3) |
libxslt | 1.1.45 | core | yes | 2 | 0 | 1 | 1 | 0 | CVE-2025-7425 (high, 7.8); CVE-2015-9019 (medium, 5.3) |
lxml | 6.0.2 | core | yes | 4 | 0 | 4 | 0 | 0 | CVE-2026-41066 (high, 7.5); CVE-2026-49825 (high, 8.2); GHSA-vfmq-68hx-4jfw (high, 7.5); PYSEC-2026-87 (high, 7.5) |
m4 | 1.4.21 | core | yes | 2 | 0 | 2 | 0 | 0 | CVE-2008-1687 (high, 7.5); CVE-2008-1688 (high, 7.5) |
markdown | 3.10.2 | desktop | yes | 1 | 0 | 1 | 0 | 0 | PYSEC-2026-89 (high, 8.2) |
mingw-w64-binutils | 2.46.0 | extra | 32 | 0 | 9 | 18 | 5 | CVE-2025-66862 (high, 7.5); CVE-2025-66863 (high, 7.5); CVE-2025-66864 (high, 7.5); CVE-2025-66865 (high, 7.5); CVE-2025-66866 (high, 7.5); CVE-2026-18220 (high, 7.8); CVE-2026-3441 (high, 7.1); CVE-2026-3442 (high, 7.1); CVE-2026-6846 (high, 7.8); CVE-2017-13716 (medium, 5.5); CVE-2018-20673 (medium, 5.5); CVE-2018-20712 (medium, 6.5); CVE-2018-9996 (medium, 5.5); CVE-2021-32256 (medium, 6.5); CVE-2026-15003 (medium, 5.6); CVE-2026-19548 (medium, 5.5); CVE-2026-4647 (medium, 6.1); CVE-2026-6844 (medium, 5.5); CVE-2026-6845 (medium, 5.0); CVE-2026-90801 (medium, 6.6); CVE-2026-90802 (medium, 4.4); CVE-2026-90803 (medium, 6.8); CVE-2026-90804 (medium, 6.1); CVE-2026-90828 (medium, 6.6); CVE-2026-90829 (medium, 5.3); CVE-2026-90830 (medium, 5.3); CVE-2026-90831 (medium, 5.3); CVE-2025-66861 (low, 2.5); CVE-2026-91779 (low, 3.3); CVE-2026-91780 (low, 3.3); CVE-2026-91781 (low, 3.3); CVE-2026-91782 (low, 3.3) | |
mingw-w64-tools | 14.0.0 | extra | 1 | 0 | 1 | 0 | 0 | CVE-2018-5392 (high, 7.5) | |
mitkrb | 1.22.2 | core | yes | 7 | 0 | 5 | 2 | 0 | CVE-2018-5709 (high, 7.5); CVE-2024-26461 (high, 7.5); CVE-2026-107778 (high, 7.1); CVE-2026-40355 (high, 7.5); CVE-2026-40356 (high, 7.5); CVE-2024-26458 (medium, 5.3); CVE-2026-107708 (medium, 6.9) |
mupdf | 1.26.12 | desktop | yes | 11 | 0 | 9 | 2 | 0 | CVE-2023-51103 (high, 7.5); CVE-2023-51104 (high, 7.5); CVE-2023-51105 (high, 7.5); CVE-2023-51106 (high, 7.5); CVE-2023-51107 (high, 7.5); CVE-2025-55780 (high, 7.5); CVE-2025-71382 (high, 7.1); CVE-2026-25556 (high, 7.5); CVE-2026-3308 (high, 7.8); CVE-2026-40505 (medium, 4.8); CVE-2026-7233 (medium, 6.1) |
nghttp2 | 1.68.1 | core | yes | 2 | 0 | 1 | 1 | 0 | GHSA-qppj-fm5r-hxr3 (high, 7.5); CVE-2026-58055 (medium, 6.3) |
nmap | 7.991 | extra | 1 | 0 | 1 | 0 | 0 | CVE-2018-15173 (high, 7.5) | |
ntfs-3g | 2026.2.25 | core | yes | 9 | 0 | 7 | 2 | 0 | CVE-2026-42616 (high, 7.8); CVE-2026-42617 (high, 7.1); CVE-2026-42618 (high, 7.1); CVE-2026-46569 (high, 7.7); CVE-2026-46570 (high, 8.1); CVE-2026-46572 (high, 7.4); CVE-2026-56135 (high, 7.4); CVE-2026-46571 (medium, 5.5); CVE-2026-56136 (medium, 4.7) |
