CVE-2026-56696

OpenHarness /issue and /prcomments slash commands lack remoteinvocable=False protection, allowing remote channel senders to write attacker-controlled Markdown into project context files. Admitted remote attackers can inject malicious content into .openharness/issue.md and .openharness/prcomments....

ROOT-APP-MAVEN-CVE-2022-36944 CVE-2022-36944 in io.root.org.scala-lang:scala-library - Patched by Root

Root has patched CVE-2022-36944 in the io.root.org.scala-lang:scala-library package for Root:Maven. Multiple fixed versions available...

CVE-2026-56379

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering...

CVE-2026-56371 ImageMagick - Memory Leak in TXT File Processing via Texture Attribute

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is not released when GetTypeMetrics fails, leaking memory each time a crafted TXT file with a texture attribute is process...

EUVD-2026-38430

Capgo before 12.128.2 contains a security control bypass vulnerability where the PostgREST/RLS plane accepts plaintext API keys through the capgkey header despite enforcehashedapikeys being enabled. Attackers can bypass org-level hashed-key enforcement by sending plaintext API keys directly to th...

SUSE-SU-2026:2524-1 Security update for libinput

This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation bsc1267852...

GHSA-VJHF-6XFR-5P9G vulnerabilities

Vulnerabilities for packages: virt-launcher, harvester-fips, virt-operator-fips, virt-operator, harvester, virt-controller-fips...

GHSA-25MH-HP8X-CGRV vulnerabilities

Vulnerabilities for packages: virt-launcher, harvester-fips, virt-operator-fips, virt-handler, harvester, docker-machine-driver-harvester, virt-controller-fips...

GHSA-F4XH-W4CJ-QXQ8 vulnerabilities

Vulnerabilities for packages: open-webui, py3-langsmith, puppygraph-python...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-rails, ruby3.4-rails, ruby3.3-fluentd-kubernetes-daemonset, logstash-fips, kube-fluentd-operator, ruby4.0-rails, logstash, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-rails,...

GHSA-4XPC-PV4P-PM3W vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-8378

creationtimestamp| type| source ---|---|--- 2026-06-23 08:16:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowxko6srr2l...

CVE-2026-8163

creationtimestamp| type| source ---|---|--- 2026-06-23 08:11:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowxbpfcwv2j...

CVE-2026-55654

creationtimestamp| type| source ---|---|--- 2026-06-23 07:53:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowwbexkdi2a...

CVE-2026-7842

creationtimestamp| type| source ---|---|--- 2026-06-23 07:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moww3fmi5f2f...

CVE-2026-8378

The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoint before storing it as post meta and rendering it back on the admin File Manager listing, leading to a Stored Cross-Site Scripting vulnerability...

vim: arbitrary command execution via modeline sandbox bypass

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...

Updated mumble packages fix security vulnerability

Mumble is prone to an out-of-bounds array access, which may result in denial of service client crash...

MGASA-2026-0228 Updated mumble packages fix security vulnerability

Mumble is prone to an out-of-bounds array access, which may result in denial of service client crash...

UBUNTU-CVE-2026-55655

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack ca...