CVE-2019-16097

CVE-2019-16097 This program is only for security research, do not use it illegally! Vulnerability Impact Attackers can create an administrator account, upload malicious images, and infect clients using the repository. Affected Component Harbor Affected Versions 1.7.0-1.8.2 Remediation Upgrade to...

CVE-2026-33017

🚨 CVE-2026-33017 - Critical Unauthenticated Remote Code Execution in Langflow Langflow versions ≤ 1.8.2 contain a severe security vulnerability that allows unauthenticated attackers to achieve Remote Code Execution RCE on the server. 📊 Vulnerability Details 🧨 Root Cause The endpoint...

PT-2026-73142

OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...

EUVD-2026-36103

s2n-quic has excessive memory allocation...

CLSA-2026-1784769553 TuxCare security update for angular (1 CVE)

TuxCare rebuilt angular to address 1 CVE. Fixed in 1.8.2-tuxcare.6...

CLSA-2026-1778719546 TuxCare security update for org.apache.avro (2 CVEs)

TuxCare rebuilt 17 org.apache.avro packages to address 2 CVEs. Fixed in 1.8.2-tuxcare.1...

CLSA-2026-1775694723 TuxCare security update for angular-sanitize (1 CVE)

TuxCare rebuilt angular-sanitize to address 1 CVE. Fixed in 1.8.2-tuxcare.1...

CLSA-2026-1773706637 TuxCare security update for angular (11 CVEs)

TuxCare rebuilt angular to address 11 CVEs. Fixed in 1.8.2-tuxcare.1...

CVE-2026-16548 Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint

The Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat WordPress plugin before 1.8.2 does not validate the type, extension, content, or size of files submitted to its public response endpoint and stores them under the uploads directory, so an...

SUSE CVE-2026-54522

MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Bufferclear in ext/msgpack/buffer.c leaves rmemlast, rmemend, and rmemowner stale after msgpackbuffershiftchunk returns an rmem page to the shared pool, allowing a subsequent...

CVE-2026-54522 MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Bufferclear in ext/msgpack/buffer.c leaves rmemlast, rmemend, and rmemowner stale after msgpackbuffershiftchunk returns an rmem page to the shared pool, allowing a subsequent...

CVE-2026-54522 MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Bufferclear in ext/msgpack/buffer.c leaves rmemlast, rmemend, and rmemowner stale after msgpackbuffershiftchunk returns an rmem page to the shared pool, allowing a subsequent...

CVE-2026-54522

CVE-2026-54522 affects MessagePack for Ruby prior to 1.8.2, where MessagePack::Buffer#clear can leave internal rmem pointers stale after a chunk return, enabling a subsequent Buffer#write to alias the freed page and potentially disclose or corrupt cross-buffer data. Root cause: stale rmem_last/rm...

CVE-2026-54522 MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Bufferclear in ext/msgpack/buffer.c leaves rmemlast, rmemend, and rmemowner stale after msgpackbuffershiftchunk returns an rmem page to the shared pool, allowing a subsequent...

CLEANSTART-2026-RM44589 Security fixes in prometheus-node-exporter-fips 1.8.2-r0

Package prometheus-node-exporter-fips version 1.8.2-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-YM38504 Security fixes in fulcio 1.8.2-r0

Package fulcio version 1.8.2-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-DV08404 Security fixes in fulcio-fips 1.8.2-r0

Package fulcio-fips version 1.8.2-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-MB37703 Security fixes in prometheus-node-exporter 1.8.2-r2

Package prometheus-node-exporter version 1.8.2-r2 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-JT83966 Security fixes in prometheus-node-exporter 1.8.2-r1

Package prometheus-node-exporter version 1.8.2-r1 fixes 1 vulnerabilities: CVE-2026-42504...

PT-2026-66528

MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Bufferclear in ext/msgpack/buffer.c leaves rmem last, rmem end, and rmem owner stale after msgpack buffer shift chunk returns an rmem page to the shared pool, allowing a subseque...