openjpeg2 | 2.5.4 | desktop | yes | 13 | 0 | 5 | 8 | 0 | CVE-2016-9113 (high, 7.5); CVE-2016-9114 (high, 7.5); CVE-2016-9580 (high, 8.8); CVE-2016-9581 (high, 8.8); CVE-2018-16376 (high, 8.8); CVE-2016-10505 (medium, 6.5); CVE-2016-9115 (medium, 6.5); CVE-2016-9116 (medium, 6.5); CVE-2016-9117 (medium, 6.5); CVE-2019-6988 (medium, 6.5); CVE-2023-39327 (medium, 4.3); CVE-2023-39328 (medium, 5.5); CVE-2023-39329 (medium, 6.5) |
openldap | 2.6.12 | core | yes | 5 | 0 | 2 | 3 | 0 | CVE-2015-3276 (high, 7.5); CVE-2017-17740 (high, 7.5); CVE-2017-14159 (medium, 4.7); CVE-2020-15719 (medium, 4.2); CVE-2026-22185 (medium, 4.6) |
openvpn | 2.7.6 | extra | 6 | 0 | 2 | 0 | 1 | CVE-2020-27569 (high, 7.5); CVE-2026-84732 (high, 8.7); CVE-2026-63650 (low, 2.0); CVE-2026-84471 (unscored); CVE-2026-84790 (unscored); CVE-2026-88964 (unscored) | |
opusfile | 0.12 | extra | yes | 1 | 0 | 1 | 0 | 0 | CVE-2022-47021 (high, 7.8) |
patch | 2.8 | core | yes | 6 | 0 | 2 | 4 | 0 | CVE-2018-6951 (high, 7.5); CVE-2018-6952 (high, 7.5); CVE-2010-4651 (medium, 5.8); CVE-2021-45261 (medium, 5.5); CVE-2026-56288 (medium, 5.5); CVE-2026-56289 (medium, 5.5) |
pcre2 | 10.47 | core | yes | 8 | 0 | 4 | 3 | 1 | CVE-2026-103111 (high, 7.6); CVE-2026-86145 (high, 8.2); CVE-2026-89157 (high, 7.4); CVE-2026-89161 (high, 7.8); CVE-2026-89156 (medium, 5.9); CVE-2026-89158 (medium, 6.5); CVE-2026-89160 (medium, 6.5); CVE-2026-89162 (low, 3.3) |
pillow | 12.3.0 | ai | 1 | 0 | 1 | 0 | 0 | GHSA-j7hp-h8jx-5ppr (high, 8.8) | |
pipewire | 1.6.0 | desktop | yes | 3 | 0 | 1 | 2 | 0 | CVE-2026-5674 (high, 8.8); CVE-2026-14324 (medium, 6.5); CVE-2026-14330 (medium, 5.5) |
podman | 5.8.2 | extra | 10 | 0 | 6 | 2 | 1 | CVE-2026-57231 (high, 7.5); GHSA-65gg-3w2w-hr4h (high, 8.3); GHSA-hc8w-h2mf-hp59 (high, 8.8); GHSA-m68q-4hqr-mc6f (high, 7.4); GHSA-rpcc-p8xm-rc6p (high, 7.7); GHSA-wp3j-xq48-xpjw (high, 8.1); CVE-2025-11395 (medium, 5.5); CVE-2026-19730 (medium, 4.2); GHSA-rprg-4v7q-87v7 (low, 3.3); CVE-2026-94603 (unscored) | |
poppler | 26.02.0 | desktop | yes | 16 | 0 | 7 | 6 | 3 | CVE-2017-2814 (high, 8.8); CVE-2017-2818 (high, 8.8); CVE-2017-2820 (high, 8.8); CVE-2019-9543 (high, 8.8); CVE-2019-9545 (high, 8.8); CVE-2022-24106 (high, 7.8); CVE-2026-107705 (high, 8.3); CVE-2017-9083 (medium, 6.5); CVE-2026-93311 (medium, 4.3); CVE-2026-93312 (medium, 4.3); CVE-2026-93313 (medium, 6.3); CVE-2026-93314 (medium, 6.3); CVE-2026-93653 (medium, 5.5); CVE-2013-4472 (low, 3.3); CVE-2026-102620 (low, 3.3); CVE-2026-102621 (low, 3.3) |
