CVE-2026-39821 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-39821 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-27136 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-39821 affecting package containerized-data-importer for versions less than 1.62.0-5

CVE-2026-39821 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...

CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-5

CVE-2026-25680 affecting package kubevirt for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2025-67903

Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...

CVE-2026-45787 electerm's encrypt method not safe enough

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, constant KDF salt, and no MAC leads to confidentiality and integrity failures for synced bookmark/profile data. Attackers can crack common...

PT-2026-44776

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.5 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.5...

PT-2026-44782

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.5 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.5...

CVE-2026-45022

CVE-2026-45022 affects the Go Git library, go-git, where prior to v5.19.0 and v6.0.0-alpha.3 it may parse malformed commit/tag objects differently from upstream Git. The decoded representation can expose values differently and the commit signing/verification may operate on reconstructed data rath...

CVE-2026-8479

IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode BCI is...

CVE-2026-47784 affecting package memcached for versions less than 1.6.27-5

CVE-2026-47784 affecting package memcached for versions less than 1.6.27-5. A patched version of the package is available...

CVE-2026-47783 affecting package memcached for versions less than 1.6.27-5

CVE-2026-47783 affecting package memcached for versions less than 1.6.27-5. A patched version of the package is available...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Pillow [CVE-2026-40192]

Summary IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Pillow, due to a failure to limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attack CVE-2026-40192. Pillow is used in our speech runtimes. Thi...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in pyasn1 [CVE-2026-30922]

Summary IBM Watson Speech Services Cartridge is vulnerable to a denial of service in pyasn1 caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures CVE-2026-30922. Pyasn1 is used in our speech runtimes. This vulnerabilitiy has been addressed. Please read the detail...

CVE-2026-44431 affecting package python-urllib3 for versions less than 2.0.7-5

CVE-2026-44431 affecting package python-urllib3 for versions less than 2.0.7-5. A patched version of the package is available...

Advisory ROSA-SA-2026-3282

software: libssh 0.9.8 OS: ROSA-CHROME unaffected versions = libssh-0.9.8-5 affected versions libssh-0.9.8-5 CVE-ID: CVE-2026-0965 BDU-ID: None CVE-Crit: LOW CVE-DESC.: A vulnerability in libssh is related to the ability to open arbitrary files during configuration parsing. A local attacker could...

CVE-2026-35469 affecting package cri-tools for versions less than 1.32.0-5

CVE-2026-35469 affecting package cri-tools for versions less than 1.32.0-5. A patched version of the package is available...

Important Photon OS Security Update - PHSA-2026-5.0-90-0850

Updates of 'chromium' packages of Photon OS have been released...

yggdrasil security update

0.4.8-5 - Bump release for rebuild...

Insufficiently Protected Credentials

Overview sealed-env is an Encrypted .env files with optional TOTP unsealing for production deploys. Cross-stack with the Java port. One minimal CLI dependency. Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the process of embedding the TOTP secret in t...