Ecosystem
Wolfi
8,530 known vulnerabilities.
Most affected packages
chromium 3,268
chromium-docker-selenium-compat 1,659
chromium-lang 1,659
firefox 662
open-webui 273
langfuse-3-worker 249
katib-suggestion-hyperopt 237
katib-earlystopping 228
katib-suggestion-hyperband 222
katib-suggestion-pbt-enas 222
katib-suggestion-optuna-enas 222
katib-suggestion-skopt-enas 222
katib-suggestion-nas-darts 220
katib-suggestion-goptuna-compat 217
druid 214
katib-suggestion-nas-enas 210
katib-tfevent-metricscollector 208
renovate 199
thingsboard-tb-node 190
zot 183
kubescape 179
thingsboard-tb-mqtt-transport 178
prism 175
kots 171
zarf 165
k3d 162
openjdk-9-jre 162
opensearch-dashboards-3 158
skaffold 150
trivy 146
aactl 146
langfuse-3 145
k3s 144
scorecard 143
kubeflow-pipelines-apiserver 143
trino 142
airflow-3 141
k3s-static 141
helm-3 136
k3s-static-1.32 134
3,545 results · Clear filters · Feed
-
High 7.5
Excessive resource consumption in PackBits decompression in golang.org/x/image/tiff
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image (both in terms of pixel width/height and encoded size) to make the decoder decode large amounts of compressed …
-
High 8.8
Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to…
-
High 7.5
Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a mal…
-
High 8.3
Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote…
-
High 8.8
Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code insi…
-
High 8.3
Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised t…
-
High 8.8
Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code in…
-
High 8.3
Use after free in WebMIDI in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had comprom…
-
High 8.8
Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod…
-
High 8.3
Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rende…
-
High 7.5
Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…
-
High 8.8
Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code insi…
-
High 7.5
Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a …
-
High 7.5
Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convince…
-
High 8.3
Use after free in PerformanceManager in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had comprom…
-
High 7.5
Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to enga…
-
High 8.8
Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap…
-
High 8.8CVE-2026-9999 Public exploit
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to exec…
-
High 8.3CVE-2026-9998 Public exploit
Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…
-
High 8.3
Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compr…
-
High 8.3CVE-2026-9997 Public exploit
Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rend…
-
High 8.8
Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code in…
-
High 8.3
Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromise…
-
High 8.3
Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rend…
-
High 8.8
Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code …
-
High 7.5
Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convince…
-
High 7.8
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowe…
-
High 8.3
Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.216 allowed a remote attacker to potentially per…
-
High 8.8
Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary…
-
High 8.8
Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code ins…
-
High 8.3
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker …
-
High 8.8
Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code ins…
-
High 8.3
Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 148.0.7778.216 allowed a re…
-
High 8.3
Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the r…
-
High 8.8
Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbit…
-
High 8.3
Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compro…
-
High 8.8CVE-2026-9973 Public exploit
Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code …
-
High 8.3
Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromi…
-
High 8.8
Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code ins…
-
High 8.8
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker …