Information Disclosure

CVE-2026-41083 is an uncharacterized vulnerability in the OCaml package as distributed by Alpine Linux. The vulnerability description provides no technical details about the flaw class, affected versions, or attacker-accessible impact. Alpine Linux has issued a fix, but the upstream fix version field reads '0', which is likely a data entry placeholder rather than a meaningful version string. No exploitation activity, CVSS scoring, or CWE classification is available at time of analysis.

Denial of service in ImageMagick affects Alpine Linux package versions prior to 7.1.2.24-r0, where improper input validation allows remote attackers to trigger high availability impact without authentication or user interaction. The flaw is tracked under upstream advisory GHSA-8pj9-6897-74xc and was disclosed via Alpine's security tracking. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.

ImageMagick on Alpine Linux has been patched in package version 7.1.2.24-r0, addressing an unspecified vulnerability tracked as CVE-2026-48734. The nature of the flaw - including attack vector, impact class, and affected functionality - is not disclosed in the available intelligence. No CVSS score, CWE classification, or vendor security advisory with technical detail has been published at the time of this analysis, making precise impact assessment impossible without additional data.

Double-free memory corruption in libstrongswan's identity-cloning code exposes strongSwan VPN deployments (version 4.3.3 and newer) to potential remote code execution. The flaw, classified as CWE-415, occurs when certain identity objects are cloned, leading to a double-free condition that an authenticated network peer can trigger during IKE negotiation. No public exploit code or CISA KEV entry has been identified at time of analysis; a vendor patch is available in strongSwan 6.0.7 (Alpine Linux package 6.0.7-r0).

libheif on Alpine Linux contains a vulnerability addressed in package version 1.23.0-r0. The nature of the flaw - whether memory corruption, input validation failure, or another class - is not disclosed in available intelligence at time of analysis. Alpine Linux vendor advisory confirms a fix exists, but the specific impact, affected component within libheif, and exploitability conditions are not derivable from current data.

Xen hypervisor as packaged in Alpine Linux received a security fix tracked under Xen Security Advisory XSA-492 (CVE-2026-42490). The Alpine Linux vendor has confirmed the issue is resolved in package version 4.21.1-r6. The nature of the vulnerability, affected Xen upstream versions, and attacker impact cannot be characterized from the available data - no CVSS score, CWE classification, or advisory detail has been provided. No public exploit has been identified at time of analysis.

Xen Hypervisor on Alpine Linux has been patched via XSA-492, with the fix distributed in Alpine's xen package version 4.21.1-r6. The vulnerability class, impact scope, and attack vector are not disclosed in the available intelligence data - only the vendor-confirmed fix version is known. Security teams running Xen on Alpine Linux should treat this as a hypervisor-level security fix and prioritize patching given that Xen vulnerabilities historically span privilege escalation, VM escape, and denial-of-service classes.

Xen hypervisor (XSA-494) has been patched in Alpine Linux via the xen package update to version 4.21.1-r6. The underlying vulnerability class, technical root cause, and precise impact are not disclosed in the available intelligence - only the Alpine Linux vendor fix notice and advisory identifier XSA-494 are confirmed. Security teams running Xen on Alpine Linux should treat this as a priority patch given that Xen Security Advisories typically address privilege escalation, guest-to-host escape, or denial-of-service in hypervisor components, though none of these specifics are confirmed for this advisory.

Xen hypervisor on Alpine Linux is affected by a security vulnerability tracked as XSA-491 (Xen Security Advisory 491). The Alpine Linux vendor has issued a patched package at version 4.21.1-r6 to address this issue. No CVSS score, vector, or detailed vulnerability description has been provided in the available intelligence data, making precise impact characterization impossible without referencing the upstream XSA-491 advisory directly.

Xen Hypervisor on Alpine Linux contains a security vulnerability addressed under Xen Security Advisory XSA-493, patched in Alpine package version 4.21.1-r6. The underlying vulnerability class, impact, and affected Xen upstream versions are not disclosed in the available intelligence - only the Alpine-specific fix version is confirmed. No active exploitation (KEV) or public exploit code has been identified at time of analysis.

netatalk on Alpine Linux received a security fix in package version 4.5.0-r0 addressing CVE-2026-49390. The nature of the underlying vulnerability - its attack vector, impact class, and affected functionality - is not disclosed in available public data at time of analysis. No public exploit code or active exploitation has been identified; the sole confirmed data point is an Alpine Linux vendor-sourced package update.

netatalk, an open-source implementation of the Apple Filing Protocol (AFP) used to provide macOS-compatible file sharing on Alpine Linux, has been patched in Alpine package version 4.5.0-r0. The specific vulnerability class, impact, and attack surface are not disclosed in the available intelligence - only the vendor fix notification from Alpine Linux is present. Given netatalk's historical vulnerability profile (which has included remote code execution and authentication bypass classes), this warrants attention from administrators running AFP services, but the precise attacker capability cannot be stated from current data. No public exploit and no CISA KEV listing exist at time of analysis.

netatalk on Alpine Linux has been patched in package version 4.5.0-r0 according to a vendor advisory from Alpine. The nature of the underlying vulnerability - its attack vector, impact class, and affected component - is not determinable from available data. No CVSS score, CWE classification, or technical description has been published alongside this CVE, leaving the specific risk to affected deployments uncharacterized at this time.

