# Vulnerabilities published in 2026


- [SUSE-SU-2026:2030-1](https://insights.sbomify.com/SUSE-SU-2026-2030-1/): Security update for buildah (not scored)
- [SUSE-SU-2026:20203-1](https://insights.sbomify.com/SUSE-SU-2026-20203-1/): Security update for ucode-amd (not scored)
- [SUSE-SU-2026:20173-1](https://insights.sbomify.com/SUSE-SU-2026-20173-1/): Security update for ucode-amd (not scored)
- [SUSE-SU-2026:20099-1](https://insights.sbomify.com/SUSE-SU-2026-20099-1/): Security update for rust1.91, rust1.92 (not scored)
- [SUSE-SU-2026:1931-1](https://insights.sbomify.com/SUSE-SU-2026-1931-1/): Security update for podman (not scored)
- [SUSE-SU-2026:1540-1](https://insights.sbomify.com/SUSE-SU-2026-1540-1/): Security update for podman (not scored)
- [SUSE-SU-2026:1508-1](https://insights.sbomify.com/SUSE-SU-2026-1508-1/): Security update for podman (not scored)
- [SUSE-SU-2026:1495-1](https://insights.sbomify.com/SUSE-SU-2026-1495-1/): Security update for containerd (not scored)
- [SUSE-SU-2026:1494-1](https://insights.sbomify.com/SUSE-SU-2026-1494-1/): Security update for rootlesskit (not scored)
- [SUSE-SU-2026:1493-1](https://insights.sbomify.com/SUSE-SU-2026-1493-1/): Security update for rootlesskit (not scored)
- [SUSE-SU-2026:1492-1](https://insights.sbomify.com/SUSE-SU-2026-1492-1/): Security update for docker (not scored)
- [SUSE-SU-2026:1491-1](https://insights.sbomify.com/SUSE-SU-2026-1491-1/): Security update for buildah (not scored)
- [SUSE-SU-2026:1490-1](https://insights.sbomify.com/SUSE-SU-2026-1490-1/): Security update for kubernetes (not scored)
- [SUSE-SU-2026:1489-1](https://insights.sbomify.com/SUSE-SU-2026-1489-1/): Security update for kubernetes-old (not scored)
- [SUSE-SU-2026:1488-1](https://insights.sbomify.com/SUSE-SU-2026-1488-1/): Security update for rekor (not scored)
- [SUSE-SU-2026:1487-1](https://insights.sbomify.com/SUSE-SU-2026-1487-1/): Security update for runc (not scored)
- [SUSE-SU-2026:1486-1](https://insights.sbomify.com/SUSE-SU-2026-1486-1/): Security update for cosign (not scored)
- [SUSE-SU-2026:1484-1](https://insights.sbomify.com/SUSE-SU-2026-1484-1/): Security update for container-suseconnect (not scored)
- [SUSE-SU-2026:1480-1](https://insights.sbomify.com/SUSE-SU-2026-1480-1/): Security update for buildah (not scored)
- [SUSE-SU-2026:1423-1](https://insights.sbomify.com/SUSE-SU-2026-1423-1/): Security update for podman (not scored)
- [SUSE-SU-2026:1422-1](https://insights.sbomify.com/SUSE-SU-2026-1422-1/): Security update for smc-tools (not scored)
- [SUSE-SU-2026:1105-1](https://insights.sbomify.com/SUSE-SU-2026-1105-1/): Security update for containerd (not scored)
- [SUSE-SU-2026:1098-1](https://insights.sbomify.com/SUSE-SU-2026-1098-1/): Security update for cosign (not scored)
- [SUSE-SU-2026:0950-1](https://insights.sbomify.com/SUSE-SU-2026-0950-1/): Security update for docker (not scored)
- [SUSE-SU-2026:0949-1](https://insights.sbomify.com/SUSE-SU-2026-0949-1/): Security update for runc (not scored)
- [SUSE-SU-2026:0948-1](https://insights.sbomify.com/SUSE-SU-2026-0948-1/): Security update for helm (not scored)
- [SUSE-SU-2026:0917-1](https://insights.sbomify.com/SUSE-SU-2026-0917-1/): Security update for kubernetes (not scored)
- [SUSE-SU-2026:0909-1](https://insights.sbomify.com/SUSE-SU-2026-0909-1/): Security update for container-suseconnect (not scored)
