RockyLinux 9 : nodejs:24 (RLSA-2026:47057)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47057 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed tar...

GHSA-8VR5-263F-X5R3

creationtimestamp| type| source ---|---|--- 2026-08-01 15:20:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrzrg36jmq2d...

Oracle Linux 9 : nodejs:24 (ELSA-2026-47057)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47057 advisory. - Fix CVE-2026-59873, CVE-2026-59874 node-tar in npm's bundled tar - Fix CVE-2026-13149 brace-expansion in npm's bundled brace-expansion Tenable has...

CVE-2026-58039

A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and 26...

EUVD-2026-51369

A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and 26...

JLSEC-2026-1027 ImageMagick: Policy Bypass can read disallowed files via symlink

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, an incorrect parsing of the filename can result in a policy bypass and read files disallowed by a security policy using a symlink. This issue has been patched i...

CLEANSTART-2026-KH48438 Security fixes in keycloak 26.5.7-r1

Package keycloak version 26.5.7-r1 fixes 24 vulnerabilities: CVE-2026-44893, CVE-2026-44249, CVE-2026-45416, CVE-2026-45536, CVE-2026-45673...

CLEANSTART-2026-XA75352 Security fixes in sonarqube 25.12.0.117093-r3

Package sonarqube version 25.12.0.117093-r3 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

CLEANSTART-2026-KA96375 Security fixes in sonarqube 26.4.0.121862-r2

Package sonarqube version 26.4.0.121862-r2 fixes 24 vulnerabilities: ghsa-445c-vh5m-36rj, ghsa-h383-gmxw-35v2, ghsa-3pxv-7cmr-fjr4, ghsa-6hg6-v5c8-fphq, ghsa-w9fj-cfpg-grvv...

CVE-2026-66749 Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server by supplying a valid 24-character hex string room parameter that matches no document in the database. Attackers can send a crafted GET /messages request causing an...

CVE-2026-58023

creationtimestamp| type| source ---|---|--- 2026-07-24 23:43:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgjss4sl32u 2026-07-28 17:22:15+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749 2026-08-27 11:48:03+00:00| seen|...

CVE-2026-55968

creationtimestamp| type| source ---|---|--- 2026-07-24 23:42:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgjqxumx22n 2026-07-29 00:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqonuqete2i...

CVE-2026-41608

creationtimestamp| type| source ---|---|--- 2026-07-24 23:32:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgj6zm2272g 2026-08-27 11:48:03+00:00| seen| https://gist.github.com/prajnak/06b8b2c74ce416478b826c460d0061f8...

CVE-2026-48144

creationtimestamp| type| source ---|---|--- 2026-07-24 23:22:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgin3c4se24 2026-07-27 14:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrn2pfmtd62e 2026-07-28 14:37:06+00:00| seen|...

CVE-2026-49158

creationtimestamp| type| source ---|---|--- 2026-07-24 23:13:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrgi4fyong2n 2026-07-27 17:01:51+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrnequj7z42o 2026-07-28 17:22:10+00:00| seen|...

CVE-2026-43871

creationtimestamp| type| source ---|---|--- 2026-07-24 23:09:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrghvod3i224 2026-07-29 01:37:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqrz55jbh2s 2026-08-27 11:48:03+00:00| seen|...

CVE-2026-65709

creationtimestamp| type| source ---|---|--- 2026-07-24 20:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5fngaum2d...

CVE-2026-66035

creationtimestamp| type| source ---|---|--- 2026-07-24 20:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5fadoc62q 2026-07-26 06:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrjrrbwwoz22 2026-07-27 09:06:04+00:00| seen|...

CVE-2026-65708

creationtimestamp| type| source ---|---|--- 2026-07-24 19:44:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrg4gq3cvv2y 2026-07-24 20:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5fgt7wu2d...

CVE-2026-48021

creationtimestamp| type| source ---|---|--- 2026-07-24 19:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg3jmp2rf2y 2026-07-24 20:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrg5dtc5uh2a 2026-07-25 03:00:27+00:00| seen|...