Linux Distros Unpatched Vulnerability : CVE-2026-64466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rustbinder: clear freeze listener on node removal Generally userspace is supposed to...

PT-2026-64522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the scmi regulator probe function. This happens because the function calls of find node by name, which increments the reference count of the returned...

PT-2026-64687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rust binder component where freeze listeners are not automatically cleared when a node is removed. While userspace is expected to clear these listeners before the...

Linux Distros Unpatched Vulnerability : CVE-2026-64301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: fix ofnode refcount leak in scmiregulatorprobe scmiregulatorprobe calls...

NPM: Shescape: Path disclosure on Unix with Zsh

NPM: Shescape: Path disclosure on Unix with Zsh vulnerability discovered by ? in WordPress Npm shescape versions 2.1.14...

NPM: brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

NPM: brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash vulnerability discovered by ? in WordPress Npm brace-expansion versions 1.1.17...

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

Summary expand bounds the number of results it produces the max option, 100000 by default but not their length. By chaining many brace groups, an attacker keeps the result count under max while making every result grow with the number of groups. Building max long results — plus the intermediate...

EUVD-2026-48285

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash...

GHSA-MH99-V99M-4GVG brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

Summary expand bounds the number of results it produces the max option, 100000 by default but not their length. By chaining many brace groups, an attacker keeps the result count under max while making every result grow with the number of groups. Building max long results — plus the intermediate...

sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

Summary sm-crypto npm package 0.4.0, the latest release, published 2026-01-20 generates SM2 private keys and signing ephemeral scalars from a single module-wide RNG instance src/sm2/utils.js: const rng = new SecureRandom. SecureRandom is jsbn's PRNG, which seeds an ARC4 stream from...

vantage6-algorithm-store (4.15.0rc1), vantage6-node (4.15.0rc1) +1 more potentially affected by CVE-2026-73652 via vantage6 (4.15.0rc1)

vantage6 PYPI version 4.15.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-algorithm-store 4.15.0rc1 - vantage6-node 4.15.0rc1 - vantage6-server 4.15.0rc1 Source cves: CVE-2026-73652 Source advisory:...

vantage6-node (2.3.5b1), vantage6-server (2.3.5b1) potentially affected by CVE-2026-73652 via vantage6 (2.3.5b1)

vantage6 PYPI version 2.3.5b1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 2.3.5b1 - vantage6-server 2.3.5b1 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.0.0b8), vantage6-server (3.0.0b8) potentially affected by CVE-2026-73652 via vantage6 (3.0.0b8)

vantage6 PYPI version 3.0.0b8 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.0.0b8 - vantage6-server 3.0.0b8 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (>=0.0.0b0, <=3.0.0b3), vantage6-server (2.3.5) potentially affected by CVE-2026-73652 via vantage6 (2.3.5)

vantage6 PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node =0.0.0b0, =3.0.0b3 - vantage6-server 2.3.5 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.0.1), vantage6-server (3.0.1) potentially affected by CVE-2026-73652 via vantage6 (3.0.1)

vantage6 PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.0.1 - vantage6-server 3.0.1 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.1.0rc5), vantage6-server (3.1.0rc5) potentially affected by CVE-2026-73652 via vantage6 (3.1.0rc5)

vantage6 PYPI version 3.1.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.0rc5 - vantage6-server 3.1.0rc5 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (0.0.0), vantage6-server (0.0.0) potentially affected by CVE-2026-73652 via vantage6 (0.0.0)

vantage6 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 0.0.0 - vantage6-server 0.0.0 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

Impact Edit permission lacks ownership check, so another developer could alter metadata that is later trusted by nodes. Worst they could do is update the image or image tag. If that is not noted, another image is approved than the one actually under review Patches No Workarounds No...

vantage6-node (3.1.1rc1), vantage6-server (3.1.1rc1) potentially affected by CVE-2026-73652 via vantage6 (3.1.1rc1)

vantage6 PYPI version 3.1.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.1rc1 - vantage6-server 3.1.1rc1 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...

vantage6-node (3.1.1rc2), vantage6-server (3.1.1rc2) potentially affected by CVE-2026-73652 via vantage6 (3.1.1rc2)

vantage6 PYPI version 3.1.1rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.1rc2 - vantage6-server 3.1.1rc2 Source cves: CVE-2026-73652 Source advisory: OSV:GHSA-47W6-GWP4-W6VC...