libssh: libssh: denial of service via SFTP responses with unknown request IDs

A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service...

CVE-2026-15792

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...

CVE-2026-15791

A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory...

httpd: Apache HTTP Server: Denial of Service via crafted regular expressions

A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service...

CVE-2026-61897

incomplete privilege dropping when calling SetLanguage...

CVE-2026-61898

shell injection in SetLanguage helper scripts...

Updated tig package fixes a security vulnerability

The updated package fixes a security vulnerability: editor command injection vulnerability...

CVE-2024-5300

An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...

CVE-2026-59850

A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions...

bind: bind9: Unnecessary validation of DNSSEC signed records

The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...

CVE-2026-59851

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...

CVE-2026-52869 vulnerabilities

Vulnerabilities for packages: semgrep, litellm...

GHSA-JPW9-PFVF-9F58 vulnerabilities

Vulnerabilities for packages: semgrep, litellm...

CVE-2026-52870 vulnerabilities

Vulnerabilities for packages: semgrep, litellm...

CVE-2026-59950 vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, semgrep, tritonserver-backend-vllm-cuda-13.0, litellm...

GHSA-VJ7Q-GJH5-988W vulnerabilities

Vulnerabilities for packages: lmcache-cuda-12.8, semgrep, tritonserver-backend-vllm-cuda-13.0, litellm...

GHSA-HVRP-RF83-W775 vulnerabilities

Vulnerabilities for packages: semgrep, litellm...

CVE-2026-12590 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, argo-workflows, code-server, unleash-proxy, sqlpad, tileserver-gl, wazuh-dashboard, opensearch-dashboards-fips, arangodb, kubescape-grype-offline-db, json-server, tileserver-gl-fips, langfuse, wazuh-dashboard-fips,...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: authentik-fips, langfuse-fips, code-server, ts-patch, gitlab-rails-ce-fips, pulumi, eslint, vitess, unleash-proxy, mongod, sqlpad, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, arangodb, percona-server-mongodb, prism, foxx-cli, wazuh-dashboard-fips,...

GHSA-V422-HMWV-36X6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, langfuse-fips, argo-workflows, code-server, unleash-proxy, sqlpad, tileserver-gl, wazuh-dashboard, opensearch-dashboards-fips, arangodb, kubescape-grype-offline-db, json-server, tileserver-gl-fips, langfuse, wazuh-dashboard-fips,...