Netatalk on Alpine Linux contains an uncharacterized vulnerability addressed in Alpine package version 4.5.0-r0. The nature of the flaw, affected attack surface, and potential impact are not disclosed in available intelligence - no CVE description, CVSS score, CWE classification, or vendor advisory has been published at time of analysis. Netatalk implements the Apple Filing Protocol (AFP) and has a historical record of critical vulnerabilities including remote code execution and authentication bypass, making any unpatched instance a potential risk in environments serving Apple clients.

Cacti, the network monitoring and graphing tool packaged for Alpine Linux, received a security fix in version 1.2.31-0. The vulnerability details have not been publicly disclosed beyond the Alpine Linux vendor advisory indicating a patched package release. Because no CVSS score, CWE classification, or technical description is available, the nature, severity, and exploitability of the underlying flaw cannot be characterized at this time.

Cacti, the open-source network monitoring and graphing solution, received a security fix in Alpine Linux's packaged version 1.2.31-0. The nature of the underlying vulnerability is not disclosed in the available intelligence - no CVE description, CVSS score, CWE classification, or exploit details have been published at this time. The sole confirmed fact is that Alpine Linux issued a patched package, meaning users running Cacti on Alpine Linux below version 1.2.31-0 should upgrade. No public exploit identified at time of analysis.

Cacti network monitoring software received a security fix in Alpine Linux package version 1.2.31-0, addressing CVE-2026-39949. The underlying vulnerability type, attack vector, and specific impact are not disclosed in available intelligence - the sole data point is the Alpine Linux vendor advisory confirming a patched package version. No further characterization of attacker capabilities, affected components, or exploitation conditions can be made from available data without risk of fabrication.

Cacti network monitoring software received a security fix packaged by Alpine Linux in version 1.2.31-0. The specific vulnerability details, attack vector, and impact have not been disclosed in the available intelligence - only the fix version is confirmed. No CVSS score, CWE classification, or technical description accompanies this CVE, making independent impact assessment impossible without additional vendor disclosure.

Cacti, the PHP-based network graphing and monitoring solution, received a security fix in Alpine Linux package version 1.2.31-0 addressing CVE-2026-39902. The specific nature of the vulnerability - its type, attack vector, and impact - is not disclosed in the available intelligence data. No exploitation status, CVSS score, or CWE classification is present, making it impossible to characterize attacker capability or affected scope beyond the confirmed patch version.

Cacti, the PHP-based network monitoring and graphing solution, has been patched in Alpine Linux at version 1.2.31-0. The nature of the underlying vulnerability is not disclosed in the available intelligence - only the Alpine Linux vendor advisory confirms that a fix was applied at this version boundary. No CVSS score, CWE classification, or technical description is available, making independent risk assessment impossible without consulting upstream Cacti release notes or the Alpine Linux changelog.

Cacti, the open-source network graphing and monitoring solution, received a security fix in Alpine Linux package version 1.2.31-0. The nature, impact class, and root cause of this vulnerability are not disclosed in the available intelligence data - the sole data point is the Alpine Linux vendor advisory confirming a patched package. No CVSS score, CWE classification, or vulnerability description has been published at time of analysis, making independent risk assessment impossible without additional vendor disclosure.

Cacti, a widely-deployed network monitoring and graphing tool, has been patched in Alpine Linux's package ecosystem at version 1.2.31-0. The underlying vulnerability details - including attack vector, impact class, and exploitation mechanism - are not disclosed in the available intelligence. No CVSS score, CWE classification, or vendor description has been published at time of analysis, making precise impact characterization impossible. No public exploit or CISA KEV listing is associated with this CVE.

Cacti, the open-source network monitoring and graphing solution, has been patched in Alpine Linux at package version 1.2.31-0. The nature of the underlying vulnerability is not disclosed in available intelligence - no CVE description, CVSS vector, CWE classification, or vendor advisory beyond the Alpine security tracker entry has been identified at time of analysis. Security teams running Cacti on Alpine Linux should treat this as an uncharacterized but vendor-confirmed fix requiring upgrade. No public exploit or active exploitation has been identified.

