GHSA-P5VG-V7MJ-F6Q4 Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials

Summary frain-dev/convoy all versions up to and including v26.6.2, no patch available lets any authenticated caller who is authorized on at least one project read ANY OTHER project's "Source" record by ID via GET /api/v1/projects/projectID/sources/sourceID -- regardless of whether that Source...

CLSA-2026-1789721764 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.11.0-tuxcare.1...

SUSE CVE-2026-90071

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

Linux Distros Unpatched Vulnerability : CVE-2026-90187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nullblk: free zones array on device power-off nullinitzoneddev allocates dev-zones when a zoned device is powered on, but nulldeldev never frees it on power-off...

Linux Distros Unpatched Vulnerability : CVE-2026-90071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it...

PT-2026-99834

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.11.0-tuxcare.1...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.1 Release.

Red Hat OpenShift Dev Spaces 3.30.1 has been released. The 3.30.1 release fixes the regression CRW-13015 Get Started / sample cards on the dashboard are empty after upgrade to 3.30. This release provides additional CVE fixes and container dependency updates to Dev Spaces 3.30. Red Hat OpenShift D...

Security Bulletin: Vulnerability in DOMPurify affects DB2 Dev Extension (CVE-2026-0540, CVE-2026-41238, CVE-2026-41239, CVE-2026-41240)

Summary Upgraded dompurify to 3.4.0 to remediate CVE-2026-0540, CVE-2026-41238, CVE-2026-41239, and CVE-2026-41240 CWE-79: Cross-site Scripting — highest CVSS Base Score 6.9 Medium — PVR0810799. Vulnerability Details CVEID:CVE-2026-0540 DESCRIPTION: DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through...

Security Bulletin: Vulnerability in Spring Framework affects DB2 Dev Extension (CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846)

Summary Upgraded spring-webmvc to 6.2.19 to remediate CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, and CVE-2026-41846 Information Disclosure, DoS, Path Traversal, Open Redirect, XSS — highest CVSS Base Score 7.5 High — PVR0786341. Vulnerability Details CVEID:CVE-2026-41841...

Security Bulletin: Vulnerability in jackson-databind affects DB2 Dev Extension (CVE-2026-59888, CVE-2026-59889)

Summary Upgraded jackson-databind to 2.21.5 to remediate CVE-2026-59888 Improperly Controlled Modification of Dynamically-Determined Object Attributes and CVE-2026-59889 Incorrect Authorization — CVSS Base Score 6.5 Medium — PVR0820325. Vulnerability Details CVEID:CVE-2026-59888 DESCRIPTION:...

Security Bulletin: Vulnerability in DOMPurify affects DB2 Dev Extension (CVE-2026-49458, CVE-2026-49459, CVE-2026-49978)

Summary Upgraded dompurify to 3.4.7 to remediate CVE-2026-49458, CVE-2026-49459, and CVE-2026-49978 CWE-79: Cross-site Scripting via INPLACE sanitization bypasses — highest CVSS Base Score 6.3 Medium — PVR0817403. Vulnerability Details CVEID:CVE-2026-49458 DESCRIPTION: DOMPurify is a DOM-only...

DEBIAN-CVE-2026-90187

In the Linux kernel, the following vulnerability has been resolved: nullblk: free zones array on device power-off nullinitzoneddev allocates dev-zones when a zoned device is powered on, but nulldeldev never frees it on power-off; dev-zones is only freed later in nullfreedev, when the configfs...

AZL-101894 CVE-2026-90071 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

DEBIAN-CVE-2026-90071

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

CVE-2026-90071

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

SUSE CVE-2026-89951

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the skb from the highest-numbered buffered fragment as the merged packet. When that fragment was received on a hard interface which is deleted...

CVE-2026-93068 drm/amd/display: Fix DM I2C teardown race

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix DM I2C teardown race DM I2C adapters can remain visible to userspace while DM teardown is already in progress. A concurrent i2c-dev transfer may then enter amdgpudmi2cxfer after the backing DM state has been...

CVE-2026-90185

This Linux kernel vulnerability affects the null_blk driver's configfs attribute store path. The NULLB_DEVICE_ATTR _store handlers fail to take the device lock, so concurrent stores on separate file descriptors race . For apply_fn attributes (submit_queues, poll_queues), a losing store can overwr...

CVE-2026-90185 null_blk: serialize configfs attribute stores with the lock

In the Linux kernel, the following vulnerability has been resolved: nullblk: serialize configfs attribute stores with the lock The NULLBDEVICEATTR store takes no lock: applyfn attributes submitqueues, pollqueues get dev-NAME written again after applyfn returns, outside its lock; APPLY=NULL...

CVE-2026-90071 net/sched: sch_teql: restore skb->dev on the slave failure path

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...