Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

4 briefs RSS
medium advisory

Multiple Vulnerabilities in PostgreSQL JDBC Driver

The PostgreSQL JDBC Driver is susceptible to multiple vulnerabilities, including CVE-2022-21724 and CVE-2022-31197, that allow remote attackers to manipulate data and disclose sensitive information.

PostgreSQL JDBC Driver
2c
critical advisory

PyJWT Asymmetric-PEM Detection Bypass Leading to Algorithm Confusion

An incomplete asymmetric-key guard in PyJWT (CVE-2026-102268) allows specially formatted public keys to be used as HMAC secrets, enabling universal token forgery when applications misconfigure algorithm allow-lists.

PyJWT +1 jwt authentication-bypass cve-2026-102268 library-vulnerability
1t 2c
medium advisory

Remote Code Execution Vulnerability in zlib

A memory corruption vulnerability in the zlib library allows a remote, unauthenticated attacker to execute arbitrary code or trigger a denial of service.

zlib
1t 1c
high advisory

CRI-O Environment Variable Injection Vulnerability (CVE-2026-15809)

A critical vulnerability, CVE-2026-15809, in CRI-O allows an attacker with the ability to set container environment variables to bypass a previous fix (CVE-2022-4318), inject a newline character into the HOME environment variable, and add arbitrary lines to /etc/passwd, potentially leading to privilege escalation or persistence within the container.

CRI-O +2 container linux vulnerability privilege-escalation persistence
1r 1t 2c