Cacti, the open-source network monitoring and graphing tool, has a vulnerability addressed in Alpine Linux package version 1.2.31-0 (corresponding to Cacti upstream 1.2.31). The nature, impact, and attack surface of this vulnerability are not disclosed in available intelligence - no CVE description, CWE classification, or CVSS scoring has been published at time of analysis. No public exploit has been identified and this CVE is not listed in the CISA KEV catalog.

Cacti, the PHP-based network monitoring and graphing solution, has received a security fix in Alpine Linux's packaging at version 1.2.31-0. The nature of the underlying vulnerability - its attack vector, impact, and exploitability - is not disclosed in available intelligence. No CVSS score, CWE classification, or vendor security advisory beyond the Alpine Linux package changelog has been identified at time of analysis, making authoritative risk assessment impossible without further data.

CVE-2026-39895 affects Cacti as packaged for Alpine Linux, with a fix available in Alpine package version 1.2.31-0. The underlying vulnerability type, attack vector, and impact are not disclosed in the available data - the sole intelligence source is an Alpine Linux vendor report confirming the fix. No CVSS score, CWE, or detailed description has been published at the time of this analysis, making it impossible to characterize the precise risk without additional vendor or NVD disclosure.

Client-side memory corruption in FreeRDP (all versions before 3.27.1) lets a malicious or compromised RDP server compromise a connecting client through improperly bounds-checked bitmap cache orders. The cacheId field of Cache Bitmap V2/V3 orders was masked to only two bits (0x0003) instead of three (0x0007) and used to index cell-cache arrays without validating it against the negotiated number of cells, enabling out-of-bounds access controlled by the server. There is no public exploit identified at time of analysis and EPSS is low (0.45%, 36th percentile), but the CVSS 8.8 reflects full confidentiality, integrity and availability impact once a user connects to the attacker's server.

Out-of-bounds read in FreeRDP's H264 decompression codec allows a malicious or compromised RDP server to trigger memory disclosure and potential client crash when a user connects and receives crafted video frames with mismatched dimensions. Affected clients include all FreeRDP builds prior to 3.27.0 using any of the supported H264 backends (FFmpeg, OpenH264, Android MediaCodec, Windows Media Foundation). No public exploit has been identified at time of analysis, though CVSS 4.0 signals high confidentiality and availability impact with only passive user interaction required.

Cacti network monitoring software on Alpine Linux has been patched in package version 1.2.31-0, addressing CVE-2026-39952. The underlying vulnerability type, root cause, and attacker-achievable impact are not described in any available intelligence source. No CVSS score, CWE classification, exploit code, or vendor advisory beyond the Alpine package fix note has been identified at time of analysis.

ISC BIND DNS server received a security fix in Alpine Linux package version 9.20.11-r0, addressing an unspecified vulnerability tracked as CVE-2025-40776. The underlying nature of the flaw - including attack vector, affected component, and exploitability conditions - has not been publicly disclosed at time of analysis. With an EPSS score of 0.05% (15th percentile) and no CISA KEV listing, this vulnerability does not currently exhibit signals of widespread active exploitation, though the absence of CVSS and CWE data substantially limits risk characterization.

libgit2, the portable C library implementing Git core methods, received a security fix in Alpine Linux package version 1.9.6-r0. The nature, severity, and impact of the underlying vulnerability are not disclosed in available data - only the patched package version is confirmed by the Alpine Linux vendor advisory. No public exploit, KEV listing, CVSS score, or CWE classification is available at time of analysis.

libgit2 on Alpine Linux received a security fix packaged as version 1.9.6-r0, addressing an unspecified vulnerability. The underlying vulnerability type, affected upstream version range, and attacker-reachable impact are not disclosed in the available intelligence. The sole confirmed data point is that Alpine Linux has issued a corrected package; no CVSS scoring, CWE classification, KEV listing, or exploit evidence is present in the source data.

Vulnerability in .NET 9 Runtime on Alpine Linux was patched in Alpine package version 9.0.18-r0. The specific vulnerability class, impact, and attack surface are not disclosed in the available intelligence - only that Alpine's vendor advisory triggered a package update. No CVSS score, CWE classification, or exploitation details are available at time of analysis, making risk quantification impossible without consulting upstream Microsoft or Alpine advisories directly.

mbedTLS version 3.x (packaged as mbedtls3) on Alpine Linux contains a vulnerability addressed in Alpine package version 3.6.7-r0. The underlying vulnerability details - including attack vector, impact class, and exploitation requirements - are not disclosed in the available intelligence. The only confirmed fact is that Alpine Linux's vendor advisory identifies a fix in the mbedtls3 3.6.7-r0 package. No CVSS score, CWE classification, or exploit status is available at time of analysis.

