GHSA-993G-76C3-P5M4 vulnerabilities

Vulnerabilities for packages: openstack-placement-2026.1-fips, awx, ggshield, openstack-glance-2026.1, openstack-keystone-2025.1, netbox-fips, netbox, openstack-placement-2025.1, litellm, openstack-placement-2025.1-fips, openstack-placement-2025.2-fips, openstack-horizon-2026.1, kserve,...

CVE-2026-12023 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QQ7Q-F996-8XMG vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3276 vulnerabilities

Vulnerabilities for packages: python...

GHSA-5X54-5CG6-5439 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X86P-J2WX-WVVX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-H97P-MRQ3-8JWJ vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-12314

creationtimestamp| type| source ---|---|--- 2026-06-16 14:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofyezrli32v 2026-06-17 03:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mohd4ahicu27 2026-06-17 20:00:00+00:00| seen|...

CVE-2026-12017 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-34902

creationtimestamp| type| source ---|---|--- 2026-06-16 14:14:33+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mofybxl2vi2a...

GHSA-52X6-GQ3R-VPF4 pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. Patches This has been fixed in pypdf==6.13.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 3830...

CVE-2026-9307 Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities

A sensitive information disclosure security issue exists within the affected CompactLogix controllers. The controller's web server exposes CIP Connection IDs on the diagnostics webpage, which are accessible to any unauthenticated user on the network. This information can be leveraged by an attack...

DEBIAN-CVE-2026-12298

Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

CVE-2026-12297

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

CVE-2026-12324

Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...

CVE-2026-12320

Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

UBUNTU-CVE-2026-12299

JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

BIT-PARSE-2026-50008 Parse Server: Server option routeAllowList is bypassable through batch sub-requests

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8.0 to before version 9.9.1, the routeAllowList server option restricts external client access to a configured list of REST API routes. The check is only enforced as Express...

BIT-DISCOURSE-2026-44780 Discourse: Category queue reviewers can read raw incoming emails from queued posts

Discourse is an open-source discussion platform. From versions 2026.1.0 to before 2026.1.4, 2026.3.0 to before 2026.3.1, and 2026.4.0 to before 2026.4.1, ReviewableQueuedPostSerializer unconditionally included payload"rawemail" for posts that arrived via incoming email. Category moderation group...

CVE-2026-12330

CVE-2026-12330 corresponds to an issue in the Internationalization component with incorrect boundary conditions. Public disclosures in connected advisories confirm multiple Mozilla products are affected, including Firefox ESR and Thunderbird. Debian’s advisory shows the vulnerability affecting fi...