postgresql | 18.3 | extra | 42 | 0 | 28 | 11 | 3 | CVE-2016-1255 (high, 7.8); CVE-2019-3466 (high, 7.8); CVE-2026-14662 (high, 8.8); CVE-2026-14664 (high, 8.8); CVE-2026-14668 (high, 8.1); CVE-2026-14669 (high, 8.8); CVE-2026-14670 (high, 8.8); CVE-2026-14671 (high, 8.8); CVE-2026-14676 (high, 8.8); CVE-2026-14677 (high, 8.8); CVE-2026-14679 (high, 8.2); CVE-2026-14680 (high, 8.8); CVE-2026-15741 (high, 8.8); CVE-2026-15742 (high, 8.8); CVE-2026-16238 (high, 8.8); CVE-2026-16239 (high, 8.8); CVE-2026-18408 (high, 8.8); CVE-2026-19385 (high, 8.8); CVE-2026-6464 (high, 8.1); CVE-2026-6471 (high, 7.2); CVE-2026-6473 (high, 8.8); CVE-2026-6475 (high, 8.8); CVE-2026-6476 (high, 7.2); CVE-2026-6477 (high, 8.8); CVE-2026-6478 (high, 8.2); CVE-2026-6479 (high, 7.5); CVE-2026-6637 (high, 8.8); CVE-2026-6638 (high, 8.8); CVE-2017-8806 (medium, 5.5); CVE-2026-14663 (medium, 6.5); CVE-2026-14666 (medium, 4.2); CVE-2026-14672 (medium, 5.3); CVE-2026-14678 (medium, 4.3); CVE-2026-14681 (medium, 4.2); CVE-2026-18024 (medium, 4.3); CVE-2026-6470 (medium, 4.3); CVE-2026-6472 (medium, 5.4); CVE-2026-6474 (medium, 4.3); CVE-2026-6575 (medium, 4.3); CVE-2026-14673 (low, 3.8); CVE-2026-16241 (low, 3.8); CVE-2026-6469 (low, 3.8) | |
protobuf | 33.5 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2015-5237 (high, 8.8) |
python-joblib | 1.5.3 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2024-34997 (high, 7.5) |
python-urllib3 | 2.7.0 | extra | yes | 9 | 0 | 6 | 3 | 0 | CVE-2026-97687 (high, 7.6); CVE-2026-97689 (high, 8.9); GHSA-8988-9cw3-xx77 (high, 7.6); GHSA-vxq7-64xx-v4gw (high, 8.9); PYSEC-2026-4175 (high, 7.6); PYSEC-2026-4177 (high, 8.9); CVE-2026-97688 (medium, 6.9); GHSA-gh4c-6fx4-qh6g (medium, 6.9); PYSEC-2026-4176 (medium, 6.9) |
rapidjson | 0.0.0+master.20250205 | extra | yes | 2 | 0 | 2 | 0 | 0 | CVE-2024-38517 (high, 7.8); CVE-2024-39684 (high, 7.8) |
rccl | 7.2.4 | compute | 1 | 0 | 1 | 0 | 0 | CVE-2026-43598 (high, 7.7) | |
rpm | 4.18.2 | core | yes | 14 | 0 | 13 | 1 | 0 | CVE-2010-2198 (high, 7.2); CVE-2010-2199 (high, 7.2); CVE-2017-7500 (high, 7.8); CVE-2017-7501 (high, 7.8); CVE-2026-103242 (high, 7.1); CVE-2026-44604 (high, 7.0); CVE-2026-78367 (high, 7.0); CVE-2026-84233 (high, 7.0); CVE-2026-84837 (high, 7.8); CVE-2026-84838 (high, 7.8); CVE-2026-95519 (high, 7.8); CVE-2026-95520 (high, 7.1); CVE-2026-95521 (high, 7.8); CVE-2026-44605 (medium, 5.5) |
ruby | 4.0.1 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-46727 (high, 8.1) |
runc | 1.3.5 | extra | 6 | 0 | 2 | 2 | 2 | GHSA-2cgq-h8xw-2v5j (high, 7.2); GHSA-cgrx-mc8f-2prm (high, 7.5); GHSA-j3rw-fx6g-q46j (medium, 5.3); GHSA-wwrx-w7c9-rf87 (medium, 4.5); CVE-2026-41579 (low, 3.3); GHSA-xjvp-4fhw-gc47 (low, 3.3) | |
sane-backends | 1.4.0 | desktop | yes | 2 | 0 | 2 | 0 | 0 | CVE-2023-46047 (high, 7.3); CVE-2023-46052 (high, 7.1) |
sassc | 3.6.2 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2022-43357 (high, 7.5) |