Mbed TLS (mbedtls3) received a security fix in Alpine Linux package version 3.6.7-r0, addressing an unspecified vulnerability. The nature of the flaw - whether it affects cryptographic operations, TLS handshake processing, certificate validation, or another component - is not disclosed in the available intelligence. No CVSS score, CWE classification, or vulnerability description has been published, making independent risk assessment impossible at this time.

mbedtls3 on Alpine Linux received a security fix in package version 3.6.7-r0, addressing an unspecified vulnerability in the mbedTLS cryptographic library. The vulnerability details, including attack vector, impact class, and affected functionality, are not disclosed in the available intelligence. No CVSS score, CWE classification, or technical description was provided by the Alpine Linux vendor advisory beyond the package version bump.

Mbed TLS 3.x on Alpine Linux received a security fix in package version 3.6.7-r0, addressing an unspecified vulnerability reported by the Alpine Linux vendor. The nature of the underlying flaw - whether cryptographic, memory safety, or protocol-level - is not disclosed in available intelligence. No exploit activity, CVSS scoring, or CWE classification is available at time of analysis, making independent risk assessment impossible without consulting the upstream Mbed TLS security advisory.

mbedtls3 on Alpine Linux received a security fix in package version 3.6.7-r0. The underlying vulnerability type, impact, and affected upstream MbedTLS version range are not described in the available CVE record - only the Alpine package fix version is confirmed. No exploitation status, CVSS score, or CWE classification has been assigned at time of analysis.

Mbed TLS 3.x (mbedtls3) on Alpine Linux has been patched in Alpine package version 3.6.7-r0 to address CVE-2026-35336. The underlying vulnerability type, technical root cause, and exploitability details are not disclosed in currently available intelligence - only the Alpine Linux vendor advisory confirms a fix was issued. Security teams using Alpine Linux with mbedtls3 should treat this as requiring immediate patching given that cryptographic libraries commonly underpin TLS, certificate validation, and encryption across many dependent packages.

Mbed TLS (mbedtls) received a security fix in Alpine Linux package version 4.1.1-r0, addressing CVE-2026-54441. The nature of the underlying vulnerability - its impact class, attack vector, and exploitability - is not disclosed in the available intelligence. No CVSS score, CWE classification, or technical description has been published, making meaningful impact assessment impossible at this time. No public exploit has been identified and CISA KEV status is not confirmed.

Mbed TLS (mbedtls), the widely-used open-source TLS/SSL library, received a security fix in Alpine Linux packaged as version 4.1.1-r0. The nature of the underlying vulnerability - its type, impact, attack surface, and affected version range - is not disclosed in the available intelligence. No CVSS score, CWE classification, exploitation status, or vulnerability description has been published at time of analysis. Alpine Linux's vendor advisory constitutes the sole source for this CVE.

Mbed TLS in Alpine Linux received a security fix packaged as version 4.1.1-r0, addressing an unspecified vulnerability. The upstream nature, exploitability, and impact of this flaw cannot be determined from the available intelligence - no CVE description, CVSS vector, CWE classification, or vendor advisory details were provided. No public exploit and no CISA KEV listing have been identified at time of analysis.

mbedTLS on Alpine Linux was patched in package version 4.1.1-r0, addressing an unspecified vulnerability in the TLS/SSL library. The underlying flaw, affected version range, and attack surface are not described in the available data - only the fix package version is confirmed. No CVSS score, CWE, or exploitation status has been published at time of analysis.

Mbed TLS (mbedtls) received a security fix in Alpine Linux package version 4.1.1-r0, addressing an unspecified vulnerability. The nature of the flaw, affected upstream Mbed TLS version, and impact class are not disclosed in the available data - only the Alpine package fix version is confirmed. No CVSS score, CWE classification, or exploit information is available at time of analysis.

mbedTLS on Alpine Linux received a security fix packaged as 4.1.1-r0 in the Alpine repository. The underlying vulnerability details - including attack vector, impact class, and affected mbedTLS upstream versions - are not disclosed in available intelligence sources. No CVSS score, CWE classification, or advisory narrative accompanies this entry; the sole confirmed fact is that Alpine Linux has patched the mbedTLS package at the 4.1.1-r0 Alpine package revision. Security teams using Alpine-based images or systems should treat this as an uncharacterized security fix requiring immediate package update pending further upstream disclosure.

