Chromium: CVE-2026-12467 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-48936

creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-26 02:31:44+00:00| seen|...

CVE-2026-56141

creationtimestamp| type| source ---|---|--- 2026-06-19 13:40:07+00:00| seen| https://bsky.app/profile/suriq.io/post/3monhqxqisu2b 2026-06-19 16:25:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monqyrh4sd2g 2026-06-21 12:07:15+00:00| seen|...

GHSA-QW6V-5FCF-5666 Network-AI: Improper Neutralization of Special Elements used in an OS Command

Summary The agent sandbox gates shell commands behind an allowlist SandboxPolicy.isCommandAllowed, which THREATMODEL.md calls the main control against a compromised agent Adversary 3.2. The allowlist glob-matches the whole command string, but ShellExecutor runs that string through /bin/sh -c. So...

EUVD-2026-38021

A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficient access control...

CVE-2026-12706

creationtimestamp| type| source ---|---|--- 2026-06-19 12:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monds67tmg2k...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: virtiobt: Does not validate the rxpkttype header length. The virtbtrxhandle function reads the pkttype byte from the RXskb and passes the remaining data to hcirecvframe for every event/ACL/SCO/ISO type. It does not...

Astra Linux – Vulnerability in Apache2

Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server, that malicious AJP server can send a malicious AJP message back to modproxyajp, causing it to write 4 bytes controlled by the attacker after the end of a heap-based...

ROOT-OS-DEBIAN-13-CVE-2026-47729 CVE-2026-47729 in rootio-squid - Patched by Root

Root has patched CVE-2026-47729 in the rootio-squid package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-12453

An insufficient validation of untrusted input flaw was found in the Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516448843...

CVE-2026-12456

An insufficient validation of untrusted input flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517124587...

Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.

Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data version 5.3.1 patch 6 Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname...

CVE-2026-11463

A security flaw has been identified in the USCiLab Cereal library that could affect the security and stability of applications utilizing it. Mitigation Since the vulnerability is triggered by processing malicious payloads, immediately restrict network access or input mechanisms that allow...

CVE-2026-54414

creationtimestamp| type| source ---|---|--- 2026-06-19 07:19:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3momsieefw62x 2026-06-19 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116775598633883960 2026-06-19 07:30:30+00:00| seen|...

yggdrasil-worker-package-manager security update

An update is available for yggdrasil-worker-package-manager. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list yggdrasil-worker-package-manager is a simple packag...

GHSA-M6QW-4CW2-HM4M vulnerabilities

Vulnerabilities for packages: py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-12.9, airflow-core, py3-vllm-cuda-13.0, airflow, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-12.9, lmcache-cuda-12.8...

SUSE CVE-2026-54293

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10.0-rc1, nltk.data.load in NLTK is vulnerable to path traversal via URL-encoded path separators and traversal segments...

CVE-2026-56075

creationtimestamp| type| source ---|---|--- 2026-06-19 01:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mom6n4ahpm2z...

PT-2026-55980

Name of the Vulnerable Software and Affected Versions Hugo versions 0.123.0 through 0.163.0 Description A regression in the virtual filesystem allows a symlink placed within a theme or local mount to read arbitrary files accessible to the user running the application. This occurs because the...

PT-2026-51030

Name of the Vulnerable Software and Affected Versions Microsoft Copilot affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to perform tampering over a network. Recommendations At th...