ceph vulnerabilities
CVEs whose affected-version data names the ceph package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-18495Medium· 6.1A flaw was found in libtiff
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causin…
▾ SunlitRed Hat · libtiff-mainEPSS 0.12%via NVD
CVE-2024-11831Medium· 5.4A flaw was found in npm-serialize-javascript
A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject mali…
▾ SunlitRed Hat · serialize-javascriptEPSS 1.1%via NVD