Mbed TLS (mbedtls) on Alpine Linux has been patched in Alpine package version 4.1.1-r0 to address CVE-2026-50580. The nature of the underlying vulnerability - its class, impact, and exploitability - is not described in the available intelligence. The only confirmed data point is the existence of a fixed Alpine package; all other risk signals (CVSS, CWE, KEV, EPSS, POC) are absent, making independent risk assessment impossible without vendor disclosure.

Mbed TLS (mbedtls) in Alpine Linux was patched in package release 4.1.1-r0, addressing an unspecified vulnerability. The nature of the flaw, affected upstream versions, and potential attacker impact cannot be determined from the available data - only the Alpine package fix version is confirmed. No CVSS score, CWE classification, or detailed description has been published at time of analysis.

Mbed TLS (mbedtls) on Alpine Linux contains an unspecified vulnerability addressed in Alpine package version 4.1.1-r0. The nature of the flaw - whether it involves cryptographic weakness, memory corruption, or another class of defect - is not disclosed in the available intelligence. No CVSS score, CWE classification, or exploit data has been published. Security teams running Alpine Linux with mbedtls should treat this as a required update pending full upstream disclosure.

Mbed TLS (mbedtls) in Alpine Linux contains a vulnerability addressed in package version 4.1.1-r0. The nature of the flaw - whether it involves memory corruption, cryptographic weakness, or another class - is not disclosed in the available intelligence. The fix is confirmed by the Alpine Linux vendor advisory. No CVSS score, CWE classification, or exploitation data is available at time of analysis, making risk characterization largely indeterminate beyond the vendor's decision to issue a patch.

Apache HTTP Server (apache2) on Alpine Linux received a security fix packaged as version 2.4.65-r0. The underlying vulnerability details, including attack vector, impact class, and affected component, are not disclosed in the available intelligence - only the vendor-sourced fix notification is present. EPSS places this at the 76th percentile despite a low absolute probability (0.92%), suggesting it ranks notably above average for exploitation likelihood relative to the broader CVE population. No active exploitation (KEV) or public exploit code has been identified at time of analysis.

BIND DNS server received a security fix in Alpine Linux package version 9.20.11-r0, addressing an unspecified vulnerability tracked as CVE-2025-40777. The affected product is ISC BIND as packaged in Alpine Linux, with the fix delivered via the Alpine package repository. No public exploit has been identified at time of analysis, and the EPSS score of 0.10% (27th percentile) reflects low observed exploitation probability.

ISC BIND DNS server software received a security fix in Alpine Linux package version 9.20.15-r0. The specific vulnerability details, attack surface, and impact class are not disclosed in available intelligence - the sole confirmed data point is that the Alpine Linux vendor issued a patched package. With an EPSS score of 0.07% (22nd percentile), exploitation probability is assessed as low at time of analysis, and no public exploit or active exploitation has been identified.

ISC BIND received a security fix in Alpine Linux package version 9.20.15-r0, addressing CVE-2025-40778. The nature of the underlying vulnerability - its impact class, affected attack surface, and exploitability - is not determinable from the available data, as no CVSS vector, CWE classification, or vendor advisory details were provided. EPSS scoring of 0.01% at the 0th percentile indicates extremely low assessed exploitation probability at time of analysis. No public exploit identified at time of analysis.

BIND DNS server on Alpine Linux was patched at package version 9.20.15-r0, addressing an unspecified vulnerability in the ISC BIND 9.20.x release series. The underlying flaw details - including attack vector, impact class, and affected component - are not disclosed in the available CVE record, making precise impact assessment impossible at this time. EPSS exploitation probability is 0.03% (8th percentile), and no public exploit or CISA KEV listing has been identified.

GnuPG on Alpine Linux is affected by a vulnerability addressed in Alpine package version 2.4.9-r0. The CVE record contains only a fix-availability notice from the Alpine Linux vendor with no published description, CVSS scoring, or CWE classification, making the specific vulnerability class, impact, and attack vector unconfirmed at time of analysis. Security teams should treat this as a vendor-confirmed defect warranting patch application, while monitoring upstream GnuPG and Alpine advisories for full disclosure.

GnuPG on Alpine Linux was patched in package version 2.4.9-r0, addressing an unspecified vulnerability tracked as CVE-2025-68973. The nature of the vulnerability - including attack vector, impact class, and affected functionality - is not disclosed in available intelligence sources. No CVSS score, CWE classification, or technical description has been published, making independent severity assessment impossible at this time. No public exploit or CISA KEV listing has been identified.

GnuTLS on Alpine Linux is addressed by the fix released in package version 3.8.11-r0, corresponding to upstream advisory GNUTLS-SA-2025-11-18. The underlying vulnerability details - including attack vector, impact class, and affected functionality - are not disclosed in the available intelligence at this time. Security teams running Alpine Linux with GnuTLS should treat this as a library-level security fix and prioritize patching given GnuTLS's role in TLS/SSL communications across a broad range of dependent applications.