- [SUSE-SU-2026:0765-1](https://insights.sbomify.com/SUSE-SU-2026-0765-1/): Security update for smc-tools (not scored)
- [SUSE-SU-2026:0694-1](https://insights.sbomify.com/SUSE-SU-2026-0694-1/): Security update for gpg2 (not scored)
- [SUSE-SU-2026:0667-1](https://insights.sbomify.com/SUSE-SU-2026-0667-1/): Security update for redis7 (not scored)
- [SUSE-SU-2026:0650-1](https://insights.sbomify.com/SUSE-SU-2026-0650-1/): Security update for redis (not scored)
- [SUSE-SU-2026:0573-1](https://insights.sbomify.com/SUSE-SU-2026-0573-1/): Security update for kubernetes-old (not scored)
- [SUSE-SU-2026:0572-1](https://insights.sbomify.com/SUSE-SU-2026-0572-1/): Security update for kubernetes (not scored)
- [SUSE-SU-2026:0571-1](https://insights.sbomify.com/SUSE-SU-2026-0571-1/): This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi (not scored)
- [SUSE-SU-2026:0480-1](https://insights.sbomify.com/SUSE-SU-2026-0480-1/): Security update for helm (not scored)
- [SUSE-SU-2026:0459-1](https://insights.sbomify.com/SUSE-SU-2026-0459-1/): Security update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda (not scored)
- [SUSE-SU-2026:0456-1](https://insights.sbomify.com/SUSE-SU-2026-0456-1/): Security update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda (not scored)
- [SUSE-SU-2026:0423-1](https://insights.sbomify.com/SUSE-SU-2026-0423-1/): Security update for python-brotlipy (not scored)
- [SUSE-SU-2026:0399-1](https://insights.sbomify.com/SUSE-SU-2026-0399-1/): Security update for kubernetes-old (not scored)
- [SUSE-SU-2026:0326-1](https://insights.sbomify.com/SUSE-SU-2026-0326-1/): Security update for helm (not scored)
- [SUSE-SU-2026:0325-1](https://insights.sbomify.com/SUSE-SU-2026-0325-1/): Security update for kubernetes (not scored)
- [SUSE-SU-2026:0319-1](https://insights.sbomify.com/SUSE-SU-2026-0319-1/): Security update for container-suseconnect (not scored)
- [SUSE-SU-2026:0305-1](https://insights.sbomify.com/SUSE-SU-2026-0305-1/): Recommended update for kernel-firmware (not scored)
- [SUSE-SU-2026:0267-1](https://insights.sbomify.com/SUSE-SU-2026-0267-1/): Recommended update for kernel-firmware (not scored)
- [SUSE-SU-2026:0216-1](https://insights.sbomify.com/SUSE-SU-2026-0216-1/): Security update for kernel-firmware (not scored)
- [RUSTSEC-2026-0419](https://insights.sbomify.com/RUSTSEC-2026-0419/): Unbounded memory use on large request bodies (not scored)
- [RUSTSEC-2026-0418](https://insights.sbomify.com/RUSTSEC-2026-0418/): libz-sys build script leaks environment variables in the build directory (not scored)
- [RUSTSEC-2026-0417](https://insights.sbomify.com/RUSTSEC-2026-0417/): Excessive CPU and memory use on crafted GraphQL documents (not scored)
- [RUSTSEC-2026-0416](https://insights.sbomify.com/RUSTSEC-2026-0416/): Stack overflow on deeply nested GraphQL documents (not scored)
- [RUSTSEC-2026-0415](https://insights.sbomify.com/RUSTSEC-2026-0415/): Unbounded memory use on large request bodies (not scored)
- [RUSTSEC-2026-0414](https://insights.sbomify.com/RUSTSEC-2026-0414/): Exponential event growth with `ENABLE_WIKILINKS` (not scored)
- [RUSTSEC-2026-0413](https://insights.sbomify.com/RUSTSEC-2026-0413/): Use-after-free of caller-owned server name in client connection constructors (not scored)
- [RUSTSEC-2026-0412](https://insights.sbomify.com/RUSTSEC-2026-0412/): Arbitrary code execution when rerunning tests from a portable recording (not scored)
