linuxfoundation Vulnerability Advisory Catalog

Total 533 security vulnerabilities recorded for linuxfoundation software and firmware.

← Back to All Vendors
Component: onnx

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ...

📅 2026-04-01
CVSS 8.6 Dossier →
Component: onnx

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability...

📅 2026-04-01
CVSS 7.5 Dossier →
CVE-2026-33701 CRITICAL
Component: opentelemetry_instrumentation_for_java

OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. In versions prior to 2.26.1, th...

📅 2026-03-27
CVSS 9.8 Dossier →
Component: everest

EVerest is an EV charging software stack. Prior to version 2026.02.0, even immediately after CSMS performs a RemoteStop (StopTransaction), the EVSE ca...

📅 2026-03-26
CVSS 5.2 Dossier →
Component: everest

EVerest is an EV charging software stack. Prior to version 2026.02.0, during RemoteStop processing, a delayed authorization response restores `authori...

📅 2026-03-26
CVSS 5.2 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to C++ UB (potential memory corruption). This is trigge...

📅 2026-03-26
CVSS 8.2 Dossier →
Component: everest

EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, Aut...

📅 2026-03-26
CVSS 5.0 Dossier →
Component: everest

EVerest is an EV charging software stack. Prior to version 2026.02.0, ISO15118_chargerImpl::handle_session_setup uses v2g_ctx after it has been freed ...

📅 2026-03-26
CVSS 7.5 Dossier →
CVE-2026-27816 CRITICAL
Component: everest

EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_update_energy_transfer_modes copies a variable-...

📅 2026-03-26
CVSS 9.1 Dossier →
CVE-2026-27815 CRITICAL
Component: everest

EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118_chargerImpl::handle_session_setup copies a variable-length payment_...

📅 2026-03-26
CVSS 9.1 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race (C++ UB) triggered by an A 1-phase ↔ 3-phase switch request (`a...

📅 2026-03-26
CVSS 4.2 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to use-after-free. This is triggered by EV plug-in/unpl...

📅 2026-03-26
CVSS 5.3 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::map<std::queue>` corruption. The trig...

📅 2026-03-26
CVSS 7.0 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible `std::queue`/`std::deque` corruption. The t...

📅 2026-03-26
CVSS 5.9 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access (contain...

📅 2026-03-26
CVSS 4.2 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::string` concurrent access. with heap-use-after...

📅 2026-03-26
CVSS 4.2 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to `std::map<std::optional>` concurrent access (contain...

📅 2026-03-26
CVSS 4.6 Dossier →
Component: everest

EVerest is an EV charging software stack. Versions prior to 2026.02.0 have an out-of-bounds access (std::vector) that leads to possible remote crash/m...

📅 2026-03-26
CVSS 7.5 Dossier →
Component: everest

EVerest is an EV charging software stack. Prior to version 2026.02.0, stack-based buffer overflow in CAN interface initialization: passing an interfac...

📅 2026-03-26
CVSS 8.4 Dossier →
Component: everest

EVerest is an EV charging software stack. Prior to version 2026.02.0, `HomeplugMessage::setup_payload` trusts `len` after an `assert`; in release buil...

📅 2026-03-26
CVSS 8.8 Dossier →
Component: everest

EVerest is an EV charging software stack. Prior to version 2026.02.0, an off-by-one check in IsoMux certificate filename handling causes a stack-based...

📅 2026-03-26
CVSS 8.4 Dossier →
Component: nats-server

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Starting in version 2.11.0 and prior to versions 2.11....

📅 2026-03-25
CVSS 4.3 Dossier →
Component: nats-server

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, when using mTLS ...

📅 2026-03-25
CVSS 4.2 Dossier →
Component: nats-server

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, the NATS message...

📅 2026-03-25
CVSS 6.4 Dossier →
Page 3 of 23 (533 Total Records)