GnuTLS, the widely-used TLS/SSL/DTLS cryptographic library, contains a vulnerability tracked as GNUTLS-SA-2025-07-08-2 that was remediated in Alpine Linux's package version 3.8.11-r0. The vulnerability's nature, impact class, and affected attack surface cannot be characterized from the available intelligence - the CVE description contains only the patch notation and no technical detail. Given that GnuTLS is a foundational security library used across countless Linux-based systems, consumers of Alpine Linux packages should treat this as a priority update pending full advisory disclosure. No public exploit has been identified at time of analysis.

GnuTLS, the open-source TLS/SSL/DTLS implementation library, contains a vulnerability addressed under advisory GNUTLS-SA-2025-07-08-1. Alpine Linux has released a patched package at version 3.8.11-r0 to resolve this issue. The nature of the vulnerability, affected attack surface, and exploitability cannot be characterized from the available data - the upstream GnuTLS advisory should be consulted directly for specifics.

GnuTLS received a security fix in Alpine Linux package version 3.8.11-r0, corresponding to upstream advisory GNUTLS-SA-2025-07-08-3. The nature of the underlying vulnerability - its class, impact, and attack vector - is not disclosed in the available intelligence data. Alpine Linux's vendor report confirms a patch was issued, but no CVSS scoring, CWE classification, or technical description of the flaw has been published at the time of this analysis. No public exploit identified at time of analysis and no CISA KEV listing is present.

GnuTLS, the secure communications library implementing SSL/TLS/DTLS protocols, has a vulnerability tracked under upstream advisory GNUTLS-SA-2025-07-08-4 that was addressed in Alpine Linux package version 3.8.11-r0. The nature of the flaw - attack vector, impact class, and root cause - is not disclosed in available intelligence, which is limited to the vendor-sourced Alpine Linux fix notification. No active exploitation, public proof-of-concept, or EPSS data is available at time of analysis.

GnuTLS, the widely-used TLS/SSL and cryptographic library, was patched in Alpine Linux's package ecosystem under security advisory GNUTLS-SA-2026-02-09-1. The fix is available in Alpine's gnutls package version 3.8.12-r0. The nature of the underlying vulnerability - its impact class, affected component within GnuTLS, and attack surface - cannot be determined from the data provided; no CVE description, CVSS vector, or CWE is present in the available intelligence.

GnuTLS on Alpine Linux contains a vulnerability addressed in the Alpine package gnutls-3.8.12-r0. The vulnerability is tracked under GnuTLS upstream advisory GNUTLS-SA-2026-02-09-2. Due to the near-total absence of technical detail in available intelligence - no CVSS vector, no CWE classification, no description of the flaw class - the specific impact, affected attack surface, and exploitation conditions cannot be characterized from this data alone.

GnuTLS received a security fix in Alpine Linux package version 3.8.13-r0, tracked under upstream advisory GNUTLS-SA-2026-04-29-12. The specific vulnerability type, impact, and affected component within GnuTLS are not disclosed in the available data. GnuTLS is a widely deployed TLS/SSL and cryptographic library used across Linux distributions, meaning any confirmed vulnerability could affect a broad range of applications that depend on it for secure communications.

GnuTLS, the widely-used TLS/SSL/DTLS cryptographic library, has been patched in Alpine Linux at package version 3.8.13-r0 under advisory GNUTLS-SA-2026-04-29-5. The underlying vulnerability details - including attack type, impact class, and affected component - are not disclosed in the available data. No CVSS score, CWE classification, or technical description has been published at this time, making independent risk assessment impossible without consulting the upstream GnuTLS advisory directly. No active exploitation (CISA KEV) or public exploit code has been identified at time of analysis.

GnuTLS, the open-source TLS/SSL and cryptographic library, received a security fix in Alpine Linux package version 3.8.13-r0 addressing advisory GNUTLS-SA-2026-04-29-10. The specific vulnerability class, impact, and affected functionality are not described in the available intelligence - only the fix package version is confirmed. No CVSS score, CWE classification, KEV listing, or exploit data is available at time of analysis, making a complete impact assessment impossible without consulting the upstream GnuTLS advisory directly.

GnuTLS, the GNU TLS/SSL library, contains a vulnerability addressed in Alpine Linux package version 3.8.13-r0, tracked under upstream advisory GNUTLS-SA-2026-04-29-13. The nature of the vulnerability - its attack vector, exploitability, and impact class - is not disclosed in the available intelligence. No CVSS score, CWE classification, or description of the root cause has been published alongside this CVE at time of analysis, making precise characterization of attacker capability infeasible without the upstream advisory.