- [RUSTSEC-2026-0411](https://insights.sbomify.com/RUSTSEC-2026-0411/): Out-of-bounds read in `Log2Cache::nlog2n()`, `nlog2n_difference()` and `plog2p()` (not scored)
- [RUSTSEC-2026-0410](https://insights.sbomify.com/RUSTSEC-2026-0410/): WebAssembly allocator shim corrupts memory on allocation failure (not scored)
- [RUSTSEC-2026-0409](https://insights.sbomify.com/RUSTSEC-2026-0409/): Use-after-free from a comparator that answers inconsistently (not scored)
- [RUSTSEC-2026-0408](https://insights.sbomify.com/RUSTSEC-2026-0408/): Aliasing violations in splice, mutable iteration and cursors (not scored)
- [RUSTSEC-2026-0407](https://insights.sbomify.com/RUSTSEC-2026-0407/): SSRF and local file disclosure via unvalidated URLs (not scored)
- [RUSTSEC-2026-0406](https://insights.sbomify.com/RUSTSEC-2026-0406/): Use-after-free when changing a multithreaded context with an unfinished frame (not scored)
- [RUSTSEC-2026-0405](https://insights.sbomify.com/RUSTSEC-2026-0405/): Out-of-bounds read with an out-of-range `InBuffer::pos` (not scored)
- [RUSTSEC-2026-0404](https://insights.sbomify.com/RUSTSEC-2026-0404/): Double free in `DCtx::try_clone` (not scored)
- [RUSTSEC-2026-0403](https://insights.sbomify.com/RUSTSEC-2026-0403/): Uninitialized memory exposed when streaming decompression of a legacy frame fails (not scored)
- [RUSTSEC-2026-0402](https://insights.sbomify.com/RUSTSEC-2026-0402/): Heap buffer overflow in `CCtx::try_clone` on a multithreaded context (not scored)
- [RUSTSEC-2026-0401](https://insights.sbomify.com/RUSTSEC-2026-0401/): Out-of-bounds read in `train_from_buffer` when sample sizes overflow (not scored)
- [RUSTSEC-2026-0400](https://insights.sbomify.com/RUSTSEC-2026-0400/): Use-after-free of a dictionary after a one-shot call on a context with an open stream (not scored)
- [RUSTSEC-2026-0399](https://insights.sbomify.com/RUSTSEC-2026-0399/): Use-after-free through `init_using_cdict` and `init_using_ddict` (not scored)
- [RUSTSEC-2026-0398](https://insights.sbomify.com/RUSTSEC-2026-0398/): `Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end (not scored)
- [RUSTSEC-2026-0397](https://insights.sbomify.com/RUSTSEC-2026-0397/): `OutBuffer::around_pos` exposes uninitialized memory (not scored)
- [RUSTSEC-2026-0396](https://insights.sbomify.com/RUSTSEC-2026-0396/): `Seekable` reads a NULL or out-of-bounds seek table (not scored)
- [RUSTSEC-2026-0395](https://insights.sbomify.com/RUSTSEC-2026-0395/): Use-after-free with `CParameter::StableInBuffer` (not scored)
- [RUSTSEC-2026-0394](https://insights.sbomify.com/RUSTSEC-2026-0394/): Build environment compiled into the library and readable at runtime (not scored)
- [RUSTSEC-2026-0393](https://insights.sbomify.com/RUSTSEC-2026-0393/): Out-of-bounds read when training a dictionary from inconsistent sample sizes (not scored)
- [RUSTSEC-2026-0392](https://insights.sbomify.com/RUSTSEC-2026-0392/): Uninitialized memory exposed by `write::Decoder` on a corrupt legacy frame (not scored)
- [RUSTSEC-2026-0391](https://insights.sbomify.com/RUSTSEC-2026-0391/): Data from an abandoned stream leaks into the next stream on a reused context (not scored)
- [RUSTSEC-2026-0387](https://insights.sbomify.com/RUSTSEC-2026-0387/): Multiple timing variability issues in operations intended to be constant-time (not scored)
- [RUSTSEC-2026-0386](https://insights.sbomify.com/RUSTSEC-2026-0386/): `AsyncFd::new` and related constructors violate I/O safety (not scored)
