RHSA-2026:61230 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61227 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61228 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61229 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61226 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61225 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61224 Red Hat Security Advisory: pam security update

Bulletin has no description...

RHSA-2026:61223 Red Hat Security Advisory: pam security update

Bulletin has no description...

vamp-forticheck

vamp-forticheck Мультивендорный сканер CVE для периферийных устройств — VampSecure Labs Обзор vamp-forticheck — это асинхронный, неразрушающий сканер безопасности, который обнаруживает уязвимости CVE среди семи крупных вендоров сетевой безопасности. Он выполняет структурированный трёхфазный анали...

clawdguard

🦞 ClawdGuard Security hardening for Clawdbot/Moltbot installations. Detects and fixes exposed gateways. Detect and fix exposed Clawdbot/Moltbot gateways Problem • Features • Quick Start • Docker • CLI • What Gets Fixed • Development The Problem 900+ Clawdbot/Moltbot instances are currently expose...

DEBIAN-CVE-2026-82853

Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...

DEBIAN-CVE-2026-82854

Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...

DEBIAN-CVE-2026-82662

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowing attackers to intercept OAuth2 token requests. Attackers in a machine-in-the-middle position can capture OAuth client secrets, refresh tokens, and access tokens transmitt...

DEBIAN-CVE-2026-82659

nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw message...

EUVD-2026-68443

@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress violations by submitting unrelated compliant evidence. Attackers can use evidence from different zones, hostnames, origin...

CVE-2026-82855 @hulumi/policies before 1.3.2 Evidence Validation Bypass

@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare and deployment-governance validators that allows attackers to suppress violations by submitting unrelated compliant evidence. Attackers can use evidence from different zones, hostnames, origin...

OPENSUSE-SU-2026:21135-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 149.0.7827.155 boo1268373: CVE-2026-12437: Use after free in WebShare CVE-2026-12438: Inappropriate implementation in WebView CVE-2026-12439: Use after free in Digital Credentials CVE-2026-12440: Use after free i...

OPENSUSE-SU-2026:20849-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 148.0.7778.215 boo1266471: CVE-2026-9872: Out of bounds write in GPU CVE-2026-9873: Use after free in Network CVE-2026-9874: Use after free in Dawn CVE-2026-9875: Out of bounds read in WebGL CVE-2026-9876: Use...

OPENSUSE-SU-2026:20460-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.177 boo1261249 CVE-2026-5273: Use after free in CSS CVE-2026-5272: Heap buffer overflow in GPU CVE-2026-5274: Integer overflow in Codecs CVE-2026-5275: Heap buffer overflow in ANGLE CVE-2026-5276:...

BIT-TOMCAT-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through...