sd | 1.0.0 | extra | 2 | 0 | 2 | 0 | 0 | CVE-2025-65807 (high, 8.4); GHSA-qwcc-2r77-5w2f (high, 8.4) | |
setuptools | 82.0.0 | core | yes | 4 | 0 | 1 | 3 | 0 | CVE-2026-23949 (high, 8.6); CVE-2026-59890 (medium, 6.1); GHSA-h35f-9h28-mq5c (medium, 6.1); PYSEC-2026-3447 (medium, 6.1) |
sqlite | 3510200 | core | yes | 2 | 0 | 1 | 1 | 0 | CVE-2025-70873 (high, 7.5); CVE-2021-45346 (medium, 4.3) |
sudo | 1.9.17p2 | core | yes | 3 | 0 | 2 | 0 | 1 | CVE-2026-35535 (high, 7.8); CVE-2026-82474 (high, 8.5); CVE-2005-1119 (low, 2.1) |
systemd | 259.1 | core | yes | 15 | 0 | 1 | 13 | 1 | CVE-2026-40224 (high, 7.3); CVE-2013-4392 (medium, 5.0); CVE-2023-31437 (medium, 5.3); CVE-2023-31438 (medium, 5.3); CVE-2023-31439 (medium, 5.3); CVE-2026-15059 (medium, 5.5); CVE-2026-15060 (medium, 4.7); CVE-2026-16742 (medium, 6.7); CVE-2026-29111 (medium, 5.5); CVE-2026-40223 (medium, 5.5); CVE-2026-40225 (medium, 6.4); CVE-2026-40226 (medium, 6.4); CVE-2026-40227 (medium, 6.2); CVE-2026-4105 (medium, 6.7); CVE-2026-40228 (low, 3.3) |
torchvision | 0.25.0 | ai | 1 | 0 | 1 | 0 | 0 | CVE-2026-65918 (high, 7.1) | |
udisks2 | 2.11.1 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-7867 (high, 7.8) |
unzip | 6.0 | base | yes | 14 | 0 | 4 | 8 | 2 | CVE-2014-8139 (high, 7.8); CVE-2014-8140 (high, 7.8); CVE-2014-8141 (high, 7.8); CVE-2018-1000035 (high, 7.8); CVE-2014-9636 (medium, 5.0); CVE-2014-9913 (medium, 4.0); CVE-2015-7696 (medium, 6.8); CVE-2015-7697 (medium, 4.3); CVE-2016-9844 (medium, 4.0); CVE-2018-18384 (medium, 5.5); CVE-2022-0529 (medium, 5.5); CVE-2022-0530 (medium, 5.5); CVE-2019-13232 (low, 3.3); CVE-2021-4217 (low, 3.3) |
util-linux | 2.41.3 | core | yes | 12 | 0 | 4 | 4 | 0 | CVE-2026-76642 (high, 8.5); CVE-2026-78408 (high, 7.9); CVE-2026-78409 (high, 7.0); CVE-2026-78410 (high, 7.8); CVE-2022-0563 (medium, 5.5); CVE-2026-13595 (medium, 6.8); CVE-2026-27456 (medium, 4.7); CVE-2026-3184 (medium, 5.3); CVE-2026-53612 (unscored); CVE-2026-53613 (unscored); CVE-2026-53614 (unscored); CVE-2026-53615 (unscored) |
valkey | 9.0.4 | extra | 9 | 0 | 5 | 1 | 3 | CVE-2026-23479 (high, 8.8); CVE-2026-23631 (high, 8.8); CVE-2026-25243 (high, 8.8); CVE-2026-56684 (high, 7.5); CVE-2026-63639 (high, 8.8); CVE-2026-85522 (medium, 5.5); CVE-2026-82631 (low, 2.2); CVE-2026-82677 (low, 2.4); CVE-2026-86227 (low, 3.1) | |
vorbis-tools | 1.4.3 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-34253 (high, 8.2) |
wget | 1.25.0 | core | yes | 6 | 0 | 3 | 3 | 0 | CVE-2026-58469 (high, 8.7); CVE-2026-58471 (high, 7.1); CVE-2026-58472 (high, 7.1); CVE-2021-31879 (medium, 6.1); CVE-2026-16599 (medium, 5.1); CVE-2026-58470 (medium, 6.9) |
wine | 11.12 | extra | 1 | 0 | 1 | 0 | 0 | CVE-2026-48831 (high, 7.3) | |
