Amazon Linux 2 : python-jwcrypto, --advisory ALAS2-2026-3254 (ALAS-2026-3254)

The version of python-jwcrypto installed on the remote host is prior to 0.4.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3254 advisory. JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker...

CVE-2026-32147 affecting package erlang for versions less than 26.2.5.20-1

CVE-2026-32147 affecting package erlang for versions less than 26.2.5.20-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-41411 affecting package vim for versions less than 9.2.0392-1

CVE-2026-41411 affecting package vim for versions less than 9.2.0392-1. An upgraded version of the package is available that resolves this issue...

GHSA-J7RW-325J-2RMX Duplicate Advisory: Grav has Insecure Deserialization in File Cache

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gwfr-jfjf-92vv. This link is maintained to preserve external references. Original Description A vulnerability was found in Grav CMS up to 1.7.49.5/2.0.0-beta.1. Affected by this vulnerability is the function...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-015470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-015470 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-015462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-015462 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculatio...

Ubuntu 25.10 / 26.04 LTS : Pillow vulnerability (USN-8211-1)

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8211-1 advisory. It was discovered that Pillow incorrectly handled certain FITS images. An attacker could possibly use this issue to cause Pillow to consume resources,...

[SECURITY] Fedora 42 Update: flatpak-1.16.6-1.fc42

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information...

[SECURITY] Fedora 43 Update: vim-9.2.390-1.fc43

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

[SECURITY] Fedora 43 Update: chromium-147.0.7727.116-1.fc43

Chromium is an open-source web browser, powered by WebKit Blink...

Grav CMS 输入验证错误漏洞

Grav CMS is a file-based content management system developed under the open-source Grave project. Versions of Grav CMS prior to 1.7.49.5 and 2.0.0-beta.1 contain a vulnerability related to input validation errors. This vulnerability stems from a function in the component Cache Value Handler,...

CVE-2026-34308 affecting package mysql for versions less than 8.0.46-1

CVE-2026-34308 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-35237 affecting package mysql for versions less than 8.0.46-1

CVE-2026-35237 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22009 affecting package mysql for versions less than 8.0.46-1

CVE-2026-22009 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21998 affecting package mysql for versions less than 8.0.46-1

CVE-2026-21998 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-41079 affecting package cups for versions less than 2.4.18-1

CVE-2026-41079 affecting package cups for versions less than 2.4.18-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34293 affecting package mysql for versions less than 8.0.46-1

CVE-2026-34293 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22015 affecting package mysql for versions less than 8.0.46-1

CVE-2026-22015 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22001 affecting package mysql for versions less than 8.0.46-1

CVE-2026-22001 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34271 affecting package mysql for versions less than 8.0.46-1

CVE-2026-34271 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...