CVE-2026-23075 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23075 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23193 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23193 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23074 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23074 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23071 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23071 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-22702 affecting package python-virtualenv for versions less than 20.36.1-1

CVE-2026-22702 affecting package python-virtualenv for versions less than 20.36.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68725 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-68725 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-26269 affecting package vim for versions less than 9.2.0088-1

CVE-2026-26269 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-71194 affecting package kernel for versions less than 6.6.126.1-1

CVE-2025-71194 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-23084 affecting package kernel for versions less than 6.6.126.1-1

CVE-2026-23084 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...

CVE-2026-30938

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.12 and 9.5.1-alpha.1, the requestKeywordDenylist security control can be bypassed by placing any nested object or array before a prohibited keyword in the request payload. This is...

CVE-2026-30941

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.14 and 9.5.2-alpha.1, NoSQL injection vulnerability allows an unauthenticated attacker to inject MongoDB query operators via the token field in the password reset and email...

CVE-2026-30938

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.12 and 9.5.1-alpha.1, the requestKeywordDenylist security control can be bypassed by placing any nested object or array before a prohibited keyword in the request payload. This is...

CVE-2026-30938

Parse Server is affected by GHSA-Q342-9W2P-57FP, a vulnerability in the denylist keyword scan. The issue arises in the requestKeywordDenylist scanner: if a nested object/array appears before a prohibited keyword, the scanner exits prematurely, allowing bypass of the denylist. All deployments are ...

pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID

A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service DoS f...

Debian: Security Advisory (DSA-6158-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization in the system.run process. An attacker can cause unauthorized commands to be persisted as trusted entries by submitting a shell command with an unquoted character,...

Authorization Bypass Through User-Controlled Key

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the system.run process. An attacker can bypass intended allowlist or approval mechanisms by supplying crafted environment variable...

CVE-2026-22998 affecting package kernel for versions less than 5.15.200.1-1

CVE-2026-22998 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22991 affecting package kernel for versions less than 5.15.200.1-1

CVE-2026-22991 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40040 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-40040 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...