wpa_supplicant | 2.11 | core | yes | 3 | 0 | 2 | 1 | 0 | CVE-2019-5062 (high, 7.4); CVE-2026-78807 (high, 7.1); CVE-2017-13084 (medium, 6.8) |
xdg-dbus-proxy | 0.1.6 | desktop | yes | 3 | 0 | 1 | 1 | 1 | CVE-2026-94422 (high, 8.8); CVE-2026-34080 (medium, 6.8); CVE-2026-93676 (low, 3.2) |
xdg-user-dirs | 0.19 | desktop | yes | 1 | 0 | 1 | 0 | 0 | CVE-2017-15131 (high, 7.8) |
xdg-utils | 1.2.1 | desktop | yes | 3 | 0 | 1 | 1 | 1 | CVE-2022-4055 (high, 7.4); CVE-2020-27748 (medium, 6.5); CVE-2025-52968 (low, 2.7) |
zlib | 1.3.2 | core | yes | 1 | 0 | 1 | 0 | 0 | CVE-2026-85091 (high, 8.3) |
bzip2 | 1.0.8 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-42250 (medium, 4.8) |
cairo | 1.18.4 | desktop | yes | 3 | 0 | 0 | 2 | 1 | CVE-2017-7475 (medium, 5.5); CVE-2018-18064 (medium, 6.5); CVE-2025-50422 (low, 2.9) |
cpio | 2.15 | core | yes | 3 | 0 | 0 | 3 | 0 | CVE-2026-66484 (medium, 4.6); CVE-2026-66485 (medium, 4.6); CVE-2026-66486 (medium, 4.6) |
crun | 1.27.1 | extra | 3 | 0 | 0 | 3 | 0 | CVE-2026-47766 (medium, 5.1); CVE-2026-88264 (medium, 5.6); CVE-2026-88265 (medium, 5.6) | |
datasets | 4.3.0 | ai | 3 | 0 | 0 | 3 | 0 | CVE-2026-66007 (medium, 6.9); GHSA-379c-qx7v-6h59 (medium, 6.9); PYSEC-2026-3716 (medium, 6.9) | |
dnsmasq | 2.93 | extra | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-13002 (medium, 4.4) |
docker-buildx | 0.36.1 | extra | 1 | 0 | 0 | 1 | 0 | CVE-2026-103433 (medium, 6.9) | |
duktape | 2.7.0 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-12216 (medium, 5.3) |
efivar | 39 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-6862 (medium, 5.5) |
file-roller | 44.6 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-78322 (medium, 6.5) |
flex | 2.6.4 | core | yes | 2 | 0 | 0 | 2 | 0 | CVE-2015-1773 (medium, 4.3); CVE-2019-6293 (medium, 5.5) |
freetype-grub | 2.14.1 | core | yes | 3 | 0 | 0 | 3 | 0 | CVE-2026-23865 (medium, 5.3); CVE-2026-50811 (medium, 6.5); CVE-2026-95512 (medium, 5.5) |
freetype2 | 2.14.1 | desktop | yes | 3 | 0 | 0 | 3 | 0 | CVE-2026-23865 (medium, 5.3); CVE-2026-50811 (medium, 6.5); CVE-2026-95512 (medium, 5.5) |
glib-networking | 2.80.1 | desktop | yes | 4 | 0 | 0 | 2 | 1 | CVE-2025-60018 (medium, 4.8); CVE-2026-10028 (medium, 4.3); CVE-2025-60019 (low, 3.7); CVE-2026-2574 (unscored) |
glslang | 16.2.0 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2025-3010 (medium, 4.8) |
gnome-control-center | 49.4 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2023-5616 (medium, 4.9) |
gnome-settings-daemon | 49.1 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2024-38394 (medium, 4.3) |
gnome-shell | 49.4 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-91786 (medium, 6.1) |
