GHSA-F4CV-XM48-3694 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

GHSA-88C6-6JFQ-MM4Q vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-9546 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-8924 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-12064 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

CVE-2026-10536 vulnerabilities

Vulnerabilities for packages: eco-python-curl...

GHSA-4GCC-RQQQ-58JP vulnerabilities

Vulnerabilities for packages: xorg-server...

CVE-2026-56000 vulnerabilities

Vulnerabilities for packages: xorg-server...

PT-2026-65747

Apache Traffic Server can bypass IP access controls on UDS listeners and through ACL matching errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix...

CVE-2026-61547

Unknown description...

CVE-2026-59986

Unknown description...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0933

Updates of 'gawk' packages of Photon OS have been released...

firefox security update

140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.13.0-1 - Update to 140.13.0 ESR...

yelp security update

2:40.3-3.1 - Fix CVE-2026-13601 RHEL-190224...

ROS-20260729-73-0017

The vulnerability of the Go programming language is related to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-59919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder...

axios: axios: Denial of Service via object serialization bypass

A flaw was found in axios. A remote attacker could exploit an incomplete depth-limit bypass when the component serializes objects with specific top-level keys. By manipulating object keys and nested values during form or parameter serialization, an attacker can trigger a processing error. This ca...

axios: axios: Denial of Service via uncontrolled recursion in form data processing

A flaw was found in axios, a popular JavaScript library. An attacker can exploit this vulnerability by providing malicious form data containing deeply nested field names. This input triggers uncontrolled recursion within the formDataToJSON function, which is responsible for processing form data...

libXfont2: computeProps Property Buffer Heap Buffer Overflow

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...

firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...