CLSA-2026-1790176219 TuxCare security update for multer (2 CVEs)

TuxCare rebuilt multer to address 2 CVEs. Fixed in 1.4.5-lts.1-tuxcare.9...

CLSA-2026-1790176101 TuxCare security update for fast-uri (2 CVEs)

TuxCare rebuilt fast-uri to address 2 CVEs. Fixed in 2.4.5-tuxcare.1...

CLSA-2026-1790174669 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.2.3-tuxcare.1...

CLSA-2026-1790173926 TuxCare security update for org.springframework (22 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 22 CVEs. Fixed in 5.2.25.RELEASE-tuxcare.1...

CLSA-2026-1790164156 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 6.2.2-tuxcare.1...

CLSA-2026-1790164081 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.5.0-tuxcare.1...

CLSA-2026-1790161979 TuxCare security update for @babel (2 CVEs)

TuxCare rebuilt 11 @babel packages to address 2 CVEs. Fixed in 7.23.0-tuxcare.1...

CLSA-2026-1790161647 TuxCare security update for org.springframework (25 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 25 CVEs. Fixed in 5.2.9.RELEASE-tuxcare.1...

CLSA-2026-1790161376 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.1...

CLSA-2026-1790159292 TuxCare security update for org.springframework.security (8 CVEs)

TuxCare rebuilt 19 org.springframework.security packages to address 8 CVEs. Fixed in 6.3.9-tuxcare.1...

CVE-2026-63452

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. A remote attacker can exploit this vulnerability by sending repeated, small Brotli compressed responses to the HTTP/1 parser. This can cause the system to perform expensive decompression...

Vulnerabilities found in Check Point VPN products

Check Point has addressed 2 critical vulnerabilities. The vulnerability with the identifier CVE-2026-85102 has a CVSS score of 9.8. This vulnerability resides in the VPN negotiation process of the Quantum Security Gateway and is caused by incorrect validation of certificate trust. As a result, an...

CLSA-2026-1790132153 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 19.0-rc3-tuxcare.1...

MAL-2026-16422 Malicious code in @httttt/mcp-npx-fetch-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73432c5cbb8e74b1a4b66e91fdbde0eda311176dbef0301b13605d75bdd299ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @httttt/mcp-npx-fetch-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73432c5cbb8e74b1a4b66e91fdbde0eda311176dbef0301b13605d75bdd299ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2026-105064

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against max message size. The size check ran only when assembly completed. By declaring body size = 2^63-1 and then streami...

PT-2026-105066

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, add vhost/2 calls rabbit data coercion:atomize keys/1 the unsafe variant using binary to atom on the vhost metadata map. The 20 MB management body limit fits 1M+ short keys. Admin-only. An...

PT-2026-97585

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.3.0 RabbitMQ versions prior to 4.2.6 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 3.13.15 Description An authenticated AMQP 0-9-1 client with publish permissions ca...

CVE-2026-67235: Allocation of Resources Without Limits or Throttling

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against maxmessagesize. The size check ran only when assembly completed. By declaring bodysize = 2^63-1 and then streaming...

CVE-2026-67220: Uncontrolled Resource Consumption

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic exchange, addbinding/3 reads the rjmserlangselector argument and passes it through erlscan:string/1 then erlparse:parseterm/1. erlscan:string/1 intern...