openSUSE Tumbleweed

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-39395 CVE-2026-23991 CVE-2026-23992 CVE-2026-24122 CVE-2026-22703 CVE-2026-24137 CVE-2026-22772 CVE-2024-29902  +5 more Upstream summary: Cosign provides code signing and transparency for containers and binaries. Prior to 3.0.6 […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33154 Upstream summary: dynaconf is a configuration management tool for Python. Prior to version 3.2.13, Dynaconf is vulnerable to Server-Side Template Injection (SSTI) due to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-8947 CVE-2026-1998 Upstream summary: A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-42215 CVE-2026-44244 CVE-2026-44243 Upstream summary: GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-67859 Upstream summary: A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon's […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-45409 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30551 CVE-2026-23831 CVE-2026-24117 CVE-2023-33199 CVE-2025-29923 Upstream summary: Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2026-3605 CVE-2026-5807 CVE-2025-62513 CVE-2025-6203 CVE-2025-54996 CVE-2025-5999 CVE-2025-6000 CVE-2025-52894  +12 more Upstream summary: An authenticated user with access to a kvv2 path through a policy containing a glob may be […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-46727 CVE-2026-41316 Upstream summary: An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getaddrinfo timeout […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-18408 CVE-2025-51006 CVE-2023-27783 CVE-2023-27786 CVE-2017-6429 CVE-2018-17580 CVE-2018-17582 CVE-2019-8376  +8 more Upstream summary: A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The […]