CVE-2025-38201 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-38201 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23074 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23074 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-22997 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-22997 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23084 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23084 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-30938

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.12 and 9.5.1-alpha.1, the requestKeywordDenylist security control can be bypassed by placing any nested object or array before a prohibited keyword in the request payload. This is...

CVE-2026-30941

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.14 and 9.5.2-alpha.1, NoSQL injection vulnerability allows an unauthenticated attacker to inject MongoDB query operators via the token field in the password reset and email...

CVE-2026-30938

Parse Server is affected by GHSA-Q342-9W2P-57FP, a vulnerability in the denylist keyword scan. The issue arises in the requestKeywordDenylist scanner: if a nested object/array appears before a prohibited keyword, the scanner exits prematurely, allowing bypass of the denylist. All deployments are ...

CVE-2026-30938

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.12 and 9.5.1-alpha.1, the requestKeywordDenylist security control can be bypassed by placing any nested object or array before a prohibited keyword in the request payload. This is...

pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID

A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service DoS f...

Debian: Security Advisory (DSA-6158-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the system.run process. An attacker can cause unauthorized commands to be persisted as trusted entries by submitting a shell command with an unquoted character,...

Authorization Bypass Through User-Controlled Key

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the system.run process. An attacker can bypass intended allowlist or approval mechanisms by supplying crafted environment variable...

CVE-2025-38635 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38635 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38542 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38542 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38693 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38693 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38609 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38609 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38583 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38583 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38516 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38516 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38602 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38602 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68365 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-68365 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...