gnome-tweaks | 49.0 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-74859 (medium, 6.8) |
gnupg2 | 2.5.17 | core | yes | 2 | 0 | 0 | 1 | 1 | CVE-2025-68972 (medium, 5.9); CVE-2022-3219 (low, 3.3) |
go | 1.26.8 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2023-49292 (medium, 4.9) |
jq | 1.8.2 | base | yes | 2 | 0 | 0 | 2 | 0 | CVE-2025-9403 (medium, 5.5); CVE-2026-44777 (medium, 5.5) |
lib32-p11-kit | 0.26.2 | core | 2 | 0 | 0 | 2 | 0 | CVE-2026-13757 (medium, 6.2); CVE-2026-18938 (medium, 6.2) | |
libXpm | 3.5.18 | desktop | yes | 2 | 0 | 0 | 2 | 0 | CVE-2026-4367 (medium, 5.5); CVE-2026-94287 (medium, 5.5) |
libfyaml | 0.9.4 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-88359 (medium, 6.5) |
libgphoto2 | 2.5.33 | desktop | yes | 8 | 0 | 0 | 5 | 3 | CVE-2026-40333 (medium, 6.1); CVE-2026-40335 (medium, 5.2); CVE-2026-40338 (medium, 5.2); CVE-2026-40339 (medium, 5.2); CVE-2026-40340 (medium, 6.1); CVE-2026-40334 (low, 3.5); CVE-2026-40336 (low, 2.4); CVE-2026-40341 (low, 3.5) |
libical | 3.0.20 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-88383 (medium, 6.2) |
librest | 0.10.2 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-16615 (medium, 6.8) |
libtpms | 0.10.2 | extra | yes | 2 | 0 | 0 | 2 | 0 | CVE-2026-6727 (medium, 5.9); CVE-2026-85769 (medium, 6.5) |
libusb | 1.0.29 | core | yes | 2 | 0 | 0 | 2 | 0 | CVE-2026-23679 (medium, 6.9); CVE-2026-47104 (medium, 5.5) |
lvm2 | 2.03.38 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-19617 (medium, 5.5) |
multidict | 6.7.1 | core | yes | 1 | 0 | 0 | 1 | 0 | GHSA-54p9-h82j-f925 (medium, 5.3) |
nano | 8.7.1 | core | yes | 3 | 0 | 0 | 2 | 1 | CVE-2026-6390 (medium, 6.8); CVE-2026-6843 (medium, 5.5); CVE-2026-6842 (low, 2.5) |
numpy | 2.4.2 | extra | yes | 3 | 0 | 0 | 3 | 0 | CVE-2021-34141 (medium, 5.3); CVE-2021-41495 (medium, 5.3); CVE-2021-41496 (medium, 5.5) |
openconnect | 9.21 | extra | 1 | 0 | 0 | 1 | 0 | CVE-2020-12105 (medium, 5.9) | |
os-prober | 1.84 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2008-5135 (medium, 6.2) |
p11-kit | 0.26.2 | core | yes | 2 | 0 | 0 | 2 | 0 | CVE-2026-13757 (medium, 6.2); CVE-2026-18938 (medium, 6.2) |
pixman | 0.46.4 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2023-37769 (medium, 6.5) |
pytest | 9.1.1 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2025-71176 (medium, 6.8) |
rhythmbox | 3.4.9 | extra | yes | 1 | 0 | 0 | 1 | 0 | CVE-2008-7185 (medium, 4.3) |
rsyslog | 8.2608.0 | extra | 3 | 0 | 0 | 1 | 0 | CVE-2015-3243 (medium, 5.5); CVE-2026-92709 (unscored); CVE-2026-93402 (unscored) | |
sbc | 2.2 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-16473 (medium, 4.3) |
