EUVD-2026-48381

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/configgen/generator.go:86,108,119 interpolates the operator-supplied ListenHost and TunDevice fields raw into a text/template that produces the agent's config.yml...

CVE-2026-47722 nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/configgen/generator.go:86,108,119 interpolates the operator-supplied ListenHost and TunDevice fields raw into a text/template that produces the agent's config.yml...

USN-8602-1 libinput vulnerability

It was discovered that libinput did not properly escape device properties. A local attacker could possibly use this issue to inject arbitrary udev properties and execute arbitrary code as root...

USN-8602-1: libinput vulnerability

It was discovered that libinput did not properly escape device properties. A local attacker could possibly use this issue to inject arbitrary udev properties and execute arbitrary code as root...

MAL-2026-11038 Malicious code in svelte-streak-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dbfe79dd6fb079811b798a734de0a661605d420454d97a0635dbdaec621efd The package contains no static or traced indicators of exfiltration, install-time remote code execution, silent-relay, credential distribution,...

MINI-825F-JG4F-FGJ9

Bulletin has no description...

MINI-4MPV-646Q-CCWF

Bulletin has no description...

MINI-RGP2-3PRM-G2M2

Bulletin has no description...

MINI-7C88-HF44-3HFR

Bulletin has no description...

MINI-825W-4C52-RFJ9

Bulletin has no description...

Security update for multipath-tools

This update for multipath-tools fixes the following issues Update to version 0.7.9+238+suse.1249506. kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk image bsc1268145. kpartx: missing bounds check can lead to a DASD VOL1...

MINI-9GMR-X6X6-MC3J

Bulletin has no description...

MINI-4C28-PM55-F938

Bulletin has no description...

MINI-522C-FW5G-M5X5

Bulletin has no description...

MINI-P43R-HCMR-5WWG

Bulletin has no description...

MINI-423G-79RF-4XJ2

Bulletin has no description...

MINI-VCF8-638W-82FM

Bulletin has no description...

MINI-9848-XRHQ-282P

Bulletin has no description...

MINI-6MFC-H745-F78R

Bulletin has no description...

PYSEC-2026-3491 OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...