Wolfi is a community Linux OS designed for the container and cloud-native era; it is a Linux distribution based on Alpine.

Wolfi

Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

LiteLLM is an open-source library that provides a unified interface for various large language models (LLMs). It allows developers to easily switch between different LLM providers like OpenAI, Anthropic, and others without changing their code. LiteLLM simplifies the process of working with multiple LLMs by offering a consistent API across different models and providers.

LiteLLM

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0,  This vulnerability is fixed in 1.84.0.

CVE-2026-49468

GitHub Advisory Database

Linux

Linux Kernel

Windows

Windows Cumulative Update

FFmpeg is a project consisting of a vast software suite of libraries and programs for handling video, audio, and other multimedia files and streams.

Ffmpeg

MinimOS is a minimalist operating system designed for simplicity and efficiency. It aims to provide only essential functionalities, making it lightweight and suitable for resource-constrained environments. MinimOS is often used in embedded systems or as a base for custom operating system development.

MinimOS

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.

 This vulnerability is associated with the file libavcodec/magicyuv.C.



This issue affects FFmpeg before version 8.1.2.

CVE-2026-8461

Alpine

Linux Alpine

Alpine Security Tracker

Debian

Linux Debian

Debian Security Tracker

Echo

Minimus

Ubuntu

Linux Ubuntu

Ubuntu Security Tracker

VulnCheck NVD++

Envoy is an L7 proxy and communication bus designed for large modern service-oriented architectures.

Envoy

The Amazon Linux is a supported and maintained Linux image provided by Amazon Web Services for use on Amazon Elastic Compute Cloud (Amazon EC2).

Amazon Linux

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulnerability in Envoy's HTTP/2 downstream request processing allows an unauthenticated remote client to trigger excessive memory consumption, potentially resulting in OOM termination of the Envoy process and denial of service. The issue arises from the combination of two behaviors. First, cookie header bytes are not fully accounted for during request header size validation in Envoy. Second, HPACK header block limits in oghttp2/quiche are enforced on encoded bytes without a corresponding limit on total decoded header size. Together, these behaviors allow a malicious client to cause large decoded header allocations while bypassing the intended request header size protections. Versions 1.35.11, 1.36.7, 1.37.3, and 1.38.1 contain a fix. No complete workaround is known short of applying a fix. Possible temporary mitigations include disabling downstream HTTP/2 where operationally feasible; enforcing stricter request header and cookie limits before traffic reaches Envoy; and monitoring Envoy memory usage for abnormal growth under HTTP/2 traffic.

CVE-2026-47774

JavaScript is a high-level, interpreted programming language essential for creating interactive web applications, running directly in web browsers to enable dynamic content and user interface enhancements. It is integral to the web development stack, working seamlessly with HTML and CSS to build responsive and feature-rich websites.

JavaScript

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vulnerability in vm2 allows arbitrary code execution in the host process when untrusted code is executed with async support on runtimes exposing WebAssembly JSPI (WebAssembly.promising / WebAssembly.Suspending). In the tested configuration, a JSPI-backed Promise can reach Promise.prototype.finally() in a way that bypasses the expected Promise-species hardening and exposes a host-originated rejection object to attacker-controlled species logic, breaking the sandbox boundary. This issue has been patched in version 3.11.4.

CVE-2026-47210

vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.11.4.

CVE-2026-47208

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Ubuntu is a Linux distribution based on Debian, mostly composed of free and open-source software. Ubuntu is officially released in three editions: Desktop, Server, and Core for internet of things devices and robots. All the editions can run on the computer alone or in a virtual machine.

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).

CVE-2026-9539

C# is a general-purpose, multi-paradigm programming language encompassing strong typing, lexically scoped, imperative, declarative, functional, generic, object-oriented (class-based), and component-oriented programming disciplines.

ImageMagick is a powerful open-source software suite used for manipulating and editing images. It provides a command-line interface as well as various programming interfaces for interacting with the software. ImageMagick is capable of reading, converting, and modifying a wide range of image formats.

ImageMagick

(ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerabi ...)

CVE-2026-56370

NuGet

(ImageMagick before 7.1.2-15 contains a memory leak vulnerability in mu ...)

CVE-2026-56368

Ruby is a scripting language designed for simplified object-oriented programming.

Ruby

(concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7 ...)

CVE 識別子	重大度	スコア	テクノロジー	コンポーネント名	CISA KEV エクスプロイト	修正あり	公開日
CVE-2026-49468	CRITICAL	9.5	Wolfi	airflow-3	いいえ	はい	Jun 22, 2026
CVE-2026-8461	HIGH	8.8	Ffmpeg	ffmpeg-8.1	いいえ	はい	Jun 18, 2026
CVE-2026-47774	HIGH	7.5	Envoy	cpe:2.3:a:envoyproxy:envoy	いいえ	はい	Jun 17, 2026
CVE-2026-47210	CRITICAL	9.8	JavaScript	vm2	いいえ	はい	Jun 12, 2026
CVE-2026-47208	CRITICAL	10	JavaScript	n8n	いいえ	はい	Jun 12, 2026

CVE 識別子	重大度	スコア	テクノロジー	コンポーネント名	CISA KEV エクスプロイト	修正あり	公開日
CVE-2026-9539	NONE	該当なし	Linux Debian	qemu-kvm	いいえ	はい	Jun 25, 2026
CVE-2026-56370	NONE	該当なし	C#	Magick.NET-Q16-HDRI-arm64	いいえ	はい	Jun 25, 2026
CVE-2026-56368	NONE	該当なし	C#	imagemagick	いいえ	はい	Jun 25, 2026
CVE-2026-54906	NONE	該当なし	Ruby	ruby3.2-rails-8.0	いいえ	はい	Jun 25, 2026
CVE-2026-54905	NONE	該当なし	Ruby	ruby3.4-rails-8.1	いいえ	はい	Jun 25, 2026

Wiz脆弱性データベース

テクノロジーで探す

人気のフィルター

ハイプロファイル

最新

数字で見る脆弱性

良いこと、悪いこと、そして弱者

Wizのその他のリソース

Cloud Vulnerability DB

PEACH

実際に Wiz を見てみませんか？