GnuTLS, a widely-used TLS/SSL and cryptographic library, was patched in Alpine Linux at package version 3.8.13-r0 to address CVE-2026-33845, tracked under official GnuTLS security advisory GNUTLS-SA-2026-04-29-3. The underlying vulnerability class, attack surface, and exploitability conditions are not disclosed in available intelligence - the sole confirmed fact is that the Alpine vendor released a remediated package. No public exploit code has been identified at time of analysis, and this CVE is not listed in the CISA KEV catalog.

GnuTLS on Alpine Linux contains a vulnerability addressed in Alpine package version 3.8.13-r0, tracked under upstream advisory GNUTLS-SA-2026-04-29-1. The specific vulnerability class, exploitability mechanism, and attacker-achievable impact are not disclosed in the available intelligence - the CVE description contains only patch version metadata with no technical detail. Security teams should treat this as a pending-disclosure situation and apply the available fix proactively given GnuTLS's role as a foundational TLS/cryptographic library. No public exploit has been identified at time of analysis.

GnuTLS on Alpine Linux received a security fix tracked under advisory GNUTLS-SA-2026-04-29-2, addressed in Alpine package version 3.8.13-r0. The underlying vulnerability class, attack vector, and exploitability details are not disclosed in the available intelligence - only the fix version is confirmed by the Alpine vendor. No CVSS score, CWE classification, or vulnerability description is present in the sourced data, making independent risk assessment impossible without consulting the upstream GnuTLS advisory directly.

GnuTLS, the widely-deployed TLS/SSL library, received a security fix in Alpine Linux package version 3.8.13-r0 addressing CVE-2026-42010, tracked under vendor advisory GNUTLS-SA-2026-04-29-4. The specific vulnerability class, attack vector, and impact have not been publicly disclosed in the available intelligence at time of analysis. Given GnuTLS's role as a core cryptographic transport library used across numerous Linux applications and services, the potential blast radius of any confirmed vulnerability is significant, warranting prompt patch application regardless of undisclosed severity. No public exploit has been identified at time of analysis.

GnuTLS, as packaged in Alpine Linux, contains a security vulnerability addressed under advisory GNUTLS-SA-2026-04-29-6. The fix is available in Alpine Linux package version 3.8.13-r0. Due to the absence of CVSS scoring, CWE classification, and a detailed technical description in the available intelligence, the specific vulnerability class, impact, and attack surface cannot be characterised from this dataset alone.

GnuTLS, the GNU Transport Layer Security library, contains a vulnerability addressed in Alpine Linux package version 3.8.13-r0, tracked under upstream advisory GNUTLS-SA-2026-04-27-7. The vulnerability description provides no detail on attack type, affected functionality, or attacker-achievable impact beyond confirming a fix exists. No CVSS score, CWE classification, KEV status, or exploit code has been reported - the sole confirmed data point is the patched Alpine package version. Security teams should treat this as an uncharacterized vulnerability in a critical cryptographic library until the upstream GnuTLS advisory is reviewed directly.

GnuTLS on Alpine Linux contains a security vulnerability addressed in package version 3.8.13-r0, identified under GnuTLS Security Advisory GNUTLS-SA-2026-04-27-8. The available intelligence is extremely sparse - no description, CVSS score, CWE classification, or exploit details have been published in the data provided. Alpine Linux has issued a fix, confirming the vulnerability is real and patched, but the nature of the flaw, affected attack surface, and potential impact cannot be characterized from the available data alone. No public exploit code has been identified at time of analysis, and it is not listed in CISA KEV.

GnuTLS, the GNU TLS/SSL and PKI library, received a security fix in Alpine Linux package version 3.8.13-r0 addressing CVE-2026-42014, tracked under GnuTLS security advisory GNUTLS-SA-2026-04-29-9. The specific vulnerability class, impact, and affected functionality are not disclosed in the available intelligence - no CVSS score, CWE, or technical description has been published at the time of analysis. Security teams running Alpine Linux with GnuTLS prior to 3.8.13-r0 should treat this as requiring patch application pending full disclosure. No public exploit has been identified at time of analysis.

