Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core

Summary Security Vulnerabilities have been addressed in IBM Sovereign Core Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding ...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in brace-expansion(CVE-2026-102276, CVE-2026-102277, CVE-2026-102278)

Summary IBM Db2 Developer Extension is affected by vulnerability in brace-expansionCVE-2026-102276, CVE-2026-102277, CVE-2026-102278 Vulnerability Details CVEID:CVE-2026-102276 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to...

Important: nodejs24

Issue Overview: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.19, 2.1.5, 3.0.7, and 5.0.10, crafted brace patterns can exhaust the native stack in parseCommaParts because parseCommaParts recursively processes the remainder once per bra...

CVE-2026-108073

The SureCart WordPress plugin, in versions prior to 4.9.5 , is vulnerable to an unauthenticated private catalog data disclosure. The root cause is that the plugin fails to restrict related objects or strip private fields when an anonymous visitor reads a single upsell funnel via the REST API . Th...

CVE-2026-108073 SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter

The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST API, nor strip private fields from those objects, allowing unauthenticated users to read merchant-private catalog data such as...

CVE-2026-108073 SureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' Parameter

The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST API, nor strip private fields from those objects, allowing unauthenticated users to read merchant-private catalog data such as...

PT-2026-120609

WarehousePG WHPG 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability CWE-862 in the built-in cluster expansion functions gp expand lock catalog and gp expand bump version. Any authenticated database role can run them, and neither checks privileges. ...

GO-2026-6726 Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts) in code.vikunja.io/api

Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...

PT-2026-118041

Vikunja: API token scopes bypassed via task expand parameter comments, reactions, time entry counts in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...

Astra Linux – Vulnerability in Nasm

In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs due to a malicious .asm file during the call to settextfree from expandonesmacro in asm/preproc.c...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: The issue with bitmap corruption when using CLOSERANGEUNSHARE in closerange has been fixed. The function copyfdbitmapsnew, old, count is expected to copy the first count/BITSPERLONG bits from old-fullfdsbits and fill the rest wit...

CVE-2026-76665

A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow...

CVE-2026-76666

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...

CVE-2026-76667

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...

CVE-2026-76667

A security vulnerability in HPE NonStop EXPAND allows for an out-of-bounds memory read . This flaw could lead to memory corruption , buffer overflows , or stack overflows on the local system. Vulnerable software includes EXPAND T9057 (versions T9057L02^AIG and earlier). HPE has released fixes; us...

CVE-2026-76667 HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...

EUVD-2026-101828

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...

CVE-2026-76667 HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...

CVE-2026-76666 HPE NonStop EXPAND - Out-of-Bounds memory read

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...

CVE-2026-76666

A security vulnerability in HPE NonStop EXPAND may result in an out-of-bounds memory read (CWE-125). The affected software version is T9057 - T9057L02^AIG and earlier . While the provided documentation lists several vulnerabilities for HPE NonStop products, the specific remediation for this CVE I...