MINI-MRWP-RJQ2-3J9M

Bulletin has no description...

MINI-W9RV-MQXF-HC73

Bulletin has no description...

CVE-2026-18401 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, solr, cassandra-fips, kayenta, apache-tika-fips, ruby4.0-jrjackson, spark-kubernetes-operator, logstash, guacamole-client, wso2is, neo4j, opensearch-fips, s3proxy, cassandra-reaper, jenkins-plugin-manager, kafka-fips,...

MINI-VMGX-V8MF-3GW2

Bulletin has no description...

MINI-RPQH-78WG-V5GH

Bulletin has no description...

MINI-2MWW-MV9M-55MQ

Bulletin has no description...

MINI-7F3J-CGFH-Q449

Bulletin has no description...

CVE-2026-77121 Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields

A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository's components to permanently fail until an administrator repairs the underlying data. Only t...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

MINI-85Q7-75VR-F37J

Bulletin has no description...

MINI-CH82-P36X-3JG7

Bulletin has no description...

MINI-CX4J-9M8V-VVW3

Bulletin has no description...

MINI-6QJM-4W53-XM4R

Bulletin has no description...

MINI-RQPX-QMJM-JR89

Bulletin has no description...

MINI-MVQ4-WJ32-CJ8G

Bulletin has no description...

MINI-H97X-VH2V-65QP

Bulletin has no description...

MINI-JJ6W-PQ5H-P86V

Bulletin has no description...

MINI-7WXV-8GWG-XJ7V

Bulletin has no description...

MINI-5P3H-29CJ-FFFG

Bulletin has no description...

GHSA-F794-5JV7-7672 NLTK: Downloader.download follows hardlinks and overwrites outside-root files

Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but it still treats pre-existing hardlinks inside the install tree as ordinary in-root files. A normal package install can therefore overwrite an outside-root inode through that hardlink. Details - Vulnerability type:...