GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apicurio-registry, neo4j, zipkin, apache-activemq-artemis, thingsboard, apache-pulsar, tez, management-api-for-apache-cassandra-5.0, celeborn...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, apache-nifi, infinispan, neo4j, strimzi-kafka-operator, wavefront-proxy, akhq, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, thingsboard, apache-pulsar, tez, flyway...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, apache-nifi, infinispan, neo4j, strimzi-kafka-operator, wavefront-proxy, akhq, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, thingsboard, apache-pulsar, tez, flyway...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apicurio-registry, neo4j, zipkin, apache-activemq-artemis, thingsboard, apache-pulsar, tez, management-api-for-apache-cassandra-5.0, celeborn...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, apache-nifi, infinispan, neo4j, strimzi-kafka-operator, wavefront-proxy, akhq, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, thingsboard, apache-pulsar, tez, flyway...

GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, apache-nifi, infinispan, neo4j, strimzi-kafka-operator, wavefront-proxy, akhq, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, thingsboard, apache-pulsar, tez, flyway...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, apache-nifi, infinispan, neo4j, strimzi-kafka-operator, wavefront-proxy, akhq, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, thingsboard, apache-pulsar, tez, flyway...

CVE-2026-59919 vulnerabilities

Vulnerabilities for packages: apicurio-registry, neo4j, zipkin, apache-activemq-artemis, thingsboard, apache-pulsar, tez, management-api-for-apache-cassandra-5.0, celeborn...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, apache-nifi, infinispan, neo4j, strimzi-kafka-operator, wavefront-proxy, akhq, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, thingsboard, apache-pulsar, tez, flyway...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apicurio-registry, neo4j, zipkin, apache-activemq-artemis, thingsboard, apache-pulsar, tez, management-api-for-apache-cassandra-5.0, celeborn...

CVE-2026-55831 vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, apache-nifi, infinispan, neo4j, strimzi-kafka-operator, wavefront-proxy, akhq, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, thingsboard, apache-pulsar, tez, flyway...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: apicurio-registry, cloudwatch-exporter, apache-nifi, infinispan, neo4j, strimzi-kafka-operator, wavefront-proxy, akhq, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, thingsboard, apache-pulsar, tez, flyway...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

Updated libevent packages fix security vulnerabilities

The updated packages fix some security vulnerabilities...

EUVD-2026-41116

AWS CLI: Overly permissive File Permissions...

CVE-2026-64255

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate stamask before ffs in BA session handlers Three BA session handlers use ffsbadata-stamask - 1 to derive a station ID without checking that stamask is non-zero. When stamask is zero, ffs returns 0 and...

CVE-2026-64253

In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PFBLOCKTS in copyprocess PFBLOCKTS is only set in blktimegetns when current-plug is non-NULL, and blkfinishplug clears it via blkflushplug before NULLing the plug pointer. copyprocess breaks the invariant by...

CVE-2026-64250

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stopthiscpu This is a port of MIPS commit 9f3f3bdc6d9dac1 "MIPS: smp: report dying CPU to RCU in stopthiscpu". smpsendstop parks all secondary CPUs in stopthiscpu. And the function marks the...

CVE-2026-64251

In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseqdebugfsseqnext pwrseqdebugfsseqnext declares 'next' with freeputdevice, which causes putdevice to be called on the returned pointer when the variable goes out of scope. This results in a...

CVE-2026-64248

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...