Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities

Summary The vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Remediator code base. IBM Quantum Safe Remediator has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION:...

xwiki__xwiki-commons_CVE-2023-36471_14-10-5

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

cov-int

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

ed25519-unsafe-libs

ed25519-unsafe-libs Double Public Key Signing Function Oracle Attack on Ed25519 A list of potentially unsafe ed25519 signature libraries that allow a public api where secret and public key can be provided independently as signing function inputs. Misuse of these public apis can result to private...

POC_CVE-2015-9235

CVE-2015-9235 Demonstration of the algorithm confusion attack on Json Web Token JWT libraries. JWTs are often used in cookies to certify a user session and so this attack is critical. The node module [email protected] was used to demonstrate the vulnerability. This project was also a nice vi...

OESA-2026-3997 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

OESA-2026-3998 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

OESA-2026-3996 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

xwiki__xwiki-commons_CVE-2023-29528_14-9-rc-1

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

xwiki__xwiki-commons_CVE-2023-29201_14-5

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

xwiki__xwiki-commons_CVE-2023-31126_14-10-3

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

CVE-2026-10751 IBM MQ Java messaging is vulnerable to remote code execution

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

EUVD-2026-83021

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

CLEANSTART-2026-FE88742 Security fix for CVE-2026-25645 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, cassandra-reaper-fips 3.6.1-r2, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r3, cassandra-reaper-fips 4.0.1-r2, jupyterhub-k8s-hub 4.3.2-r0, k8s-sidecar 1.25.2-r0, k8s-sidecar 2.5.4-r0, kserve-storage-controller 0.19.0-r0, miniforge3 26.1.0.0-r1, tensorflow-gpu-jupyter 2.20.0-r1

CVE-2026-25645 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KG33218 Security fix for CVE-2026-56745 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.10.0-r3, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r1, elasticsearch 9.3.8-r1, hazelcast 5.7.0-r1, keycloak 26.5.7-r7, keycloak 26.7.1-r0, logstash-fips 9.4.3-r1, strimzi-kafka-operator 1.1.0-r2

CVE-2026-56745 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

r2rs

\ / / |/ //|/ \ | | / | | / || / | / / / / / / react2rubyshell !IMPORTANT DESCARGO DE RESPONSABILIDAD: La responsabilidad por cualquier acción realizada con este script recae directamente sobre la persona que lo ejecuta. Úselo únicamente contra sistemas que posea o para los que tenga permiso...

CLEANSTART-2026-HG35040 Erlang/OTP is a set of libraries for the Erlang programming language

Multiple security vulnerabilities affect the erlang package. Erlang/OTP is a set of libraries for the Erlang programming language. See references for individual vulnerability details...

CVE-2026-10751: Deserialization of Untrusted Data

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...