CLSA-2026-1778633134 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.10...

CLSA-2026-1777336759 TuxCare security update for yargs-parser (1 CVE)

TuxCare rebuilt yargs-parser to address 1 CVE. Fixed in 13.1.2-tuxcare.1...

CLSA-2026-1777336745 TuxCare security update for mysql2 (1 CVE)

TuxCare rebuilt mysql2 to address 1 CVE. Fixed in 2.3.3-tuxcare.4...

CLSA-2026-1777077481 TuxCare security update for marked (1 CVE)

TuxCare rebuilt marked to address 1 CVE. Fixed in 4.0.6-tuxcare.1...

CLSA-2026-1776991065 TuxCare security update for ms (1 CVE)

TuxCare rebuilt ms to address 1 CVE. Fixed in 0.7.2-tuxcare.2...

CLSA-2026-1775781186 TuxCare security update for 137 packages (1 CVE)

TuxCare rebuilt 137 packages to address 1 CVE. Fixed in 7.12.5-tuxcare.1...

CLSA-2026-1774916714 TuxCare security update for node-notifier (1 CVE)

TuxCare rebuilt node-notifier to address 1 CVE. Fixed in 5.4.5-tuxcare.1...

CLSA-2026-1774657386 TuxCare security update for http-proxy-middleware (1 CVE)

TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 0.19.1-tuxcare.1...

CLSA-2026-1774225203 TuxCare security update for bson (1 CVE)

TuxCare rebuilt bson to address 1 CVE. Fixed in 1.0.9-tuxcare.1...

CLSA-2026-1774225187 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.13.3-tuxcare.1...

CLSA-2026-1773706623 TuxCare security update for requirejs (1 CVE)

TuxCare rebuilt requirejs to address 1 CVE. Fixed in 2.1.22-tuxcare.1...

CLSA-2026-1773101686 TuxCare security update for com.fasterxml.woodstox:woodstox-core (1 CVE)

TuxCare rebuilt com.fasterxml.woodstox:woodstox-core to address 1 CVE. Fixed in 5.3.0-tuxcare.1...

CLSA-2026-1772583201 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.1...

CLSA-2026-1770336550 TuxCare security update for org.bouncycastle (1 CVE)

TuxCare rebuilt 16 org.bouncycastle packages to address 1 CVE. Fixed in 1.76-tuxcare.2...

CVE-2026-68494 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...

GHSA-8359-H9FX-J6V9 vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-WJV6-JCFJ-MF9R vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-VX7X-VCC2-C44G vulnerabilities

Vulnerabilities for packages: label-studio...

GHSA-6FHJ-CGMM-XFX6 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

ROOT-APP-MAVEN-CVE-2024-29857 CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2024-29857 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...