openSUSE

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:0769-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-30499 CVE-2021-30498 CVE-2026-42046 CVE-2018-20547 CVE-2022-0856 CVE-2021-3410 CVE-2018-20548 CVE-2018-20544  +3 more Upstream summary: A flaw was found in libcaca. A buffer overflow of export.c in function […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02809-1 Related CVEs: CVE-2025-58266 CVE-2024-43806 Upstream summary: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fumiki Takahashi Gianism gianism allows Stored XSS.This issue affects Gianism: from n/a through […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10081-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1996 CVE-2026-33814 CVE-2026-35205 CVE-2026-35204 CVE-2024-45337 CVE-2021-21272 CVE-2022-36055 CVE-2026-41888  +7 more Upstream summary: Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20590-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-8746 Upstream summary: A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:3807-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-48041 Upstream summary: Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-28231 Upstream summary: pillow_heif is a Python library for working with HEIF images and plugin for Pillow. Prior to version 1.3.0, an integer overflow in […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-7324 CVE-2026-6746 CVE-2026-6747 CVE-2026-6748 CVE-2026-6749 CVE-2026-6750 CVE-2026-6751 CVE-2026-6752  +12 more Upstream summary: Memory safety bugs present in Thunderbird 150.0.0. Some of these bugs showed evidence […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-44774 CVE-2026-35051 CVE-2026-39858 CVE-2025-47952 CVE-2024-45410 CVE-2026-40912 CVE-2026-32695 CVE-2026-26999  +12 more Upstream summary: Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1459-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-25725 CVE-2026-26081 CVE-2024-45506 CVE-2018-20103 CVE-2018-20615 CVE-2019-14241 CVE-2020-11100 CVE-2021-39240  +12 more Upstream summary: HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers […]