@backstage/backend-dynamic-feature-service (>=0.0.0-nightly-20251122024148, <=0.7.6-next.1), @backstage/backend-test-utils (>=1.9.1-next.1, <=1.10.0-next.2) +14 more potentially affected by CVE-2026-24046 via @backstage/backend-defaults (>=0.13.0-next.0, <=0.13.1-next.1)

@backstage/backend-defaults NPM version =0.13.0-next.0, =0.0.0-nightly-20251122024148, =1.9.1-next.1, =0.4.16-next.0, =0.7.4-next.0, =0.2.14-next.1, =0.7.5-next.0, =0.5.10-next.0, =0.1.4-next.0, =3.0.0-next.0, =0.3.16-next.0, =0.4.15-next.1, =0.3.4-next.1, =2.0.7-next.0, =2.1.1-next.0,...

@backstage/backend-dynamic-feature-service (>=0.0.0-nightly-20251122024148, <=0.7.6-next.1), @backstage/backend-test-utils (>=1.9.1-next.1, <=1.10.0-next.2) +14 more potentially affected by CVE-2026-24046 via @backstage/backend-defaults (>=0.13.0-next.0, <=0.13.1-next.1)

@backstage/backend-defaults NPM version =0.13.0-next.0, =0.0.0-nightly-20251122024148, =1.9.1-next.1, =0.4.16-next.0, =0.7.4-next.0, =0.2.14-next.1, =0.7.5-next.0, =0.5.10-next.0, =0.1.4-next.0, =3.0.0-next.0, =0.3.16-next.0, =0.4.15-next.1, =0.3.4-next.1, =2.0.7-next.0, =2.1.1-next.0,...

Security Bulletin: Multiple Vulnerabilities in Hyper Converged Database

Summary Multiple vulnerabilities were addressed in Hyper Converged Database version 1.2.4 coming for base Docker images. Vulnerability Details CVEID:CVE-2019-12904 DESCRIPTION: In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical...

MiracleLinux 9 : postgresql:16 (AXSA:2026-063:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-063:01 advisory. postgresql: CREATE STATISTICS does not check for schema CREATE privilege CVE-2025-12817 postgresql: libpq undersizes allocations, via integer...

PT-2026-3865

Name of the Vulnerable Software and Affected Versions vLLM versions 0.10.1 through 0.13.x Description vLLM is an inference and serving engine for large language models LLMs. The software loads Hugging Face auto map dynamic modules during model resolution without verifying trust remote code. This...

Oracle Linux 8 : mariadb-devel:10.3 (ELSA-2026-0698)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0698 advisory. asio 1.10.8-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild galera 25.3.37-1.0.1 - Bump release for rebuild - x8664 and i386 need to be built...

mariadb-devel:10.3 security update

asio 1.10.8-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild galera 25.3.37-1.0.1 - Bump release for rebuild - x8664 and i386 need to be built the same day Judy 1.0.5-18.0.1 - Rebuild Orabug: 31667911 mariadb 3:10.3.39-2.0.1 - Bump release for rebuild - x8664 and i386 need to be...

MiracleLinux 8 : freeradius:3.0 (AXSA:2023-5978:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5978:01 advisory. freeradius: Information leakage in EAP-PWD CVE-2022-41859 freeradius: Crash on unknown option in EAP-SIM CVE-2022-41860 freeradius: Crash on invalid...

MiracleLinux 8 : maven:3.5 (AXSA:2022-3741:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3741:01 advisory. maven-shared-utils: Command injection via Commandline class CVE-2022-29599 Tenable has extracted the preceding description block directly from the MiracleLin...

MiracleLinux 8 : mariadb:10.3 (AXSA:2021-1477:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1477:01 advisory. mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep CVE-2020-15180 mysql: InnoDB unspecified vulnerability CPU Oct...

MiracleLinux 8 : virt:rhel (AXSA:2021-1567:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1567:01 advisory. QEMU: virtiofsd: potential privileged host device access from guest CVE-2020-35517 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : freeradius:3.0 (AXSA:2024-8637:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8637:01 advisory. freeradius: forgery attack CVE-2024-3596 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...

MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2022-3705:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3705:01 advisory. QEMU: virtio-net: heap use-after-free in virtionetreceivercu CVE-2021-3748 ntfs-3g: Out-of-bounds heap buffer access in ntfsgetattributevalue due to...

MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2023-6448:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6448:01 advisory. QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service CVE-2023-3354 NTFS-3G: buffer overflow...

MiracleLinux 7 : glibc-2.17-326.3.0.1.el7.AXS7 (AXSA:2024-8594:08)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8594:08 advisory. CVE-2021-3999: getcwd - Set errno to ERANGE for size == 1 CVE-2021-35942: wordexp - handle overflow in positional parameter number CVE-2022-23218:...

MiracleLinux 8 : mariadb:10.3 (AXSA:2022-3852:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3852:01 advisory. mariadb: MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used CVE-2021-46669 mysq...

MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2025-10743:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10743:01 advisory. libtpms: Libtpms Out-of-Bounds Read Vulnerability CVE-2025-49133 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2022-3808:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3808:01 advisory. QEMU: QXL: integer overflow in cursoralloc can lead to heap buffer overflow CVE-2021-4206 QEMU: QXL: double fetch in qxlcursor can lead to heap buff...

MiracleLinux 8 : perl-5.26.3-417.el8 (AXSA:2021-1498:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1498:06 advisory. perl: corruption of intermediate language state of compiled regular expression due to recursive Sstudychunk calls leads to DoS CVE-2020-12723 Tenable has...

MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2024-8433:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8433:01 advisory. libvirt: negative gnew0 length can lead to unbounded memory allocation CVE-2024-2494 Tenable has extracted the preceding description block directly from the...