seahorse | 47.0.1 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2008-7320 (medium, 6.8) |
shadow | 4.19.3 | core | yes | 2 | 0 | 0 | 1 | 1 | CVE-2007-5686 (medium, 4.9); CVE-2024-56433 (low, 3.6) |
shadow-pam | 4.19.3 | core | yes | 2 | 0 | 0 | 1 | 1 | CVE-2007-5686 (medium, 4.9); CVE-2024-56433 (low, 3.6) |
soupsieve | 2.9.1 | core | 2 | 0 | 0 | 2 | 0 | CVE-2026-85999 (medium, 5.3); CVE-2026-86000 (medium, 5.3) | |
spice-gtk | 0.42 | extra | yes | 1 | 0 | 0 | 1 | 0 | CVE-2016-3066 (medium, 6.5) |
swtpm | 0.10.1 | extra | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-75900 (medium, 6.1) |
tcpdump | 4.99.6 | extra | 2 | 0 | 0 | 1 | 1 | CVE-2018-19519 (medium, 5.5); CVE-2019-1010220 (low, 3.3) | |
transmission | 4.1.1 | extra | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-38978 (medium, 5.3) |
usbredir | 0.15.0 | extra | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-92382 (medium, 4.1) |
vte | 0.82.3 | desktop | yes | 2 | 0 | 0 | 1 | 1 | CVE-2024-37535 (medium, 4.4); CVE-2005-0023 (low, 2.1) |
xdg-desktop-portal | 1.20.3 | desktop | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-40354 (medium, 6.3) |
xz | 5.8.2 | core | yes | 1 | 0 | 0 | 1 | 0 | CVE-2026-34743 (medium, 5.3) |
yajl | 2.1.0 | extra | 1 | 0 | 0 | 1 | 0 | CVE-2023-33460 (medium, 6.5) | |
aspell | 0.60.8.2 | desktop | yes | 3 | 0 | 0 | 0 | 3 | CVE-2026-75818 (low, 1.8); CVE-2026-75819 (low, 1.8); CVE-2026-75820 (low, 1.8) |
cmake | 4.3.1 | core | yes | 1 | 0 | 0 | 0 | 1 | CVE-2025-9301 (low, 3.3) |
diffutils | 3.12 | core | yes | 1 | 0 | 0 | 0 | 1 | CVE-2026-53910 (low, 2.1) |
fuse-overlayfs | 1.16 | extra | 1 | 0 | 0 | 0 | 1 | CVE-2026-52791 (low, 2.0) | |
gdm | 49.2 | desktop | yes | 1 | 0 | 0 | 0 | 1 | CVE-2016-1000002 (low, 2.4) |
gsl | 2.8 | extra | yes | 1 | 0 | 0 | 0 | 1 | CVE-2024-50610 (low, 3.6) |
popt | 1.19 | core | yes | 3 | 0 | 0 | 0 | 3 | CVE-2026-18739 (low, 2.5); CVE-2026-18743 (low, 2.5); CVE-2026-18839 (low, 2.2) |
pygments | 2.19.2 | core | yes | 3 | 0 | 0 | 0 | 3 | CVE-2026-4539 (low, 3.3); GHSA-5239-wwwm-4pmq (low, 3.3); PYSEC-2026-2987 (low, 3.3) |
gst-libav | 1.28.1 | desktop | yes | 2 | 0 | 0 | 0 | 0 | CVE-2026-12893 (unscored); CVE-2026-52717 (unscored) |
libass | 0.17.4 | desktop | yes | 2 | 0 | 0 | 0 | 0 | CVE-2026-61626 (unscored); CVE-2026-61627 (unscored) |
modemmanager | 1.24.2 | desktop | yes | 1 | 0 | 0 | 0 | 0 | CVE-2026-95622 (unscored) |
parted | 3.7 | core | yes | 2 | 0 | 0 | 0 | 0 | CVE-2026-89085 (unscored); CVE-2026-89088 (unscored) |
polkit | 127 | core | yes | 1 | 0 | 0 | 0 | 0 | CVE-2026-85498 (unscored) |
Source: the scan's severity table, 3,172 rows, sealed with the release's evidence. Generated from the release tree at dcc68d525.