CVE-2025-39898 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39898 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39982 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39982 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39957 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39957 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39876 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39876 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39864 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39864 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39860 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39860 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39839 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39839 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39914 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39914 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39916 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39916 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39937 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39937 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39846 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39846 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39848 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39848 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39923 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39923 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39947 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39947 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

HSEC-2023-0002 Improper Verification of Cryptographic Signature

Improper Verification of Cryptographic Signature The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any access level. The version 2 of the specification mandate...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the /api/v4/teams/teamid/channels/searcharchived endpoint. An attacker can access information about archived public channels by sending crafted requests as a guest user. Remediation Upgrade...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the /api/v4/teams/teamid/channels/searcharchived endpoint. An attacker can access information about archived public channels by sending crafted requests as a guest user. Remediation Upgrade...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the /api/v4/teams/teamid/channels/searcharchived endpoint. An attacker can access information about archived public channels by sending crafted requests as a guest user. Remediation Upgrade...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of multi-factor authentication enforcement in WebSocket connections. An attacker can gain unauthorized access to sensitive information by establishing a WebSocket connection...