GnuTLS, the GNU Transport Layer Security library, contains a security vulnerability addressed by Alpine Linux security advisory GNUTLS-SA-2026-04-29-11. The fix is delivered in Alpine Linux package version 3.8.13-r0. Specific technical details - including the vulnerability class, affected component within GnuTLS, and potential attacker impact - are not available in the provided intelligence data; consumers of this library across TLS-dependent applications on Alpine Linux should treat upgrade as a priority pending upstream disclosure.

iputils on Alpine Linux has been patched in version 20250602-r0, addressing an unspecified vulnerability in the network utilities package. The exact nature of the flaw - whether it affects ping, tracepath, arping, clockdiff, or another component - is not disclosed in the available intelligence. No active exploitation has been identified at time of analysis, and no CVSS scoring has been published.

libsodium on Alpine Linux has been patched in package version 1.0.20-r1, addressing an unspecified vulnerability reported by the Alpine Linux vendor. The nature of the underlying flaw, affected versions prior to the fix, and potential attacker impact are not described in available intelligence. Given libsodium's role as a widely used cryptographic library, any confirmed vulnerability could affect confidentiality, integrity, or availability of applications depending on it, but no concrete impact has been confirmed from current data.

Alpine Linux: mbedtls fixed in 2.28.7-r0

Alpine Linux: mbedtls fixed in 2.28.7-r0

Alpine Linux: mbedtls fixed in 3.6.1-r0

Alpine Linux: mbedtls fixed in 3.6.1-r0

mbedTLS on Alpine Linux contains a vulnerability addressed in the 3.6.4-r0 package release, with a publicly available exploit documented on Exploit-DB. The sparse vendor description provides minimal technical detail, but the combination of a confirmed public exploit and an EPSS score in the 92nd percentile signals meaningful real-world exploitation interest. Systems running Alpine Linux with mbedTLS prior to the 3.6.4-r0 package version are the confirmed affected surface; no CVSS vector or CWE classification was provided to further characterize attack mechanics.

Mbed TLS (mbedtls) on Alpine Linux received a security fix in package version 3.6.4-r0, addressing CVE-2025-48965. The nature of the underlying vulnerability - its attack vector, impact class, and root cause - is not disclosed in the available intelligence. No active exploitation has been identified, and the EPSS probability of 0.20% (41st percentile) indicates low observed exploitation interest at time of analysis. Security teams running Alpine Linux with the mbedtls package should treat this as a routine patch cycle item pending further vendor disclosure.

Mbed TLS on Alpine Linux contains a vulnerability addressed by upgrading the Alpine package to version 3.6.4-r0. The specific flaw, its CWE classification, and CVSS severity are not disclosed in available intelligence - only the fix version and affected platform (Alpine Linux) are confirmed. With an EPSS score of 0.43% (63rd percentile), exploitation probability is low in absolute terms, though the percentile ranking places it above the majority of tracked CVEs. No public exploit code or active exploitation has been identified at time of analysis.

Mbed TLS on Alpine Linux has been patched in Alpine package version 3.6.5-r0 to address an unspecified vulnerability. The underlying flaw, root cause, and exploitability conditions have not been publicly disclosed by Alpine or upstream maintainers at the time of analysis. No CVSS score, CWE classification, or technical description is available, making precise impact assessment impossible without additional vendor communication. No public exploit identified at time of analysis, and EPSS score of 0.02% (7th percentile) indicates very low community-assessed exploitation probability.

mbedtls on Alpine Linux was patched in package version 3.6.5-r0, addressing an unspecified vulnerability. The nature, root cause, and attack surface of the flaw are not disclosed in available intelligence - the CVE record contains only an Alpine Linux changelog-style description with no technical detail. EPSS sits at 0.04% (14th percentile), indicating very low probability of exploitation in the near term. No public exploit code and no CISA KEV listing have been identified at time of analysis.

net-snmp on Alpine Linux received a security fix packaged as version 5.9.5.2-r0, addressing an unspecified vulnerability in the SNMP suite. The upstream vulnerability details - including the attack vector, affected component, and exploitable condition - are not disclosed in the available intelligence; only the Alpine Linux vendor advisory confirms a fix was issued. With an EPSS score of 0.42% (62nd percentile), exploitation probability is low but not negligible, suggesting the issue is real but not yet actively targeted at scale.

OpenSSH on Alpine Linux received a security fix in package version 10.1_p1-r0, addressing an unspecified vulnerability tracked as CVE-2025-61984. The exact nature, attack vector, and impact of this vulnerability are not disclosed in available intelligence sources - no CVE description, CVSS score, or CWE classification has been published at time of analysis. EPSS probability is extremely low at 0.01% (2nd percentile), and no public exploit or CISA KEV listing has been identified.

OpenSSH on Alpine Linux was patched in version 10.1_p1-r0, addressing an unspecified security vulnerability tracked as CVE-2025-61985. The nature of the flaw, affected versions prior to the fix, and the attacker-accessible impact have not been disclosed in the available intelligence. No public exploit has been identified at time of analysis, and the EPSS score of 0.06% (19th percentile) suggests low observed exploitation probability.