- [RUSTSEC-2026-0377](https://insights.sbomify.com/RUSTSEC-2026-0377/): `wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook (not scored)
- [RUSTSEC-2026-0376](https://insights.sbomify.com/RUSTSEC-2026-0376/): `wasi-http`: Guests can add conflicting content lengths to messages (not scored)
- [RUSTSEC-2026-0375](https://insights.sbomify.com/RUSTSEC-2026-0375/): `wasi-http` p3: Guests can set incorrect content-length for spliced response bodies (not scored)
- [RUSTSEC-2026-0374](https://insights.sbomify.com/RUSTSEC-2026-0374/): `basic-toml` is unmaintained (not scored)
- [RUSTSEC-2026-0373](https://insights.sbomify.com/RUSTSEC-2026-0373/): Missing case-insensitive matching for CSS url function (not scored)
- [RUSTSEC-2026-0372](https://insights.sbomify.com/RUSTSEC-2026-0372/): `zvariant_derive` is unmaintained (not scored)
- [RUSTSEC-2026-0371](https://insights.sbomify.com/RUSTSEC-2026-0371/): `zbus_names` is unmaintained (not scored)
- [RUSTSEC-2026-0370](https://insights.sbomify.com/RUSTSEC-2026-0370/): `zvariant` is unmaintained (not scored)
- [RUSTSEC-2026-0369](https://insights.sbomify.com/RUSTSEC-2026-0369/): `ZipStreamReader::extract()` applies Unix permissions through extracted symlinks without validating the symlink target stays within the dest (not scored)
- [RUSTSEC-2026-0368](https://insights.sbomify.com/RUSTSEC-2026-0368/): In `zip` 9.0.0-pre2, `ZipArchive::extract` creates a symbolic link from an archive entry after validating only the output entry path. (not scored)
- [RUSTSEC-2026-0367](https://insights.sbomify.com/RUSTSEC-2026-0367/): Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation (not scored)
- [RUSTSEC-2026-0366](https://insights.sbomify.com/RUSTSEC-2026-0366/): Stack overflow when parsing deeply nested input in pest_grammars (not scored)
- [RUSTSEC-2026-0365](https://insights.sbomify.com/RUSTSEC-2026-0365/): Remote DoS through unchecked `IdList` allocation in negentropy (not scored)
- [RUSTSEC-2026-0345](https://insights.sbomify.com/RUSTSEC-2026-0345/): Untrusted labels can inject SVG attributes, CSS values, and terminal escape sequences (not scored)
- [RUSTSEC-2026-0344](https://insights.sbomify.com/RUSTSEC-2026-0344/): Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM) (not scored)
- [RUSTSEC-2026-0343](https://insights.sbomify.com/RUSTSEC-2026-0343/): Outgoing datagram buffer accounting can panic the sender in quinn-proto (not scored)
- [RUSTSEC-2026-0342](https://insights.sbomify.com/RUSTSEC-2026-0342/): Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto (not scored)
- [RUSTSEC-2026-0340](https://insights.sbomify.com/RUSTSEC-2026-0340/): Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled (not scored)
- [RUSTSEC-2026-0339](https://insights.sbomify.com/RUSTSEC-2026-0339/): Unbounded growth of pending connection ID retirements in quinn-proto (not scored)
- [RUSTSEC-2026-0338](https://insights.sbomify.com/RUSTSEC-2026-0338/): Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads (not scored)
- [RUSTSEC-2026-0337](https://insights.sbomify.com/RUSTSEC-2026-0337/): Poly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or more (not scored)
- [RUSTSEC-2026-0336](https://insights.sbomify.com/RUSTSEC-2026-0336/): MIKEY message MAC is never verified on receive, so forged messages are accepted (not scored)
- [RUSTSEC-2026-0335](https://insights.sbomify.com/RUSTSEC-2026-0335/): Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/4/